Automated Malware Analysis IOC Report for

Details

Name:	00000000.00000003.596356584.0000000002EFB000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	2EFB000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.496302346.0000000005498000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5498000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.634662490.000000000519E000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	519E000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.496060659.0000000005498000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5498000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.551334831.0000000003078000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3078000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.641344031.0000000002D7E000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	2D7E000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000002.00000003.421788000.0000000000D80000.00000040.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page execute and read and write
Base address:	D80000
Size:	86016

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000003.493133221.0000000004749000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4749000
Size:	57344

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.589279507.000000000531B000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	531B000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.504571496.0000000003078000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3078000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.496187954.0000000005498000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5498000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.504708156.0000000003078000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3078000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000002.819250221.0000000002C80000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2C80000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000002.821214990.0000000005498000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5498000
Size:	12288

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.542255156.0000000005498000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5498000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000003.458084901.0000000000820000.00000040.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page execute and read and write
Base address:	820000
Size:	86016

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000002.819268339.0000000003078000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3078000
Size:	12288

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.496119456.0000000005498000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5498000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.504834428.0000000003078000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3078000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.504651510.0000000003078000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3078000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.459748409.0000000000890000.00000040.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page execute and read and write
Base address:	890000
Size:	86016

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000004.00000003.450860351.0000000002FD0000.00000040.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	2FD0000
Size:	86016

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.423195550.0000000000D80000.00000040.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page execute and read and write
Base address:	D80000
Size:	86016

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.504765333.0000000003078000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3078000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000002.820567209.0000000004E29000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4E29000
Size:	57344

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.504796143.0000000003078000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3078000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.496092224.0000000005498000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5498000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.504531856.0000000003078000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3078000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.496255647.0000000005498000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5498000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000002.821310173.000000000549D000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	549D000
Size:	12288

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.504616461.0000000003078000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3078000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.496153244.0000000005498000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5498000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000002.819100775.0000000002A69000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2A69000
Size:	57344

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.496278714.0000000005498000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5498000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000004.00000002.522366287.0000000004CCD000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4CCD000
Size:	12288

Details

Name:	00000012.00000002.549994086.00007FF5C88C7000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C88C7000
Size:	49152

Details

Name:	00000005.00000002.495312289.0000000006330000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6330000
Size:	4096

Details

Name:	00000002.00000000.472314595.0000000002F1E000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	2F1E000
Size:	8192

Details

Name:	00000010.00000002.510071825.00007FF524BFF000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF524BFF000
Size:	8192

Details

Name:	00000002.00000002.500893628.0000000002BCB000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BCB000
Size:	20480

Details

Name:	0000001A.00000003.636745204.000001DD87C49000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD87C49000
Size:	4096

Details

Name:	0000000F.00000003.496286221.000000000070A000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	70A000
Size:	4096

Details

Name:	0000000F.00000003.500014876.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000002.00000000.471977722.00000000029C9000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	29C9000
Size:	8192

Details

Name:	0000000C.00000003.482932228.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000002.520538911.0000000004600000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4600000
Size:	118784

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	0000001A.00000002.636980663.00000046931F7000.00000004.00000010.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	46931F7000
Size:	36864

Details

Name:	00000004.00000002.521306086.00000000029C9000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29C9000
Size:	8192

Details

Name:	0000000C.00000003.494415456.0000000005005000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5005000
Size:	32768

Details

Name:	00000017.00000002.586914387.00007DF5CC452000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5CC452000
Size:	4096

Details

Name:	00000005.00000002.495010344.000000000481C000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	481C000
Size:	16384

Details

Name:	0000000C.00000002.497702077.0000000002754000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2754000
Size:	4096

Details

Name:	0000000F.00000002.519530872.000000000056E000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	56E000
Size:	8192

Details

Name:	00000005.00000002.494932837.00000000042EE000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	42EE000
Size:	8192

Details

Name:	0000000F.00000003.514106498.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000010.00000002.507985921.00007DF532A60000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF532A60000
Size:	4096

Details

Name:	0000000C.00000003.492499019.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000000.00000002.819695108.000000006E9D0000.00000020.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	6E9D0000
Size:	135168

Details

Name:	00000002.00000000.473181577.0000000002AFF000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AFF000
Size:	16384

Details

Name:	00000017.00000002.586876626.00007DF5CC440000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5CC440000
Size:	4096

Details

Name:	00000000.00000002.820104604.000000007F610000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F610000
Size:	20480

Details

Name:	00000016.00000002.818394460.0000016F7AC60000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	16F7AC60000
Size:	4096

Details

Name:	0000000F.00000003.514839631.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000003.00000003.459831652.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	00000000.00000002.819438489.0000000003B4E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3B4E000
Size:	8192

Details

Name:	00000010.00000002.510705413.00007FF524DF1000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF524DF1000
Size:	16384

Details

Name:	00000005.00000002.495032410.000000000485E000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	485E000
Size:	8192

Details

Name:	00000003.00000002.818040439.00000000029EB000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29EB000
Size:	4096

Details

Name:	00000004.00000002.521412262.0000000002AEE000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AEE000
Size:	28672

Details

Name:	0000000C.00000003.486499059.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000001A.00000002.637085771.000001DD87B30000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1DD87B30000
Size:	102400

Details

Name:	00000002.00000000.473940235.00000000031CA000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	heap private
Protect:	page read and write
Base address:	31CA000
Size:	12288

Details

Name:	0000001A.00000002.637007388.000000469337F000.00000004.00000010.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	469337F000
Size:	4096

Details

Name:	0000000F.00000003.501861449.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000000.00000003.684927021.0000000000E25000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E25000
Size:	4096

Details

Name:	00000005.00000002.494169880.00000000029F1000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29F1000
Size:	36864

Details

Name:	00000017.00000002.587411141.00007FF5BE717000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BE717000
Size:	49152

Details

Name:	0000000F.00000003.503035855.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000C.00000003.480167740.0000000003094000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3094000
Size:	4096

Details

Name:	00000004.00000000.487156648.0000000002EEB000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	2EEB000
Size:	20480

Details

Name:	0000000C.00000003.482070872.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000002.00000000.472166163.0000000002BC4000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BC4000
Size:	8192

Details

Name:	0000000F.00000003.515647383.0000000002B90000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2B90000
Size:	4096

Details

Name:	00000005.00000002.493904873.000000000097A000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	97A000
Size:	69632

Details

Name:	00000003.00000002.817284259.00000000009C0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	9C0000
Size:	102400

Details

Name:	0000000F.00000003.498290698.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000002.00000000.473249702.0000000002B4D000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B4D000
Size:	32768

Details

Name:	00000002.00000000.473101656.0000000000DA4000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	DA4000
Size:	4096

Details

Name:	0000000F.00000003.499463143.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000002.519750588.00000000007B0000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	7B0000
Size:	4096

Details

Name:	0000000F.00000000.493962277.0000000000180000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	180000
Size:	8192

Details

Name:	00000005.00000002.495050737.0000000004860000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4860000
Size:	4096

Details

Name:	0000000F.00000003.513884776.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000004.00000003.495283457.0000000003200000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3200000
Size:	4096

Details

Name:	00000003.00000003.461371850.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	00000004.00000000.486931105.0000000002B4D000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B4D000
Size:	32768

Details

Name:	0000000C.00000002.497912708.00000000027E5000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27E5000
Size:	12288

Details

Name:	00000004.00000002.521485293.0000000002B26000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B26000
Size:	8192

Details

Name:	00000003.00000003.434882856.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	0000001A.00000002.637977427.00007DF596050000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF596050000
Size:	12288

Details

Name:	0000000C.00000003.481982786.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000003.513730608.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000001A.00000002.638184028.00007FF587FA7000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF587FA7000
Size:	4096

Details

Name:	0000001A.00000002.637910927.000001DD88B00000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD88B00000
Size:	8192

Details

Name:	0000000F.00000003.502637556.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.479044501.0000000003104000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3104000
Size:	8192

Details

Name:	0000000F.00000003.515785705.0000000004659000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4659000
Size:	36864

Details

Name:	0000000F.00000003.514983916.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000001A.00000002.638748935.00007FF5882F0000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5882F0000
Size:	4096

Details

Name:	0000000F.00000003.498368528.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000003.00000002.817419622.00000000009F0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	9F0000
Size:	4096

Details

Name:	0000000C.00000002.497677888.0000000000C05000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	C05000
Size:	4096

Details

Name:	00000017.00000002.586447966.00000239306F0000.00000004.00000040.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	239306F0000
Size:	4096

Details

Name:	00000005.00000002.495110873.0000000004C58000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4C58000
Size:	12288

Details

Name:	00000002.00000003.424811503.0000000002F82000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F82000
Size:	28672

Details

Name:	0000000F.00000003.496732066.000000000074A000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	74A000
Size:	20480

Details

Name:	0000000C.00000003.485460221.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000017.00000002.587517898.00007FF5BE7C4000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BE7C4000
Size:	20480

Details

Name:	0000000F.00000002.520185872.00000000026A6000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26A6000
Size:	8192

Details

Name:	0000000F.00000000.493932357.00000000000D0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	D0000
Size:	102400

Details

Name:	00000004.00000000.486950972.0000000002B5B000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B5B000
Size:	12288

Details

Name:	00000000.00000003.550148471.0000000000DB0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DB0000
Size:	4096

Details

Name:	0000000F.00000003.502403436.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000002.00000000.473091105.0000000000D90000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	D90000
Size:	12288

Details

Name:	00000009.00000002.771380030.000002389A628000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2389A628000
Size:	61440

Details

Name:	00000005.00000003.493180125.00000000047C8000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	47C8000
Size:	4096

Details

Name:	0000000F.00000003.507093459.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000004.00000000.486941565.0000000002B56000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B56000
Size:	16384

Details

Name:	0000000F.00000003.502561393.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000000.00000002.817942462.0000000000CE0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	CE0000
Size:	4096

Details

Name:	00000002.00000000.472308802.0000000002EDD000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	2EDD000
Size:	12288

Details

Name:	0000000F.00000002.520425256.000000000277C000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	277C000
Size:	4096

Details

Name:	0000000F.00000003.496015053.0000000004501000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4501000
Size:	172032

Details

Name:	00000004.00000000.489421697.0000000002B26000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B26000
Size:	8192

Details

Name:	0000000C.00000003.484559246.0000000005360000.00000004.00000040.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5360000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000003.00000003.492544677.0000000002E40000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2E40000
Size:	4096

Details

Name:	00000004.00000000.486710246.0000000000F65000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	F65000
Size:	12288

Details

Name:	00000004.00000002.521588763.0000000002B56000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B56000
Size:	16384

Details

Name:	0000000F.00000003.497981768.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000002.00000000.473437547.0000000002EDD000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	2EDD000
Size:	12288

Details

Name:	00000003.00000003.495450667.0000000002F3E000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F3E000
Size:	4096

Details

Name:	0000000C.00000002.499337989.0000000005A0E000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5A0E000
Size:	8192

Details

Name:	0000000C.00000003.483823587.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000003.513986553.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000002.00000000.472364701.0000000002F7F000.00000004.00000020.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	2F7F000
Size:	40960

Details

Name:	0000001B.00000000.606062985.00007DF5B6BC0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5B6BC0000
Size:	12288

Details

Name:	0000000C.00000003.486794892.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000001A.00000002.637499798.000001DD87D02000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD87D02000
Size:	16384

Details

Name:	0000000C.00000002.497690216.0000000000CA8000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	CA8000
Size:	4096

Details

Name:	00000002.00000000.471971499.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	00000004.00000002.521912215.0000000002F50000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2F50000
Size:	4096

Details

Name:	00000004.00000002.521693503.0000000002BC4000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BC4000
Size:	8192

Details

Name:	0000000F.00000003.501451272.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000000.476892878.0000000002EC0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2EC0000
Size:	8192

Details

Name:	0000000F.00000003.515677304.0000000002B90000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2B90000
Size:	4096

Details

Name:	0000001A.00000003.616496387.000001DD885A2000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD885A2000
Size:	8192

Details

Name:	0000000C.00000003.480023314.00000000030CA000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30CA000
Size:	4096

Details

Name:	00000017.00000002.586833165.0000023930E50000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	23930E50000
Size:	4096

Details

Name:	0000001A.00000002.637559168.000001DD87ED0000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1DD87ED0000
Size:	4096

Details

Name:	00000005.00000002.494581059.0000000002B29000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B29000
Size:	32768

Details

Name:	00000004.00000000.492636343.000000006EA3E000.00000004.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page read and write
Base address:	6EA3E000
Size:	4096

Details

Name:	0000000F.00000003.501423302.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.480579516.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000001B.00000002.619162620.00007FF5A8F24000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A8F24000
Size:	20480

Details

Name:	0000001A.00000002.637165126.000001DD87C00000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD87C00000
Size:	73728

Details

Name:	00000010.00000002.510183551.00007FF524C75000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF524C75000
Size:	4096

Details

Name:	0000000C.00000002.498540254.0000000002F20000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2F20000
Size:	16384

Details

Name:	00000010.00000002.507528412.00000286D8E13000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	286D8E13000
Size:	86016

Details

Name:	00000003.00000002.818794798.0000000002EC0000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2EC0000
Size:	32768

Details

Name:	0000000C.00000003.485449066.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000009.00000002.771301453.000002389A5D0000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2389A5D0000
Size:	4096

Details

Name:	0000000C.00000002.499371778.000000007F480000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F480000
Size:	20480

Details

Name:	0000000F.00000003.502479221.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000003.496597801.000000000072D000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	72D000
Size:	4096

Details

Name:	00000002.00000002.501957593.000000007FAA0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FAA0000
Size:	4096

Details

Name:	0000001B.00000003.617606764.000001B9C7BB1000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B9C7BB1000
Size:	20480

Details

Name:	0000000F.00000003.517473310.00000000006EF000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6EF000
Size:	77824

Details

Name:	0000000C.00000003.479764896.0000000004FF7000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FF7000
Size:	20480

Details

Name:	00000002.00000000.472672314.000000007F990000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F990000
Size:	20480

Details

Name:	00000010.00000002.510661264.00007FF524DDA000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF524DDA000
Size:	12288

Details

Name:	0000000F.00000002.520808686.0000000004D9F000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4D9F000
Size:	4096

Details

Name:	00000005.00000002.493534221.0000000000890000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	890000
Size:	20480

Details

Name:	0000000F.00000003.496516506.0000000000704000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	704000
Size:	4096

Details

Name:	0000000C.00000002.498275551.000000000299B000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	299B000
Size:	36864

Details

Name:	00000004.00000000.486827663.0000000002AFF000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AFF000
Size:	16384

Details

Name:	0000000C.00000000.475681154.0000000002EC0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2EC0000
Size:	8192

Details

Name:	0000000C.00000003.486436239.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000003.00000002.818583709.0000000002BBB000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BBB000
Size:	12288

Details

Name:	0000000C.00000002.499232259.0000000005870000.00000004.00000040.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5870000
Size:	4096

Details

Name:	0000000C.00000003.483678040.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.480557965.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000001A.00000002.637886505.000001DD885A3000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD885A3000
Size:	32768

Details

Name:	00000004.00000002.521920704.0000000002F70000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2F70000
Size:	16384

Details

Name:	00000003.00000003.812647557.0000000002FB2000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FB2000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000F.00000003.497099208.0000000000744000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	744000
Size:	4096

Details

Name:	0000000C.00000003.492993818.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000004.00000000.490752398.0000000003290000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	3290000
Size:	36864

Details

Name:	00000004.00000000.489460720.0000000002B35000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B35000
Size:	16384

Details

Name:	00000000.00000002.818919984.0000000002500000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2500000
Size:	4096

Details

Name:	00000002.00000002.499768049.0000000000BB8000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	BB8000
Size:	12288

Details

Name:	0000001A.00000003.623334428.000001DD885A5000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD885A5000
Size:	200704

Details

Name:	00000005.00000002.493493542.00000000007F0000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	7F0000
Size:	20480

Details

Name:	00000004.00000000.487783304.00000000075AC000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	75AC000
Size:	16384

Details

Name:	0000000F.00000003.500196654.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000004.00000000.487312769.00000000031F0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	31F0000
Size:	4096

Details

Name:	0000000F.00000003.505914112.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.479036787.00000000030FE000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30FE000
Size:	8192

Details

Name:	00000017.00000002.586358980.0000006CA317B000.00000004.00000010.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	6CA317B000
Size:	20480

Details

Name:	0000000F.00000003.507938130.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000000.00000003.594402743.0000000000E00000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E00000
Size:	155648

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	0000000C.00000002.499405034.000000007F582000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F582000
Size:	4096

Details

Name:	00000017.00000002.586583776.0000023930829000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	23930829000
Size:	73728

Details

Name:	00000002.00000000.473240272.0000000002B3F000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B3F000
Size:	24576

Details

Name:	00000010.00000002.507971256.00007DF532A50000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF532A50000
Size:	4096

Details

Name:	00000017.00000003.585037367.0000023930850000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	23930850000
Size:	126976

Details

Name:	00000000.00000002.819287276.000000000307D000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	307D000
Size:	12288

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.817445088.00000000005B6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5B6000
Size:	4096

Details

Name:	0000000C.00000003.478998914.00000000030E1000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30E1000
Size:	4096

Details

Name:	00000005.00000002.494471154.0000000002B16000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B16000
Size:	4096

Details

Name:	0000000F.00000002.519334444.000000000012C000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12C000
Size:	16384

Details

Name:	0000000C.00000003.479421069.0000000003104000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3104000
Size:	8192

Details

Name:	0000000F.00000003.515060345.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000001A.00000002.638697819.00007FF5882DD000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5882DD000
Size:	4096

Details

Name:	0000000C.00000003.491330826.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000003.00000003.444391757.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	0000000F.00000002.520894309.0000000004EEF000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4EEF000
Size:	4096

Details

Name:	0000000F.00000003.497170980.000000000074A000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	74A000
Size:	20480

Details

Name:	0000000F.00000003.514266768.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000001B.00000003.617753215.000001B9C7B9A000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B9C7B9A000
Size:	20480

Details

Name:	0000000F.00000003.507050126.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000002.00000000.474174787.000000007FA90000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FA90000
Size:	4096

Details

Name:	0000000C.00000002.499146381.00000000051D0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	51D0000
Size:	12288

Details

Name:	0000000C.00000002.498318138.00000000029AC000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29AC000
Size:	4096

Details

Name:	00000003.00000003.459127447.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	0000000F.00000003.515282831.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000003.501260222.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000001A.00000002.636919286.0000004692E7B000.00000004.00000010.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4692E7B000
Size:	20480

Details

Name:	00000010.00000002.510649857.00007FF524DD4000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF524DD4000
Size:	20480

Details

Name:	00000004.00000002.521399431.0000000002ADE000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2ADE000
Size:	4096

Details

Name:	0000000C.00000003.485847313.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000005.00000002.494125922.0000000000DEF000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	DEF000
Size:	4096

Details

Name:	00000010.00000002.508206598.00007FF524580000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF524580000
Size:	16384

Details

Name:	0000000F.00000002.520261795.00000000026CF000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26CF000
Size:	20480

Details

Name:	00000002.00000000.472077036.0000000002B26000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B26000
Size:	8192

Details

Name:	00000002.00000000.473422212.0000000002E20000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	2E20000
Size:	4096

Details

Name:	00000003.00000003.541484208.00000000059F1000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	59F1000
Size:	835584

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	0000001A.00000003.611871099.000001DD88A20000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD88A20000
Size:	122880

Details

Name:	00000003.00000003.495486576.0000000002F59000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F59000
Size:	192512

Details

Name:	0000000F.00000002.519835016.0000000000A58000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	A58000
Size:	32768

Details

Name:	0000000C.00000003.496522154.0000000005052000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5052000
Size:	12288

Details

Name:	00000002.00000000.474181252.000000007FA92000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FA92000
Size:	4096

Details

Name:	0000000F.00000003.503444484.000000000074D000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	74D000
Size:	8192

Details

Name:	0000000F.00000003.501399788.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000003.00000002.818552320.0000000002B70000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B70000
Size:	73728

Details

Name:	00000002.00000000.472332993.0000000002F5A000.00000004.00000020.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	2F5A000
Size:	106496

Details

Name:	0000000F.00000002.520160869.0000000002671000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2671000
Size:	4096

Details

Name:	0000000C.00000003.481956984.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000005.00000002.494742390.0000000002B6C000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B6C000
Size:	4096

Details

Name:	0000000C.00000003.483447229.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.518900259.00000000007D0000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	7D0000
Size:	4096

Details

Name:	00000016.00000002.819382337.00007FF549D51000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF549D51000
Size:	12288

Details

Name:	0000000F.00000003.499828080.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000000.00000003.594983925.0000000003EAA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3EAA000
Size:	4096

Details

Name:	00000000.00000003.550130797.0000000000E00000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E00000
Size:	24576

Details

Name:	00000002.00000002.499983361.00000000029C9000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29C9000
Size:	8192

Details

Name:	0000000C.00000003.491644191.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000002.00000002.501265341.0000000002F7F000.00000004.00000020.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2F7F000
Size:	40960

Details

Name:	0000000C.00000003.491750147.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.501516016.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000003.507064488.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000003.514932943.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000002.00000003.457955071.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	00000004.00000002.522094417.0000000003260000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	3260000
Size:	32768

Details

Name:	0000000C.00000003.492470492.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000003.00000002.818677492.0000000002BDB000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BDB000
Size:	36864

Details

Name:	00000003.00000002.817970794.00000000029B2000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29B2000
Size:	16384

Details

Name:	0000000C.00000003.479559637.000000000310A000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	310A000
Size:	20480

Details

Name:	00000004.00000000.486773267.0000000002A0C000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A0C000
Size:	8192

Details

Name:	00000002.00000000.473538206.0000000002F8A000.00000004.00000020.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	2F8A000
Size:	65536

Details

Name:	00000016.00000002.818865205.00007FF549B77000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF549B77000
Size:	4096

Details

Name:	0000000C.00000003.484551923.0000000005380000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5380000
Size:	4096

Details

Name:	0000000C.00000003.483481160.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.491701826.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000001A.00000003.623970233.000001DD885A1000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD885A1000
Size:	16384

Details

Name:	0000000F.00000003.513663929.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000016.00000002.818159746.0000016F7A5C0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	16F7A5C0000
Size:	12288

Details

Name:	0000000C.00000003.479225567.00000000030ED000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30ED000
Size:	4096

Details

Name:	00000003.00000002.818223972.0000000002ADE000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2ADE000
Size:	4096

Details

Name:	0000001A.00000002.639007173.00007FF5883BA000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5883BA000
Size:	12288

Details

Name:	0000000C.00000003.492175229.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000001B.00000002.619310986.00007FF5A8F41000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A8F41000
Size:	16384

Details

Name:	0000000F.00000003.503480978.0000000004CC0000.00000004.00000040.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4CC0000
Size:	4096

Details

Name:	00000002.00000003.467550889.0000000004DF8000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4DF8000
Size:	4096

Details

Name:	00000005.00000003.461573250.0000000000920000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	920000
Size:	4096

Details

Name:	00000003.00000002.818234309.0000000002AE1000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AE1000
Size:	4096

Details

Name:	0000000C.00000003.492119814.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000C.00000003.478968020.00000000030CE000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30CE000
Size:	4096

Details

Name:	00000016.00000002.818189476.0000016F7AA20000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	16F7AA20000
Size:	49152

Details

Name:	0000000C.00000000.475694489.000000007F580000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F580000
Size:	4096

Details

Name:	00000003.00000003.457787714.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	0000000C.00000003.492689798.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000003.00000003.438731767.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	0000000F.00000002.519508890.0000000000455000.00000004.00000020.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	455000
Size:	40960

Details

Name:	0000000F.00000003.496614883.0000000000739000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	739000
Size:	4096

Details

Name:	00000002.00000003.453735567.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	0000000F.00000003.513699859.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000003.515000354.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000003.514446607.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.482985915.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000003.497859958.000000000074B000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	74B000
Size:	16384

Details

Name:	00000004.00000000.487416559.000000000329A000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	329A000
Size:	57344

Details

Name:	00000017.00000002.586565704.0000023930813000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	23930813000
Size:	86016

Details

Name:	00000012.00000002.550295936.00007FF5C897A000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C897A000
Size:	12288

Details

Name:	00000004.00000002.521960091.0000000002FC0000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2FC0000
Size:	20480

Details

Name:	00000017.00000002.587096250.00007FF5BE3D7000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BE3D7000
Size:	8192

Details

Name:	00000000.00000000.292196207.000000007F712000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F712000
Size:	4096

Details

Name:	00000012.00000002.545808545.0000020021F50000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	20021F50000
Size:	102400

Details

Name:	0000000F.00000003.509849822.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000C.00000003.491276004.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000003.00000002.818731710.0000000002BF2000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BF2000
Size:	8192

Details

Name:	00000010.00000002.510391983.00007FF524D10000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF524D10000
Size:	4096

Details

Name:	00000003.00000002.820950561.000000000503E000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	503E000
Size:	8192

Details

Name:	00000002.00000000.472374848.0000000002F8A000.00000004.00000020.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	2F8A000
Size:	65536

Details

Name:	0000000C.00000003.482544041.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.491821843.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000000.00000002.819361481.00000000038CD000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	38CD000
Size:	12288

Details

Name:	00000010.00000002.510407816.00007FF524D13000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF524D13000
Size:	12288

Details

Name:	00000000.00000003.459957192.0000000000770000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	770000
Size:	4096

Details

Name:	00000002.00000002.501684566.00000000031C7000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	31C7000
Size:	4096

Details

Name:	0000001A.00000003.625649446.000001DD885AB000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD885AB000
Size:	122880

Details

Name:	00000002.00000000.472064742.0000000002B16000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B16000
Size:	4096

Details

Name:	0000000F.00000003.497246944.0000000004617000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4617000
Size:	20480

Details

Name:	00000003.00000003.589115101.000000000549B000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	549B000
Size:	8192

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000002.820693023.0000000004EFC000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4EFC000
Size:	16384

Details

Name:	0000000C.00000002.498918482.0000000004FE0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4FE0000
Size:	77824

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	0000000F.00000000.495032679.0000000000180000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	180000
Size:	8192

Details

Name:	0000000F.00000003.515113980.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000010.00000002.507954877.00000286D9602000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	286D9602000
Size:	4096

Details

Name:	0000000C.00000002.497807548.000000000277D000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	277D000
Size:	4096

Details

Name:	00000004.00000000.492023832.00000000069E0000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	heap private
Protect:	page read and write
Base address:	69E0000
Size:	8192

Details

Name:	00000004.00000000.490108344.0000000002FA0000.00000040.00000001.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	2FA0000
Size:	4096

Details

Name:	0000001A.00000002.637394510.000001DD87CC3000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD87CC3000
Size:	16384

Details

Name:	0000001B.00000002.619224266.00007FF5A8F35000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A8F35000
Size:	16384

Details

Name:	0000000F.00000003.497949535.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000002.00000000.473008719.00000000009E0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	9E0000
Size:	4096

Details

Name:	00000002.00000003.455142280.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	00000004.00000002.522404072.00000000068AE000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	68AE000
Size:	8192

Details

Name:	0000000C.00000003.480225986.00000000030A0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30A0000
Size:	4096

Details

Name:	0000001A.00000002.637796533.000001DD88550000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD88550000
Size:	4096

Details

Name:	00000002.00000000.471961219.0000000000DA4000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	DA4000
Size:	4096

Details

Name:	0000000C.00000003.480174737.00000000030A0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30A0000
Size:	4096

Details

Name:	0000001A.00000003.613986778.000001DD8858B000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD8858B000
Size:	36864

Details

Name:	0000000F.00000003.496590750.0000000000727000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	727000
Size:	4096

Details

Name:	0000000F.00000003.502009969.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000003.00000003.459361828.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	00000000.00000003.776003237.0000000000E0B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E0B000
Size:	77824

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000002.00000003.459697328.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	00000002.00000003.459832351.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	00000000.00000003.596251999.0000000000DFC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DFC000
Size:	16384

Details

Name:	00000002.00000003.459093747.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	0000001B.00000002.618678491.000001B9C7FF0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B9C7FF0000
Size:	4096

Details

Name:	0000000C.00000003.480990504.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.500467200.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000003.500758715.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000003.501197046.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000003.00000003.495983600.0000000002F59000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F59000
Size:	196608

Details

Name:	0000000C.00000003.491370545.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000C.00000003.485863000.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.503594919.0000000004AC5000.00000004.00000040.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4AC5000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	0000000F.00000002.519580923.0000000000640000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	640000
Size:	4096

Details

Name:	0000000C.00000003.480516726.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000003.518970659.0000000004980000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4980000
Size:	57344

Details

Name:	00000012.00000002.545659796.000000853807B000.00000004.00000010.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	853807B000
Size:	20480

Details

Name:	0000000C.00000003.492812523.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.482634827.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000001A.00000002.637534061.000001DD87D13000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD87D13000
Size:	8192

Details

Name:	0000000C.00000003.482048603.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000003.00000000.294117827.000000007F142000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F142000
Size:	4096

Details

Name:	00000002.00000000.473013097.0000000000BB8000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	BB8000
Size:	12288

Details

Name:	00000009.00000002.772006286.00007FF57314C000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57314C000
Size:	8192

Details

Name:	00000002.00000003.458963408.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	0000000C.00000003.481805965.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000003.507288819.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000003.501905948.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000005.00000002.494490037.0000000002B1A000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B1A000
Size:	12288

Details

Name:	00000003.00000002.820642882.0000000004EA8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4EA8000
Size:	4096

Details

Name:	00000012.00000003.545218735.000002002208E000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2002208E000
Size:	36864

Details

Name:	00000003.00000003.462879587.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	00000012.00000002.548544573.00007FF5C87EB000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C87EB000
Size:	24576

Details

Name:	00000002.00000000.473259337.0000000002B56000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B56000
Size:	16384

Details

Name:	00000017.00000000.573486448.00007DF5CC442000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5CC442000
Size:	4096

Details

Name:	0000001A.00000003.636622011.000001DD8854B000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD8854B000
Size:	12288

Details

Name:	0000000F.00000003.497657090.00000000006FC000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6FC000
Size:	4096

Details

Name:	0000000C.00000003.482812465.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000000.00000003.776375892.0000000000E0B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E0B000
Size:	77824

Details

Name:	0000000C.00000003.479077909.00000000050C4000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50C4000
Size:	4096

Details

Name:	00000000.00000003.500980463.0000000003B10000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3B10000
Size:	4096

Details

Name:	0000000C.00000003.482827177.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000002.00000000.472082237.0000000002B29000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B29000
Size:	32768

Details

Name:	00000003.00000002.822269764.000000006E9C1000.00000020.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	6E9C1000
Size:	8192

Details

Name:	0000000C.00000003.478895057.00000000050C4000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50C4000
Size:	4096

Details

Name:	0000000F.00000003.515242294.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000001B.00000002.618793277.00007DF5B6BB0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5B6BB0000
Size:	4096

Details

Name:	00000002.00000003.463113815.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	00000000.00000003.684873113.0000000000E0B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E0B000
Size:	81920

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000017.00000002.587278567.00007FF5BE665000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BE665000
Size:	4096

Details

Name:	00000000.00000001.328214633.000000006E9C0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E9C0000
Size:	4096

Details

Name:	00000000.00000003.462970756.0000000000770000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	770000
Size:	4096

Details

Name:	00000016.00000002.817318176.00000009ADFFF000.00000004.00000010.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	9ADFFF000
Size:	4096

Details

Name:	0000000C.00000003.480060220.00000000030CE000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30CE000
Size:	4096

Details

Name:	00000003.00000003.460803270.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	00000005.00000002.495382623.000000007EFF0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7EFF0000
Size:	4096

Details

Name:	00000003.00000002.817801562.0000000000D6F000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	D6F000
Size:	4096

Details

Name:	0000000C.00000003.482459946.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.505201417.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000002.00000000.472126165.0000000002B56000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B56000
Size:	16384

Details

Name:	00000002.00000000.473001098.00000000009D0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	9D0000
Size:	16384

Details

Name:	0000000F.00000003.501970502.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000009.00000002.772026907.00007FF573175000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF573175000
Size:	12288

Details

Name:	00000017.00000002.587387709.00007FF5BE707000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BE707000
Size:	16384

Details

Name:	00000005.00000002.493418741.000000000047D000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	47D000
Size:	4096

Details

Name:	0000001A.00000003.615284870.000001DD885A0000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD885A0000
Size:	147456

Details

Name:	0000000F.00000002.519738061.000000000078E000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	78E000
Size:	8192

Details

Name:	00000002.00000000.473990739.0000000003550000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	3550000
Size:	4096

Details

Name:	00000003.00000002.822607211.000000006EA3F000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6EA3F000
Size:	16384

Details

Name:	00000000.00000002.819383957.00000000039CA000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	39CA000
Size:	24576

Details

Name:	00000000.00000002.817930886.0000000000CD0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	CD0000
Size:	4096

Details

Name:	0000000F.00000003.503538458.0000000004AC8000.00000004.00000040.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4AC8000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	0000000F.00000003.513722583.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000001A.00000003.619626886.000001DD88B02000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD88B02000
Size:	425984

Details

Name:	0000000F.00000003.502088121.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000003.509936259.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000C.00000003.485507520.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000004.00000000.489645729.0000000002BBF000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BBF000
Size:	16384

Details

Name:	00000004.00000000.489372622.0000000002B16000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B16000
Size:	4096

Details

Name:	0000000C.00000003.481735440.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.492945409.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.515048917.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000003.500156189.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000003.00000002.817723575.0000000000D61000.00000020.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	D61000
Size:	45056

Details

Name:	00000012.00000002.545732308.000000853827F000.00000004.00000010.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	853827F000
Size:	4096

Details

Name:	00000000.00000003.730624732.0000000002C81000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	2C81000
Size:	466944

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	0000000C.00000003.483623232.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000017.00000002.586741082.0000023930900000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	23930900000
Size:	4096

Details

Name:	00000004.00000000.489012989.0000000000F65000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	F65000
Size:	12288

Details

Name:	00000005.00000000.319697088.000000007EFF2000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7EFF2000
Size:	4096

Details

Name:	00000004.00000002.521499519.0000000002B29000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B29000
Size:	32768

Details

Name:	0000000C.00000003.482117619.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.497845634.00000000006E0000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6E0000
Size:	8192

Details

Name:	0000000C.00000003.484573896.0000000005368000.00000004.00000040.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5368000
Size:	40960

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	0000000F.00000003.507106721.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000003.496696505.000000000073E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	73E000
Size:	8192

Details

Name:	0000000F.00000003.497591733.000000000074A000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	74A000
Size:	20480

Details

Name:	0000000C.00000003.480211666.0000000003094000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3094000
Size:	4096

Details

Name:	0000000C.00000003.492571491.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.514332994.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000C.00000003.481658051.0000000004EE1000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4EE1000
Size:	167936

Details

Name:	00000012.00000002.549682310.00007FF5C8815000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C8815000
Size:	4096

Details

Name:	00000009.00000002.771311830.000002389A5F0000.00000004.00000020.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2389A5F0000
Size:	8192

Details

Name:	0000000C.00000003.482869631.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000004.00000002.521951073.0000000002FB0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2FB0000
Size:	4096

Details

Name:	0000000F.00000003.501504577.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000004.00000002.521565884.0000000002B4D000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B4D000
Size:	32768

Details

Name:	0000000F.00000003.515232970.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.486601460.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000003.513830454.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000017.00000002.587500935.00007FF5BE7B9000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BE7B9000
Size:	12288

Details

Name:	0000000C.00000003.483104355.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.500173829.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000002.00000002.501133842.0000000002F1E000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2F1E000
Size:	8192

Details

Name:	0000000F.00000003.497666493.000000000074B000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	74B000
Size:	16384

Details

Name:	0000000C.00000003.480927693.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000004.00000002.521902209.0000000002F00000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2F00000
Size:	4096

Details

Name:	0000000C.00000002.497948954.00000000028A1000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28A1000
Size:	4096

Details

Name:	00000004.00000000.487685389.00000000068EE000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	68EE000
Size:	8192

Details

Name:	0000000F.00000000.494015368.000000007FEE0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FEE0000
Size:	4096

Details

Name:	0000000C.00000003.482586709.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000009.00000002.771647684.00007DF47EE00000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF47EE00000
Size:	20480

Details

Name:	00000002.00000003.459294881.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	00000000.00000002.819341571.00000000037CF000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	37CF000
Size:	4096

Details

Name:	0000000C.00000003.492065117.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000002.00000002.500133311.0000000002ADE000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2ADE000
Size:	4096

Details

Name:	0000001A.00000002.638804459.00007FF588307000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF588307000
Size:	49152

Details

Name:	0000000C.00000003.491265528.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000005.00000002.493696291.0000000000968000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	968000
Size:	28672

Details

Name:	00000000.00000002.819661413.000000006E9C5000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6E9C5000
Size:	4096

Details

Name:	0000000C.00000003.482652954.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000004.00000000.486896715.0000000002B35000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B35000
Size:	16384

Details

Name:	0000000C.00000003.492443072.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000C.00000003.480597674.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000004.00000000.487081238.0000000002BF3000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BF3000
Size:	4096

Details

Name:	0000001A.00000003.636673247.000001DD87C53000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD87C53000
Size:	16384

Details

Name:	0000000C.00000003.483806148.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.496565233.0000000000715000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	715000
Size:	4096

Details

Name:	0000001A.00000003.623504554.000001DD88B63000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD88B63000
Size:	397312

Details

Name:	0000001A.00000002.638708786.00007FF5882DF000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5882DF000
Size:	12288

Details

Name:	0000000C.00000003.486376283.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.491450079.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000000.00000003.502917983.0000000000DBD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DBD000
Size:	270336

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000001A.00000002.638083395.00007FF587D4C000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF587D4C000
Size:	4096

Details

Name:	00000002.00000000.473109441.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	0000000C.00000002.499430189.000000007F592000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F592000
Size:	4096

Details

Name:	0000000F.00000003.496580179.0000000000721000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	721000
Size:	4096

Details

Name:	00000009.00000002.771699005.00007DF580F40000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF580F40000
Size:	4096

Details

Name:	0000000F.00000003.500837408.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000003.498174533.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.483587688.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.479672479.00000000030D5000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30D5000
Size:	4096

Details

Name:	00000002.00000003.459630033.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	00000002.00000003.437727822.0000000002F30000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F30000
Size:	4096

Details

Name:	00000004.00000000.487139346.0000000002EAB000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	2EAB000
Size:	20480

Details

Name:	00000002.00000000.473517388.0000000002F77000.00000004.00000020.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	2F77000
Size:	28672

Details

Name:	00000010.00000002.507904959.00000286D8F13000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	286D8F13000
Size:	12288

Details

Name:	00000000.00000003.502785196.0000000000DB0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DB0000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000002.00000000.471983532.00000000029D3000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	29D3000
Size:	4096

Details

Name:	0000000C.00000003.486725292.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000C.00000002.498181780.000000000297B000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	297B000
Size:	12288

Details

Name:	00000004.00000002.521682154.0000000002BBF000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BBF000
Size:	16384

Details

Name:	00000004.00000003.458629971.0000000005120000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5120000
Size:	4096

Details

Name:	00000016.00000002.819407979.00007FF549D55000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF549D55000
Size:	16384

Details

Name:	0000000C.00000003.485904210.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000000.00000003.460067153.0000000000770000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	770000
Size:	4096

Details

Name:	00000002.00000002.501359186.00000000030D0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	30D0000
Size:	733184

Details

Name:	0000000F.00000003.515157419.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000000.493992976.0000000002788000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2788000
Size:	16384

Details

Name:	0000000F.00000002.520629594.0000000004647000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4647000
Size:	110592

Details

Name:	0000000C.00000003.486683139.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000017.00000002.586487797.0000023930720000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	23930720000
Size:	12288

Details

Name:	0000001A.00000002.638072895.00007FF587D3B000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF587D3B000
Size:	4096

Details

Name:	00000012.00000002.547453064.00007FF5C8139000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C8139000
Size:	16384

Details

Name:	00000003.00000002.817911528.000000000299A000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	299A000
Size:	8192

Details

Name:	00000000.00000003.775961291.0000000000E1E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E1E000
Size:	32768

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000002.00000003.456548993.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	00000005.00000002.493548492.000000000089A000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	89A000
Size:	12288

Details

Name:	00000004.00000000.492671212.000000007F250000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F250000
Size:	20480

Details

Name:	00000002.00000000.473925741.00000000031C0000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	heap private
Protect:	page read and write
Base address:	31C0000
Size:	20480

Details

Name:	00000004.00000000.487037676.0000000002BD1000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BD1000
Size:	32768

Details

Name:	0000001B.00000002.618137291.000001B9C7960000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B9C7960000
Size:	102400

Details

Name:	00000012.00000002.547316484.0000020022802000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20022802000
Size:	4096

Details

Name:	00000012.00000002.547172397.0000020022098000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20022098000
Size:	8192

Details

Name:	00000009.00000002.771988458.00007FF57306F000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57306F000
Size:	8192

Details

Name:	00000003.00000003.634613951.0000000002FA0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FA0000
Size:	32768

Details

Name:	00000004.00000000.486801921.0000000002ADE000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2ADE000
Size:	4096

Details

Name:	00000004.00000000.489101416.0000000002A0C000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A0C000
Size:	8192

Details

Name:	0000000C.00000003.491303405.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000016.00000002.818095429.0000016F7A230000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	16F7A230000
Size:	4096

Details

Name:	00000003.00000002.820873463.0000000004FFA000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4FFA000
Size:	24576

Details

Name:	0000000F.00000003.507892236.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000005.00000003.459062102.0000000000920000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	920000
Size:	4096

Details

Name:	0000000C.00000003.484443761.0000000005381000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5381000
Size:	4096

Details

Name:	0000001A.00000003.607374621.000001DD883A0000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD883A0000
Size:	4096

Details

Name:	00000005.00000002.494135715.0000000000F40000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	F40000
Size:	12288

Details

Name:	0000001A.00000003.618717046.000001DD8858C000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD8858C000
Size:	12288

Details

Name:	00000016.00000002.819124369.00007FF549CAB000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF549CAB000
Size:	12288

Details

Name:	0000000C.00000003.482233553.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000002.520385858.0000000002761000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2761000
Size:	32768

Details

Name:	0000000F.00000003.514798378.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000001A.00000003.626421189.000001DD88597000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD88597000
Size:	8192

Details

Name:	00000010.00000002.509884055.00007FF524BA1000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF524BA1000
Size:	8192

Details

Name:	00000004.00000002.522432453.00000000068F0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	68F0000
Size:	4096

Details

Name:	00000004.00000003.452930203.0000000003292000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3292000
Size:	12288

Details

Name:	0000000C.00000002.499101723.00000000050C7000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	50C7000
Size:	4096

Details

Name:	0000000C.00000003.479267761.0000000003104000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3104000
Size:	8192

Details

Name:	0000000F.00000003.499562156.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000003.497743985.00000000006CF000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6CF000
Size:	8192

Details

Name:	00000004.00000003.463452037.0000000003200000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3200000
Size:	4096

Details

Name:	00000000.00000002.817467375.00000000006FB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6FB000
Size:	20480

Details

Name:	0000000F.00000003.501101173.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000002.00000000.471886184.00000000009E0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	9E0000
Size:	4096

Details

Name:	00000002.00000000.472141094.0000000002B70000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B70000
Size:	73728

Details

Name:	0000000F.00000003.514564537.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000001A.00000002.637434625.000001DD87CDA000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD87CDA000
Size:	40960

Details

Name:	00000003.00000003.437325381.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	0000000F.00000003.495578137.0000000004501000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4501000
Size:	40960

Details

Name:	00000017.00000002.587459443.00007FF5BE757000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BE757000
Size:	8192

Details

Name:	0000000C.00000002.499216855.000000000580E000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	580E000
Size:	8192

Details

Name:	00000004.00000000.489344074.0000000002AFF000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AFF000
Size:	16384

Details

Name:	0000000F.00000002.519418748.00000000001E0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E0000
Size:	16384

Details

Name:	00000003.00000002.817863580.0000000000DB0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DB0000
Size:	4096

Details

Name:	0000001A.00000002.638302656.00007FF588116000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF588116000
Size:	4096

Details

Name:	00000009.00000002.771888152.00007FF572E8E000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF572E8E000
Size:	4096

Details

Name:	0000001A.00000002.638622462.00007FF5882AE000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5882AE000
Size:	4096

Details

Name:	00000003.00000003.633357375.0000000002FA1000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FA1000
Size:	86016

Details

Name:	00000016.00000002.817571848.0000016F79E20000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	16F79E20000
Size:	8192

Details

Name:	00000004.00000002.521609900.0000000002B5B000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B5B000
Size:	12288

Details

Name:	0000000F.00000003.514345148.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000004.00000000.488702608.000000007F350000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F350000
Size:	4096

Details

Name:	0000000C.00000003.478807350.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000003.503158435.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000001A.00000002.638346602.00007FF588156000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF588156000
Size:	16384

Details

Name:	0000000C.00000003.486550303.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000017.00000002.586715524.0000023930888000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	23930888000
Size:	40960

Details

Name:	0000000C.00000003.481932893.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000C.00000003.479692608.00000000030ED000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30ED000
Size:	4096

Details

Name:	0000000C.00000002.499130382.00000000050D5000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	50D5000
Size:	40960

Details

Name:	0000001A.00000002.637452484.000001DD87CE5000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD87CE5000
Size:	32768

Details

Name:	00000010.00000002.507835964.00000286D8E70000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	286D8E70000
Size:	53248

Details

Name:	0000000C.00000003.481821187.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000002.499351164.0000000005A4F000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5A4F000
Size:	4096

Details

Name:	0000000C.00000003.492927936.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000004.00000000.489666014.0000000002BC4000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BC4000
Size:	8192

Details

Name:	0000000C.00000003.492738255.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000C.00000003.483040267.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.484124584.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.479324477.000000000310A000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	310A000
Size:	20480

Details

Name:	0000000F.00000003.515257957.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.479195776.00000000030DB000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30DB000
Size:	4096

Details

Name:	00000002.00000002.501076978.0000000002BF8000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BF8000
Size:	16384

Details

Name:	0000000F.00000003.497192597.0000000000727000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	727000
Size:	4096

Details

Name:	0000000C.00000000.476931774.000000007F590000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F590000
Size:	4096

Details

Name:	00000002.00000002.501156707.0000000002F50000.00000004.00000020.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2F50000
Size:	32768

Details

Name:	0000000C.00000003.479235452.00000000030F3000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30F3000
Size:	4096

Details

Name:	00000004.00000003.459362919.0000000005120000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5120000
Size:	4096

Details

Name:	00000000.00000003.775474469.0000000003E31000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E31000
Size:	466944

Details

Name:	00000002.00000000.473116513.00000000029C9000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	29C9000
Size:	8192

Details

Name:	0000000F.00000003.501620938.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000004.00000000.487298154.0000000002FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	2FF0000
Size:	4096

Details

Name:	00000004.00000000.486865142.0000000002B26000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B26000
Size:	8192

Details

Name:	00000017.00000002.586671196.0000023930855000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	23930855000
Size:	106496

Details

Name:	00000004.00000003.460613197.0000000005120000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5120000
Size:	4096

Details

Name:	00000002.00000003.435852780.0000000002F30000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F30000
Size:	4096

Details

Name:	00000002.00000002.501244604.0000000002F77000.00000004.00000020.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2F77000
Size:	28672

Details

Name:	0000000C.00000000.475954653.0000000000C05000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	C05000
Size:	4096

Details

Name:	00000017.00000002.586751006.0000023930902000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	23930902000
Size:	16384

Details

Name:	0000000F.00000000.495099515.000000007FEE0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FEE0000
Size:	4096

Details

Name:	0000000C.00000002.498102556.0000000002907000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2907000
Size:	12288

Details

Name:	00000017.00000002.586387774.0000006CA3277000.00000004.00000010.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	6CA3277000
Size:	36864

Details

Name:	0000000F.00000002.520089693.000000000259A000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	259A000
Size:	12288

Details

Name:	00000017.00000002.586845599.0000023931002000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	23931002000
Size:	4096

Details

Name:	00000000.00000002.819564372.0000000003DB0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3DB0000
Size:	4096

Details

Name:	0000000F.00000003.513900692.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000003.00000002.817941578.00000000029AC000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29AC000
Size:	20480

Details

Name:	0000001A.00000003.626455293.000001DD885A1000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD885A1000
Size:	24576

Details

Name:	00000000.00000003.596195389.0000000000DB6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DB6000
Size:	303104

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000017.00000002.587048176.00007FF5BE2C1000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BE2C1000
Size:	20480

Details

Name:	00000003.00000003.589150458.000000000529C000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	529C000
Size:	462848

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000002.818170028.0000000002A2B000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A2B000
Size:	8192

Details

Name:	0000000F.00000002.520272754.00000000026D7000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26D7000
Size:	12288

Details

Name:	00000000.00000003.550216822.0000000000DB7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DB7000
Size:	299008

Details

Name:	0000000C.00000003.479578258.0000000004FF7000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FF7000
Size:	20480

Details

Name:	0000000F.00000003.515267848.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000003.501712008.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000003.507914707.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.483604854.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000017.00000000.573473875.00007DF5CC440000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5CC440000
Size:	4096

Details

Name:	00000003.00000002.817637028.0000000000D10000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	D10000
Size:	4096

Details

Name:	0000000C.00000003.482291495.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000017.00000000.573592555.00007FF5BE7E1000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BE7E1000
Size:	16384

Details

Name:	00000003.00000003.722636052.0000000002FA0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FA0000
Size:	40960

Details

Name:	00000003.00000003.459060295.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	00000010.00000002.507871729.00000286D8F00000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	286D8F00000
Size:	4096

Details

Name:	00000004.00000000.489504890.0000000002B4D000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B4D000
Size:	32768

Details

Name:	0000000F.00000000.494001124.000000007FED0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FED0000
Size:	4096

Details

Name:	00000004.00000002.522680318.000000006E9F1000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E9F1000
Size:	221184

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000002.00000000.474187061.000000007FAA0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FAA0000
Size:	4096

Details

Name:	0000000F.00000003.499420529.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.478983827.00000000030D5000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30D5000
Size:	4096

Details

Name:	0000001A.00000002.637125805.000001DD87B80000.00000004.00000020.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1DD87B80000
Size:	12288

Details

Name:	0000000C.00000003.486492527.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000002.00000003.457017389.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	0000001A.00000002.637626126.000001DD88330000.00000008.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page write copy
Base address:	1DD88330000
Size:	266240

Details

Name:	0000000C.00000003.492597045.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000017.00000002.587257736.00007FF5BE64C000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BE64C000
Size:	4096

Details

Name:	0000000C.00000003.486826238.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000001A.00000003.623555731.000001DD88B02000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD88B02000
Size:	397312

Details

Name:	00000002.00000000.472934248.0000000000920000.00000004.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page read and write
Base address:	920000
Size:	4096

Details

Name:	0000001B.00000002.618823050.00007DF5B6BC0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5B6BC0000
Size:	12288

Details

Name:	00000016.00000002.817737869.0000016F79EE0000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	16F79EE0000
Size:	4096

Details

Name:	00000003.00000002.818534068.0000000002B6C000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B6C000
Size:	8192

Details

Name:	00000002.00000000.472552700.0000000003550000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	3550000
Size:	4096

Details

Name:	0000000C.00000003.492984663.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000001A.00000002.637076598.000001DD87B20000.00000004.00000040.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1DD87B20000
Size:	4096

Details

Name:	0000000F.00000003.501387129.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000004.00000000.486747102.00000000029F1000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	29F1000
Size:	36864

Details

Name:	0000000F.00000003.501770831.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.483100067.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000003.514776325.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000001A.00000002.638215640.00007FF588055000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF588055000
Size:	8192

Details

Name:	0000000F.00000003.506009889.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000001A.00000002.638839515.00007FF588323000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF588323000
Size:	24576

Details

Name:	00000016.00000002.817762481.0000016F79F27000.00000004.00000020.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	16F79F27000
Size:	417792

Details

Name:	0000000C.00000003.486524880.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000003.502743370.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000003.515068360.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000012.00000003.545345282.0000020022049000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20022049000
Size:	8192

Details

Name:	0000000C.00000003.483017228.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000C.00000003.482111736.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000001A.00000002.637311804.000001DD87C6F000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD87C6F000
Size:	4096

Details

Name:	00000016.00000003.564019905.0000016F79F6C000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16F79F6C000
Size:	8192

Details

Name:	00000010.00000002.510697327.00007FF524DEA000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF524DEA000
Size:	4096

Details

Name:	00000009.00000002.771483729.000002389A700000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2389A700000
Size:	4096

Details

Name:	00000009.00000002.772714634.00007FF5732D1000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5732D1000
Size:	16384

Details

Name:	0000000C.00000003.482406969.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000003.00000002.820314156.0000000004920000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	4920000
Size:	733184

Details

Name:	0000000F.00000002.520237848.00000000026C5000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26C5000
Size:	16384

Details

Name:	0000000C.00000003.479122598.00000000030C4000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30C4000
Size:	4096

Details

Name:	00000017.00000002.587143404.00007FF5BE5AD000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BE5AD000
Size:	4096

Details

Name:	00000010.00000002.507309827.000000F73807E000.00000004.00000010.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F73807E000
Size:	8192

Details

Name:	00000016.00000002.818116237.0000016F7A430000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	16F7A430000
Size:	12288

Details

Name:	00000010.00000002.510605429.00007FF524D6A000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF524D6A000
Size:	8192

Details

Name:	0000000F.00000002.520399873.000000000276B000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	276B000
Size:	36864

Details

Name:	00000016.00000002.817749827.0000016F79F20000.00000004.00000020.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	16F79F20000
Size:	24576

Details

Name:	0000000F.00000003.498048364.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000004.00000002.522076658.000000000325A000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	325A000
Size:	12288

Details

Name:	0000000C.00000003.482133418.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000012.00000002.545863689.0000020021F70000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	20021F70000
Size:	12288

Details

Name:	00000002.00000000.473286718.0000000002B70000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B70000
Size:	73728

Details

Name:	0000000F.00000003.496630859.0000000000744000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	744000
Size:	4096

Details

Name:	0000001A.00000002.637485740.000001DD87CFA000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD87CFA000
Size:	28672

Details

Name:	00000003.00000003.462042519.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	0000000F.00000003.501222265.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000001A.00000003.614300157.000001DD885AC000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD885AC000
Size:	90112

Details

Name:	00000003.00000002.820801404.0000000004FBD000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4FBD000
Size:	12288

Details

Name:	0000000C.00000003.493013369.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000017.00000002.587425755.00007FF5BE72B000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BE72B000
Size:	12288

Details

Name:	0000001A.00000003.616278118.000001DD885B7000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD885B7000
Size:	73728

Details

Name:	0000000F.00000003.497309322.0000000004617000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4617000
Size:	20480

Details

Name:	00000002.00000003.455611164.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	0000001A.00000003.614333060.000001DD88595000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD88595000
Size:	184320

Details

Name:	0000000F.00000003.496222472.00000000046DD000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	46DD000
Size:	4096

Details

Name:	0000000F.00000003.514278351.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000003.501925895.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000000.00000002.817512926.0000000000760000.00000040.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page execute and read and write
Base address:	760000
Size:	4096

Details

Name:	00000002.00000000.471878229.00000000009D0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	9D0000
Size:	16384

Details

Name:	0000000C.00000003.483209038.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000010.00000002.507496138.00000286D8D50000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	286D8D50000
Size:	16384

Details

Name:	0000000F.00000003.496379518.0000000000727000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	727000
Size:	4096

Details

Name:	00000002.00000000.473201234.0000000002B1A000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B1A000
Size:	12288

Details

Name:	0000000C.00000003.480161744.0000000003092000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3092000
Size:	4096

Details

Name:	0000000C.00000002.499164015.00000000056CF000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	56CF000
Size:	4096

Details

Name:	0000001A.00000002.637045076.000000469367B000.00000004.00000010.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	469367B000
Size:	20480

Details

Name:	0000001B.00000002.618770422.00007DF5B6BA2000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5B6BA2000
Size:	4096

Details

Name:	00000003.00000002.817760828.0000000000D6C000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	D6C000
Size:	4096

Details

Name:	00000003.00000003.435918879.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	0000000F.00000003.497806644.00000000006D2000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6D2000
Size:	4096

Details

Name:	0000000C.00000003.482249494.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000004.00000000.487344639.0000000003257000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	heap private
Protect:	page read and write
Base address:	3257000
Size:	4096

Details

Name:	00000003.00000002.820984800.000000000507F000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	507F000
Size:	4096

Details

Name:	0000000C.00000003.486567205.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000002.00000000.473155022.0000000002A25000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A25000
Size:	4096

Details

Name:	0000000F.00000003.507527856.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000002.00000000.471915072.0000000000C50000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	C50000
Size:	16384

Details

Name:	0000000C.00000003.492608444.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.498158933.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000003.00000003.769057310.0000000005A62000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A62000
Size:	4096

Details

Name:	0000000C.00000003.492650382.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000003.00000003.496329569.000000000549B000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	549B000
Size:	4096

Details

Name:	00000016.00000002.817714210.0000016F79EC0000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	16F79EC0000
Size:	4096

Details

Name:	00000004.00000000.490455894.00000000031EC000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	31EC000
Size:	12288

Details

Name:	00000012.00000002.547093659.0000020022070000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20022070000
Size:	40960

Details

Name:	0000000C.00000003.491761831.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000002.00000000.473489604.0000000002F5A000.00000004.00000020.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	2F5A000
Size:	106496

Details

Name:	0000000F.00000002.520332851.000000000274B000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	274B000
Size:	12288

Details

Name:	00000004.00000002.522736562.000000006EA29000.00000040.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute and read and write
Base address:	6EA29000
Size:	12288

Details

Name:	0000000C.00000003.479547155.00000000030FE000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30FE000
Size:	8192

Details

Name:	00000002.00000003.460608487.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	0000001A.00000002.637574006.000001DD880D0000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1DD880D0000
Size:	12288

Details

Name:	0000001A.00000002.638505561.00007FF58822B000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58822B000
Size:	24576

Details

Name:	0000000F.00000003.503183986.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000002.00000002.501112645.0000000002EDD000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2EDD000
Size:	12288

Details

Name:	00000003.00000002.817687384.0000000000D40000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	D40000
Size:	4096

Details

Name:	00000000.00000002.819142295.0000000002AE8000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2AE8000
Size:	4096

Details

Name:	00000000.00000003.462311805.0000000000770000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	770000
Size:	4096

Details

Name:	00000004.00000002.521670729.0000000002BBB000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BBB000
Size:	12288

Details

Name:	0000000F.00000003.498282830.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000000.476779958.0000000000C05000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	C05000
Size:	4096

Details

Name:	0000000F.00000003.500978852.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000003.00000002.819530865.00000000030CE000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	30CE000
Size:	8192

Details

Name:	00000009.00000002.771350291.000002389A60D000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2389A60D000
Size:	20480

Details

Name:	00000016.00000000.563500125.00007DF5579E0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5579E0000
Size:	12288

Details

Name:	00000002.00000002.499896958.0000000000D90000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	D90000
Size:	12288

Details

Name:	00000002.00000003.436789899.0000000002F30000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F30000
Size:	4096

Details

Name:	00000004.00000002.521857336.0000000002EAB000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2EAB000
Size:	20480

Details

Name:	0000000C.00000003.479829504.00000000030ED000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30ED000
Size:	4096

Details

Name:	00000003.00000003.634570942.0000000002FB5000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FB5000
Size:	4096

Details

Name:	00000004.00000003.459430519.0000000005120000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5120000
Size:	4096

Details

Name:	00000005.00000002.494923747.00000000042AE000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	42AE000
Size:	8192

Details

Name:	00000005.00000003.459731214.0000000000920000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	920000
Size:	4096

Details

Name:	00000005.00000002.493584107.0000000000920000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	920000
Size:	4096

Details

Name:	0000000F.00000003.500893260.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000003.515198608.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000002.00000000.472615073.00000000049EF000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	49EF000
Size:	4096

Details

Name:	0000001A.00000003.615415593.000001DD88A02000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD88A02000
Size:	147456

Details

Name:	00000004.00000000.491228201.0000000004BD0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	4BD0000
Size:	733184

Details

Name:	00000002.00000003.457486534.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	00000012.00000002.547131319.0000020022081000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20022081000
Size:	53248

Details

Name:	00000004.00000000.487483377.00000000037C0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	37C0000
Size:	372736

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	0000000C.00000003.482768127.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000004.00000003.459161370.0000000005120000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5120000
Size:	4096

Details

Name:	0000000F.00000003.502834056.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000C.00000000.475711721.000000007F590000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F590000
Size:	4096

Details

Name:	0000000F.00000003.500992651.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000003.00000002.819351685.0000000002FA0000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2FA0000
Size:	90112

Details

Name:	0000000F.00000003.514964052.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000003.503529022.0000000004AC2000.00000004.00000040.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4AC2000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000017.00000002.587477256.00007FF5BE75D000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BE75D000
Size:	8192

Details

Name:	0000000F.00000003.502980870.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000003.497919539.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000003.497413859.0000000000739000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	739000
Size:	4096

Details

Name:	0000000C.00000003.478176376.000000000302F000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	302F000
Size:	8192

Details

Name:	0000000F.00000003.495595536.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	32768

Details

Name:	0000000F.00000002.520283585.00000000026DD000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26DD000
Size:	32768

Details

Name:	0000000F.00000003.507574941.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000003.514991790.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000010.00000002.510444437.00007FF524D1E000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF524D1E000
Size:	28672

Details

Name:	0000000C.00000003.482486888.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000003.00000002.818763060.0000000002E40000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2E40000
Size:	4096

Details

Name:	00000017.00000002.586601151.000002393083C000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2393083C000
Size:	36864

Details

Name:	0000001B.00000003.617741033.000001B9C7BB7000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B9C7BB7000
Size:	4096

Details

Name:	0000000F.00000003.515144931.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000004.00000002.521812654.0000000002E40000.00000004.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2E40000
Size:	4096

Details

Name:	0000000C.00000003.491320671.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000005.00000002.494878868.0000000002BE6000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BE6000
Size:	12288

Details

Name:	00000003.00000002.818014147.00000000029C9000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29C9000
Size:	8192

Details

Name:	00000004.00000002.521357661.00000000029FD000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29FD000
Size:	8192

Details

Name:	00000002.00000000.472018094.00000000029FD000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	29FD000
Size:	8192

Details

Name:	00000009.00000002.771236959.000002389A580000.00000004.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2389A580000
Size:	4096

Details

Name:	0000000C.00000003.482993381.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.502120080.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000017.00000002.586540447.0000023930780000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	23930780000
Size:	4096

Details

Name:	0000000F.00000003.500794643.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000004.00000002.521531093.0000000002B3B000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B3B000
Size:	12288

Details

Name:	00000005.00000002.495360822.000000007EFE0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7EFE0000
Size:	4096

Details

Name:	00000003.00000002.822160989.0000000005AF0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5AF0000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000F.00000003.502379059.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000C.00000003.482835637.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000000.494982159.00000000000D0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	D0000
Size:	102400

Details

Name:	0000000C.00000003.479631059.000000000310A000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	310A000
Size:	20480

Details

Name:	00000000.00000002.817671635.00000000007A0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7A0000
Size:	16384

Details

Name:	0000000F.00000003.497147551.000000000073F000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	73F000
Size:	4096

Details

Name:	0000000C.00000003.483792582.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.495722969.00000000007D0000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	7D0000
Size:	131072

Details

Name:	0000000C.00000003.483567044.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.502322417.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000000.00000003.776315266.0000000003EAA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3EAA000
Size:	4096

Details

Name:	00000003.00000002.819957091.00000000034C0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	34C0000
Size:	4096

Details

Name:	00000004.00000000.487541872.0000000004BD0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	4BD0000
Size:	733184

Details

Name:	00000012.00000002.545687596.0000008538177000.00000004.00000010.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8538177000
Size:	36864

Details

Name:	00000010.00000002.509660080.00007FF5249E7000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5249E7000
Size:	8192

Details

Name:	00000012.00000002.545884157.0000020021F80000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	20021F80000
Size:	4096

Details

Name:	00000017.00000002.587115749.00007FF5BE566000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BE566000
Size:	16384

Details

Name:	00000004.00000000.486737447.00000000029D3000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	29D3000
Size:	4096

Details

Name:	0000000C.00000003.496686306.0000000005003000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5003000
Size:	28672

Details

Name:	00000017.00000002.587167365.00007FF5BE5CB000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BE5CB000
Size:	8192

Details

Name:	0000000F.00000003.500449331.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.483943668.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000003.00000003.541863030.00000000059F1000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	59F1000
Size:	884736

Details

Name:	0000001A.00000002.638913551.00007FF58834A000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58834A000
Size:	8192

Details

Name:	00000004.00000002.522262428.0000000004BD0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	4BD0000
Size:	733184

Details

Name:	0000001A.00000000.604650851.00007DF596050000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF596050000
Size:	12288

Details

Name:	0000000F.00000003.496676518.0000000000733000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	733000
Size:	4096

Details

Name:	0000000C.00000003.480316689.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.481884412.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000004.00000000.488723922.000000007F360000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F360000
Size:	4096

Details

Name:	0000000F.00000003.501465434.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000C.00000003.479992815.00000000030C3000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30C3000
Size:	4096

Details

Name:	0000001A.00000002.638537966.00007FF588251000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF588251000
Size:	12288

Details

Name:	0000001B.00000002.618263209.000001B9C7B65000.00000004.00000040.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1B9C7B65000
Size:	8192

Details

Name:	0000000C.00000003.482701321.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000004.00000003.458146572.0000000005120000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5120000
Size:	4096

Details

Name:	00000003.00000002.817513036.0000000000C3C000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C3C000
Size:	16384

Details

Name:	00000010.00000002.510676199.00007FF524DE1000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF524DE1000
Size:	32768

Details

Name:	0000000F.00000003.514459902.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000C.00000003.479430993.000000000310A000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	310A000
Size:	20480

Details

Name:	0000000F.00000003.514815794.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000C.00000003.481996783.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000C.00000003.482862118.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000004.00000000.489552354.0000000002B5B000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B5B000
Size:	12288

Details

Name:	0000000F.00000003.497106746.000000000074A000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	74A000
Size:	20480

Details

Name:	00000005.00000000.319681232.0000000002BF8000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BF8000
Size:	16384

Details

Name:	0000001A.00000003.636687501.000001DD87C52000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD87C52000
Size:	4096

Details

Name:	0000000C.00000003.491288256.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000012.00000002.547549431.00007FF5C8615000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C8615000
Size:	8192

Details

Name:	00000004.00000002.522505157.0000000006D6E000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	6D6E000
Size:	8192

Details

Name:	0000000F.00000003.497122455.0000000004611000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4611000
Size:	4096

Details

Name:	00000002.00000000.473037561.0000000000BBC000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	BBC000
Size:	4096

Details

Name:	00000003.00000002.822712752.000000007F150000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F150000
Size:	12288

Details

Name:	0000000F.00000002.520077315.0000000002596000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2596000
Size:	12288

Details

Name:	0000000F.00000003.496573528.000000000071B000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	71B000
Size:	4096

Details

Name:	0000001A.00000002.638322660.00007FF58812F000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58812F000
Size:	4096

Details

Name:	0000000C.00000003.491840613.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000001A.00000002.637067337.000001DD87B10000.00000004.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1DD87B10000
Size:	4096

Details

Name:	00000002.00000000.473588252.00000000030D0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	30D0000
Size:	733184

Details

Name:	0000000F.00000003.503192430.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000000.00000000.292209898.000000007F730000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F730000
Size:	12288

Details

Name:	00000017.00000002.587468028.00007FF5BE75A000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BE75A000
Size:	8192

Details

Name:	00000017.00000002.587400981.00007FF5BE70E000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BE70E000
Size:	28672

Details

Name:	00000002.00000002.501142891.0000000002F20000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2F20000
Size:	4096

Details

Name:	00000004.00000000.487027666.0000000002BCB000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BCB000
Size:	20480

Details

Name:	0000000F.00000003.496336678.000000000071B000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	71B000
Size:	4096

Details

Name:	00000002.00000000.473265409.0000000002B5B000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B5B000
Size:	12288

Details

Name:	0000001A.00000002.636955923.0000004692FFE000.00000004.00000010.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4692FFE000
Size:	8192

Details

Name:	00000004.00000000.492174894.00000000075AC000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	75AC000
Size:	16384

Details

Name:	00000003.00000002.818355807.0000000002B35000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B35000
Size:	16384

Details

Name:	0000000F.00000003.501017342.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000005.00000002.493407814.0000000000479000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	479000
Size:	12288

Details

Name:	00000003.00000003.458993521.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	00000009.00000000.468660467.00007DF580F50000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF580F50000
Size:	12288

Details

Name:	0000000F.00000003.507488918.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000001A.00000002.638014317.00007FF587B79000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF587B79000
Size:	16384

Details

Name:	0000000C.00000003.478601328.0000000004DA0000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	4DA0000
Size:	126976

Details

Name:	00000009.00000003.770955022.000002389AB02000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2389AB02000
Size:	4096

Details

Name:	00000002.00000000.472096287.0000000002B3B000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B3B000
Size:	12288

Details

Name:	00000003.00000003.812635736.0000000002FB2000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FB2000
Size:	16384

Details

Name:	00000004.00000002.522033990.0000000003240000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3240000
Size:	4096

Details

Name:	0000000C.00000003.480781765.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000C.00000002.498004845.00000000028DA000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28DA000
Size:	12288

Details

Name:	00000000.00000003.775545086.0000000000E04000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E04000
Size:	8192

Details

Name:	00000003.00000002.817484033.0000000000A90000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000002.00000000.474201433.000000007FAB0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FAB0000
Size:	12288

Details

Name:	00000009.00000000.468643951.00007DF580F32000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF580F32000
Size:	4096

Details

Name:	00000017.00000002.587585999.00007FF5BE7E1000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BE7E1000
Size:	16384

Details

Name:	00000004.00000000.487281212.0000000002FC0000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	2FC0000
Size:	20480

Details

Name:	00000002.00000000.472033916.0000000002AD8000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AD8000
Size:	8192

Details

Name:	0000000F.00000003.515308751.0000000000458000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	458000
Size:	4096

Details

Name:	00000004.00000000.492156105.0000000006D70000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	6D70000
Size:	4096

Details

Name:	0000001A.00000002.637281952.000001DD87C55000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD87C55000
Size:	8192

Details

Name:	00000003.00000003.436387654.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	0000000C.00000000.475723045.000000007F592000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F592000
Size:	4096

Details

Name:	0000000F.00000003.513691289.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000000.00000003.729327221.0000000000E03000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E03000
Size:	16384

Details

Name:	00000009.00000002.771669790.00007DF580F30000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF580F30000
Size:	4096

Details

Name:	0000000C.00000003.481895677.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000C.00000003.486485911.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000C.00000003.482496893.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.492832090.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000003.00000003.722618251.0000000002F99000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F99000
Size:	24576

Details

Name:	00000003.00000002.817613013.0000000000D00000.00000040.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page execute and read and write
Base address:	D00000
Size:	4096

Details

Name:	00000004.00000000.489057594.00000000029D3000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	29D3000
Size:	4096

Details

Name:	0000000F.00000003.515662611.0000000002B90000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2B90000
Size:	4096

Details

Name:	00000003.00000003.458725470.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	0000000C.00000003.485819964.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000C.00000003.483074739.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000004.00000000.487361964.0000000003260000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	3260000
Size:	32768

Details

Name:	00000010.00000002.510567256.00007FF524D4E000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF524D4E000
Size:	4096

Details

Name:	0000000C.00000003.486513483.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000017.00000002.587155086.00007FF5BE5B0000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BE5B0000
Size:	4096

Details

Name:	0000000C.00000003.483768610.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000005.00000002.494700864.0000000002B4D000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B4D000
Size:	32768

Details

Name:	0000001B.00000002.618097700.000000091597F000.00000004.00000010.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	91597F000
Size:	4096

Details

Name:	0000000C.00000003.482615433.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000003.497620415.000000000070A000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	70A000
Size:	4096

Details

Name:	00000004.00000002.522869839.000000007F362000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F362000
Size:	4096

Details

Name:	0000000C.00000003.493179087.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000003.00000002.818203261.0000000002AD7000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AD7000
Size:	12288

Details

Name:	0000000F.00000003.501277960.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.483182204.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000010.00000002.507979189.00007DF532A52000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF532A52000
Size:	4096

Details

Name:	0000000C.00000003.479613117.0000000004FF7000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FF7000
Size:	20480

Details

Name:	0000000F.00000003.497208683.000000000072D000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	72D000
Size:	4096

Details

Name:	0000000C.00000003.492521009.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000012.00000002.547500625.00007FF5C8471000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C8471000
Size:	20480

Details

Name:	00000010.00000002.510312913.00007FF524CFD000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF524CFD000
Size:	4096

Details

Name:	0000000C.00000002.497965955.00000000028AF000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28AF000
Size:	12288

Details

Name:	00000000.00000002.818989694.000000000266E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	266E000
Size:	8192

Details

Name:	00000002.00000000.471808186.0000000000920000.00000004.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page read and write
Base address:	920000
Size:	4096

Details

Name:	00000003.00000002.817445638.0000000000A8C000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A8C000
Size:	8192

Details

Name:	0000000C.00000003.479357508.00000000030E1000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30E1000
Size:	4096

Details

Name:	0000000F.00000003.500854216.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000C.00000003.482917035.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000C.00000003.479531131.0000000005039000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5039000
Size:	36864

Details

Name:	00000004.00000002.522459303.00000000069AE000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	69AE000
Size:	8192

Details

Name:	00000003.00000003.587065386.0000000002F89000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F89000
Size:	8192

Details

Name:	00000003.00000003.439669787.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	00000000.00000002.819157538.0000000002C3D000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2C3D000
Size:	12288

Details

Name:	00000016.00000002.818657490.00007FF549562000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF549562000
Size:	4096

Details

Name:	00000000.00000002.819421293.0000000003ACF000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3ACF000
Size:	4096

Details

Name:	0000000F.00000003.514631874.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000002.00000003.459026861.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	00000000.00000003.503431763.0000000000DFC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DFC000
Size:	16384

Details

Name:	00000004.00000000.488619273.000000006EA27000.00000004.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page read and write
Base address:	6EA27000
Size:	8192

Details

Name:	0000000F.00000002.520026265.0000000002551000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2551000
Size:	20480

Details

Name:	0000000C.00000003.482240343.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.479210121.00000000030E1000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30E1000
Size:	4096

Details

Name:	0000001A.00000003.618746862.000001DD88599000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD88599000
Size:	16384

Details

Name:	00000004.00000002.521932394.0000000002F90000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2F90000
Size:	4096

Details

Name:	00000000.00000000.292206039.000000007F722000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F722000
Size:	4096

Details

Name:	00000003.00000003.444860489.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	0000001A.00000002.638159576.00007FF587FA4000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF587FA4000
Size:	8192

Details

Name:	00000005.00000002.494663489.0000000002B3F000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B3F000
Size:	24576

Details

Name:	00000002.00000000.471903291.0000000000BBC000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	BBC000
Size:	4096

Details

Name:	0000000F.00000003.514073048.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000002.520145205.00000000025BB000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25BB000
Size:	4096

Details

Name:	00000002.00000002.501100572.0000000002E20000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2E20000
Size:	4096

Details

Name:	00000002.00000000.472203797.0000000002BE6000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BE6000
Size:	12288

Details

Name:	0000000C.00000002.499173760.000000000570E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	570E000
Size:	8192

Details

Name:	0000000C.00000003.479900600.00000000050BC000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50BC000
Size:	12288

Details

Name:	0000000C.00000002.498075404.00000000028FB000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28FB000
Size:	12288

Details

Name:	00000002.00000000.473214159.0000000002B29000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B29000
Size:	32768

Details

Name:	0000000C.00000003.479454253.00000000050BC000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50BC000
Size:	12288

Details

Name:	00000005.00000002.493606501.0000000000940000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	940000
Size:	32768

Details

Name:	0000000C.00000003.479291957.00000000030ED000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30ED000
Size:	4096

Details

Name:	0000000F.00000003.498145308.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000000.495077452.000000007FED0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FED0000
Size:	4096

Details

Name:	00000000.00000003.596011056.000000000307B000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	307B000
Size:	8192

Details

Name:	00000012.00000002.546868834.0000020022029000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20022029000
Size:	73728

Details

Name:	0000000C.00000003.482450233.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000017.00000002.586343461.0000006CA307E000.00000004.00000010.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	6CA307E000
Size:	8192

Details

Name:	0000000C.00000003.478817979.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000002.00000003.463347475.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	00000000.00000003.594322021.0000000003E31000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E31000
Size:	499712

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000F.00000003.501658222.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.483774059.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000005.00000002.494207566.0000000002A0C000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A0C000
Size:	8192

Details

Name:	0000000F.00000003.497423695.000000000073E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	73E000
Size:	4096

Details

Name:	00000005.00000000.319685911.000000007EFE0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7EFE0000
Size:	4096

Details

Name:	0000000C.00000002.497794488.0000000002778000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2778000
Size:	16384

Details

Name:	00000002.00000003.460032413.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	0000000C.00000003.486506119.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.482163920.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.491390660.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000001B.00000002.618033357.000000091553F000.00000004.00000010.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	91553F000
Size:	4096

Details

Name:	00000002.00000002.499653927.0000000000930000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	930000
Size:	102400

Details

Name:	00000003.00000003.495019761.0000000002F39000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F39000
Size:	20480

Details

Name:	00000004.00000003.461572188.0000000005120000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5120000
Size:	4096

Details

Name:	00000017.00000002.586307550.0000006CA2E7E000.00000004.00000010.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	6CA2E7E000
Size:	8192

Details

Name:	00000003.00000002.818374157.0000000002B3B000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B3B000
Size:	12288

Details

Name:	0000000C.00000003.479029750.00000000030F9000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30F9000
Size:	4096

Details

Name:	0000001B.00000003.617594266.000001B9C7BAB000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B9C7BAB000
Size:	8192

Details

Name:	00000004.00000002.521941926.0000000002FA0000.00000040.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	2FA0000
Size:	4096

Details

Name:	00000002.00000000.473471056.0000000002F50000.00000004.00000020.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	2F50000
Size:	32768

Details

Name:	0000000C.00000003.493193433.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000002.00000000.474094688.00000000049AE000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	49AE000
Size:	8192

Details

Name:	00000005.00000002.493389339.00000000003F0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3F0000
Size:	16384

Details

Name:	0000000C.00000003.483237067.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.507349295.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000C.00000003.482559288.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000003.502549808.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000004.00000002.521973021.0000000002FE0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2FE0000
Size:	12288

Details

Name:	0000000C.00000003.483787392.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000004.00000000.488326829.000000006E9C1000.00000020.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page execute read
Base address:	6E9C1000
Size:	8192

Details

Name:	00000003.00000003.768659126.0000000002FB5000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FB5000
Size:	4096

Details

Name:	0000000F.00000003.514595994.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000003.507203571.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000003.00000002.818052215.0000000002A15000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A15000
Size:	24576

Details

Name:	0000001A.00000000.604612267.00007DF596032000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF596032000
Size:	4096

Details

Name:	0000000C.00000003.486675363.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000002.520459342.00000000029B0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29B0000
Size:	73728

Details

Name:	0000000F.00000000.494736043.000000007FEE2000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FEE2000
Size:	4096

Details

Name:	0000000F.00000003.500742624.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000004.00000002.521740022.0000000002BDB000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BDB000
Size:	36864

Details

Name:	00000004.00000000.489713844.0000000002BD1000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BD1000
Size:	32768

Details

Name:	00000003.00000003.634556728.0000000002FAB000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FAB000
Size:	8192

Details

Name:	0000000F.00000003.517923900.000000000463C000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	463C000
Size:	155648

Details

Name:	00000002.00000002.501991814.000000007FAB0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FAB0000
Size:	12288

Details

Name:	0000000F.00000003.496531150.000000000070A000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	70A000
Size:	4096

Details

Name:	00000017.00000002.586422074.0000006CA347F000.00000004.00000010.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	6CA347F000
Size:	4096

Details

Name:	0000000C.00000003.493071235.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.492429715.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000000.00000003.503369390.0000000000DB8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DB8000
Size:	294912

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000F.00000003.497283023.0000000004605000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4605000
Size:	4096

Details

Name:	00000000.00000003.684834033.0000000000E07000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E07000
Size:	4096

Details

Name:	00000003.00000002.822308215.000000006E9C3000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E9C3000
Size:	4096

Details

Name:	0000000F.00000002.520045675.0000000002563000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2563000
Size:	16384

Details

Name:	00000002.00000000.473525336.0000000002F7F000.00000004.00000020.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	2F7F000
Size:	40960

Details

Name:	0000000C.00000003.480713614.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000009.00000002.771469840.000002389A666000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2389A666000
Size:	16384

Details

Name:	0000000C.00000003.479699443.00000000030F3000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30F3000
Size:	4096

Details

Name:	00000003.00000003.587023023.0000000002F96000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F96000
Size:	8192

Details

Name:	00000002.00000002.501839598.00000000049EF000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	49EF000
Size:	4096

Details

Name:	00000003.00000003.492560105.0000000002E40000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2E40000
Size:	4096

Details

Name:	0000001A.00000002.636997281.00000046932FF000.00000004.00000010.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	46932FF000
Size:	4096

Details

Name:	0000000C.00000002.497776939.0000000002772000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2772000
Size:	16384

Details

Name:	0000000F.00000003.497568055.0000000000739000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	739000
Size:	4096

Details

Name:	00000002.00000002.500218027.0000000002B11000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B11000
Size:	4096

Details

Name:	0000000F.00000002.519918869.000000000253A000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	253A000
Size:	4096

Details

Name:	0000001B.00000002.619125384.00007FF5A8F12000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A8F12000
Size:	12288

Details

Name:	00000016.00000002.819071434.00007FF549C80000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF549C80000
Size:	4096

Details

Name:	00000004.00000002.522004292.00000000031EC000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	31EC000
Size:	12288

Details

Name:	00000010.00000002.507892743.00000286D8F08000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	286D8F08000
Size:	24576

Details

Name:	0000000C.00000002.498115591.000000000290D000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	290D000
Size:	32768

Details

Name:	00000003.00000002.822347336.000000006E9C5000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6E9C5000
Size:	4096

Details

Name:	00000010.00000002.510537117.00007FF524D3B000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF524D3B000
Size:	12288

Details

Name:	00000004.00000000.487394190.0000000003287000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	3287000
Size:	32768

Details

Name:	0000001A.00000003.636639598.000001DD87C57000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD87C57000
Size:	94208

Details

Name:	0000001B.00000003.617668621.000001B9C7BA1000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B9C7BA1000
Size:	36864

Details

Name:	00000002.00000000.472531193.00000000033D0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	33D0000
Size:	73728

Details

Name:	00000005.00000002.494331472.0000000002ADE000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2ADE000
Size:	4096

Details

Name:	0000000F.00000002.519366573.0000000000170000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	170000
Size:	16384

Details

Name:	00000002.00000002.500111313.0000000002AD8000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AD8000
Size:	8192

Details

Name:	0000001B.00000003.617695915.000001B9C7BB1000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B9C7BB1000
Size:	20480

Details

Name:	0000000C.00000003.482257928.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.479333273.00000000050BC000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50BC000
Size:	12288

Details

Name:	0000000C.00000003.491586024.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000001A.00000002.637136111.000001DD87B90000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1DD87B90000
Size:	16384

Details

Name:	0000000C.00000003.492636031.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000001A.00000003.626401611.000001DD8859A000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD8859A000
Size:	8192

Details

Name:	0000000C.00000003.486814598.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000010.00000000.494378053.00007DF532A50000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF532A50000
Size:	4096

Details

Name:	0000000C.00000002.497892277.00000000027DC000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27DC000
Size:	28672

Details

Name:	0000000C.00000003.492544351.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000001A.00000003.618477003.000001DD885A3000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD885A3000
Size:	176128

Details

Name:	00000002.00000000.473207344.0000000002B26000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B26000
Size:	8192

Details

Name:	00000017.00000002.587023528.00007FF5BDF8F000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BDF8F000
Size:	4096

Details

Name:	0000001A.00000002.637233554.000001DD87C29000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD87C29000
Size:	73728

Details

Name:	00000012.00000002.547304373.0000020022650000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	20022650000
Size:	4096

Details

Name:	00000004.00000000.492100712.0000000006D6E000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	6D6E000
Size:	8192

Details

Name:	0000000C.00000002.498480880.0000000002E6C000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2E6C000
Size:	16384

Details

Name:	0000001A.00000002.636907888.0000004692D7E000.00000004.00000010.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4692D7E000
Size:	8192

Details

Name:	00000002.00000003.459763892.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	0000001A.00000003.623927592.000001DD88590000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD88590000
Size:	49152

Details

Name:	0000000C.00000003.486556129.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.514974030.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000003.00000002.817392210.00000000009E0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	9E0000
Size:	16384

Details

Name:	0000000C.00000003.480655501.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000017.00000002.586500385.0000023930730000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	23930730000
Size:	4096

Details

Name:	0000000F.00000002.520318803.00000000026FC000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26FC000
Size:	8192

Details

Name:	00000003.00000002.821824111.000000000596F000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	596F000
Size:	4096

Details

Name:	00000002.00000003.456080064.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	0000000F.00000003.500235150.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000010.00000000.494464359.00007FF524DF1000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF524DF1000
Size:	16384

Details

Name:	0000001A.00000002.637546154.000001DD87D16000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD87D16000
Size:	4096

Details

Name:	0000000F.00000003.498250616.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000003.504498358.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000003.00000003.441076326.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	0000000F.00000003.500146688.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000005.00000002.493501576.0000000000800000.00000040.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page execute and read and write
Base address:	800000
Size:	4096

Details

Name:	00000000.00000002.817255020.0000000000390000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	390000
Size:	102400

Details

Name:	0000001A.00000003.626441447.000001DD8859A000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD8859A000
Size:	8192

Details

Name:	00000000.00000003.596133753.0000000000E00000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E00000
Size:	155648

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000002.494976792.0000000004374000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4374000
Size:	4096

Details

Name:	0000000C.00000003.482598975.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000016.00000002.819250179.00007FF549CDA000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF549CDA000
Size:	8192

Details

Name:	00000004.00000000.487451653.0000000003630000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	3630000
Size:	73728

Details

Name:	0000000F.00000003.514659216.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000016.00000002.818427498.00007DF5579C0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5579C0000
Size:	4096

Details

Name:	00000003.00000003.540495311.0000000002F27000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F27000
Size:	106496

Details

Name:	0000000C.00000003.483023332.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000002.00000000.472028812.0000000002A25000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A25000
Size:	4096

Details

Name:	00000003.00000003.633813147.0000000002FB5000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FB5000
Size:	4096

Details

Name:	0000000C.00000002.498710555.0000000003018000.00000004.00000020.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	3018000
Size:	446464

Details

Name:	0000000C.00000003.482841368.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.479160360.00000000030CE000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30CE000
Size:	4096

Details

Name:	0000000F.00000003.499317340.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000004.00000000.492345669.000000006E9D0000.00000020.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page execute read
Base address:	6E9D0000
Size:	135168

Details

Name:	00000012.00000002.545799590.0000020021F40000.00000004.00000040.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	20021F40000
Size:	4096

Details

Name:	0000000C.00000003.483713065.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000010.00000002.507450754.00000286D8CF0000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	286D8CF0000
Size:	102400

Details

Name:	0000000F.00000003.509907089.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000000.00000002.818563926.0000000001030000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1030000
Size:	372736

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	00000000.00000003.684800832.0000000003EAA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3EAA000
Size:	4096

Details

Name:	0000000C.00000003.479727706.0000000004FF7000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FF7000
Size:	20480

Details

Name:	0000000C.00000003.478871758.00000000050BC000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50BC000
Size:	12288

Details

Name:	0000000C.00000003.481877890.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000003.513926657.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000002.497738867.0000000002767000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2767000
Size:	8192

Details

Name:	0000000C.00000003.482687417.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000000.00000002.820149646.000000007F710000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F710000
Size:	4096

Details

Name:	0000000C.00000003.486950175.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000002.00000000.473947421.00000000031D0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	31D0000
Size:	36864

Details

Name:	00000016.00000002.819288007.00007FF549D32000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF549D32000
Size:	12288

Details

Name:	0000001B.00000002.618987276.00007FF5A8E63000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A8E63000
Size:	12288

Details

Name:	00000004.00000002.521367489.0000000002A0C000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A0C000
Size:	8192

Details

Name:	0000000C.00000003.481728652.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000000.00000002.819033703.00000000026ED000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	26ED000
Size:	12288

Details

Name:	00000009.00000000.468622385.000002389A5A0000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2389A5A0000
Size:	102400

Details

Name:	0000000F.00000003.509896924.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000003.00000002.819579393.00000000030D0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	30D0000
Size:	4096

Details

Name:	00000004.00000002.521872848.0000000002EEB000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2EEB000
Size:	20480

Details

Name:	00000000.00000003.503340622.0000000000E00000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E00000
Size:	4096

Details

Name:	0000000C.00000003.484566666.0000000005365000.00000004.00000040.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5365000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000016.00000002.819230088.00007FF549CBE000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF549CBE000
Size:	4096

Details

Name:	0000000F.00000002.519540873.00000000005AE000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5AE000
Size:	8192

Details

Name:	0000000F.00000003.504660670.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000C.00000003.480941011.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000000.00000002.818506726.0000000000E25000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	E25000
Size:	4096

Details

Name:	0000001B.00000003.617538886.000001B9C7B81000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B9C7B81000
Size:	122880

Details

Name:	00000002.00000003.435362086.0000000002F30000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F30000
Size:	4096

Details

Name:	00000000.00000003.550157014.0000000000DB3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DB3000
Size:	315392

Details

Name:	00000009.00000002.771785545.00007DF580F50000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF580F50000
Size:	12288

Details

Name:	00000004.00000000.309091388.000000007F350000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F350000
Size:	4096

Details

Name:	00000004.00000000.487755289.0000000006D70000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	6D70000
Size:	4096

Details

Name:	0000000F.00000003.496410394.0000000000739000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	739000
Size:	4096

Details

Name:	0000000F.00000003.496834287.000000000073E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	73E000
Size:	8192

Details

Name:	0000000C.00000003.479962870.0000000005039000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5039000
Size:	36864

Details

Name:	00000012.00000002.550119582.00007FF5C8907000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C8907000
Size:	8192

Details

Name:	00000010.00000002.510504729.00007FF524D27000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF524D27000
Size:	49152

Details

Name:	00000003.00000003.767527793.00000000059F1000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	59F1000
Size:	466944

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000C.00000003.491560550.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000004.00000000.487009746.0000000002BBF000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BBF000
Size:	16384

Details

Name:	0000000C.00000003.493033106.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000001B.00000000.606023474.00007DF5B6BA2000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5B6BA2000
Size:	4096

Details

Name:	0000000F.00000003.519033418.0000000002BAB000.00000004.00000040.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	2BAB000
Size:	16384

Details

Name:	00000016.00000000.563466676.00007DF5579C0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5579C0000
Size:	4096

Details

Name:	0000001A.00000002.637684230.000001DD88402000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD88402000
Size:	4096

Details

Name:	00000017.00000002.587488849.00007FF5BE7B2000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BE7B2000
Size:	12288

Details

Name:	0000001A.00000003.618962107.000001DD88A6A000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD88A6A000
Size:	425984

Details

Name:	00000000.00000002.820060366.000000006EA3E000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6EA3E000
Size:	4096

Details

Name:	00000016.00000002.819138471.00007FF549CB2000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF549CB2000
Size:	28672

Details

Name:	0000000C.00000003.483230820.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000000.493981924.00000000009D5000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	9D5000
Size:	4096

Details

Name:	00000004.00000000.487665328.0000000004D0E000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	4D0E000
Size:	8192

Details

Name:	0000001A.00000002.638635640.00007FF5882B3000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5882B3000
Size:	16384

Details

Name:	0000001A.00000000.604638776.00007DF596042000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF596042000
Size:	4096

Details

Name:	0000001A.00000002.638111511.00007FF587EB7000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF587EB7000
Size:	32768

Details

Name:	00000004.00000003.452871252.0000000003299000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3299000
Size:	86016

Details

Name:	0000001B.00000002.619093494.00007FF5A8EBA000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A8EBA000
Size:	8192

Details

Name:	00000012.00000002.546962047.000002002203C000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2002203C000
Size:	53248

Details

Name:	00000005.00000003.460066392.0000000000920000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	920000
Size:	4096

Details

Name:	00000012.00000002.547630870.00007FF5C8760000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C8760000
Size:	4096

Details

Name:	0000000F.00000003.514828414.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.486883646.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000000.00000003.776363602.0000000000E05000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E05000
Size:	20480

Details

Name:	0000000C.00000003.482822138.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000002.00000002.500360696.0000000002B35000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B35000
Size:	16384

Details

Name:	0000000F.00000003.497608047.0000000000703000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	703000
Size:	4096

Details

Name:	0000000C.00000003.480361021.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000002.00000000.472521116.00000000031D0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	31D0000
Size:	36864

Details

Name:	0000000C.00000003.486609409.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.496606522.0000000000733000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	733000
Size:	4096

Details

Name:	0000000F.00000003.503508138.0000000004991000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4991000
Size:	8192

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000002.00000002.501182089.0000000002F5A000.00000004.00000020.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2F5A000
Size:	106496

Details

Name:	0000000C.00000003.486891058.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.484110074.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000004.00000000.486781779.0000000002A25000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A25000
Size:	4096

Details

Name:	00000012.00000002.547189743.0000020022100000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20022100000
Size:	4096

Details

Name:	00000010.00000002.510148709.00007FF524C5C000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF524C5C000
Size:	4096

Details

Name:	0000000C.00000003.479067407.00000000050C2000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50C2000
Size:	4096

Details

Name:	00000017.00000002.586859657.00007DF4CA310000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4CA310000
Size:	20480

Details

Name:	00000010.00000002.507478031.00000286D8D20000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	286D8D20000
Size:	4096

Details

Name:	0000000F.00000003.514610029.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000C.00000002.498404442.0000000002E00000.00000004.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2E00000
Size:	4096

Details

Name:	0000000C.00000002.498414769.0000000002E10000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E10000
Size:	102400

Details

Name:	0000001A.00000002.637807203.000001DD88552000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD88552000
Size:	110592

Details

Name:	00000000.00000002.817958711.0000000000D30000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	D30000
Size:	36864

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000001A.00000003.616304883.000001DD885A5000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD885A5000
Size:	225280

Details

Name:	00000003.00000003.494913451.0000000002F3E000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F3E000
Size:	4096

Details

Name:	0000000C.00000003.486943714.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000003.496621774.000000000073E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	73E000
Size:	8192

Details

Name:	00000000.00000000.292202529.000000007F720000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F720000
Size:	4096

Details

Name:	00000016.00000002.819522190.00007FF549D61000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF549D61000
Size:	16384

Details

Name:	0000000C.00000003.491773048.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000004.00000000.489092158.00000000029FD000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	29FD000
Size:	8192

Details

Name:	00000004.00000003.462975263.0000000003200000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3200000
Size:	4096

Details

Name:	00000010.00000002.507609943.00000286D8E55000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	286D8E55000
Size:	57344

Details

Name:	00000002.00000000.472977405.000000000098B000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	98B000
Size:	20480

Details

Name:	00000017.00000002.586512144.0000023930750000.00000004.00000020.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	23930750000
Size:	8192

Details

Name:	00000005.00000002.494714274.0000000002B56000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B56000
Size:	16384

Details

Name:	0000000C.00000003.496547867.0000000005058000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5058000
Size:	77824

Details

Name:	0000000C.00000003.479284354.00000000030E7000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30E7000
Size:	4096

Details

Name:	0000000F.00000002.520925123.000000007FED0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FED0000
Size:	4096

Details

Name:	0000000F.00000003.507837529.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000C.00000003.482538009.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000017.00000002.586463458.0000023930700000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	23930700000
Size:	102400

Details

Name:	00000002.00000002.501933462.000000007FA90000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FA90000
Size:	4096

Details

Name:	0000000F.00000003.504543744.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000003.514175307.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000012.00000002.549724633.00007FF5C8887000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C8887000
Size:	4096

Details

Name:	0000000C.00000000.475970289.00000000029B8000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	29B8000
Size:	16384

Details

Name:	0000000C.00000003.491479747.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000001B.00000002.619187815.00007FF5A8F2A000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A8F2A000
Size:	12288

Details

Name:	0000000C.00000002.499187154.000000000574E000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	574E000
Size:	8192

Details

Name:	00000004.00000002.521471155.0000000002B1A000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B1A000
Size:	12288

Details

Name:	00000004.00000000.487070884.0000000002BEC000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BEC000
Size:	16384

Details

Name:	0000000C.00000003.492558806.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000C.00000003.493222143.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000002.519882238.000000000252A000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	252A000
Size:	8192

Details

Name:	0000001A.00000003.616486473.000001DD8859D000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD8859D000
Size:	12288

Details

Name:	0000000F.00000003.502065008.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000003.500264661.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000001A.00000002.637959178.00007DF596040000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF596040000
Size:	4096

Details

Name:	0000000C.00000002.498564645.0000000002F30000.00000004.00000040.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2F30000
Size:	16384

Details

Name:	0000000F.00000002.520818489.0000000004E20000.00000008.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page write copy
Base address:	4E20000
Size:	266240

Details

Name:	00000002.00000002.499757918.00000000009E0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	9E0000
Size:	4096

Details

Name:	0000000C.00000003.482510646.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000002.00000000.473142261.00000000029FD000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	29FD000
Size:	8192

Details

Name:	0000000C.00000003.481788920.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000003.497905292.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.493244212.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000004.00000002.521826648.0000000002E50000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E50000
Size:	102400

Details

Name:	00000004.00000000.491958159.00000000068F0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	68F0000
Size:	4096

Details

Name:	0000000F.00000003.497471225.000000000073E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	73E000
Size:	4096

Details

Name:	00000002.00000000.472107072.0000000002B3F000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B3F000
Size:	24576

Details

Name:	00000002.00000002.499964891.0000000000DB0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DB0000
Size:	4096

Details

Name:	0000000F.00000002.520714773.0000000004ABD000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4ABD000
Size:	12288

Details

Name:	0000000C.00000003.492680710.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000000.00000003.729286021.0000000003EAA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3EAA000
Size:	4096

Details

Name:	0000000F.00000002.520133696.00000000025B6000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25B6000
Size:	8192

Details

Name:	0000000F.00000002.520153061.000000000266E000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	266E000
Size:	4096

Details

Name:	0000000C.00000003.480409772.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000005.00000002.493364833.00000000003D0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3D0000
Size:	102400

Details

Name:	00000012.00000002.546791478.0000020022013000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20022013000
Size:	86016

Details

Name:	00000002.00000003.462444013.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	00000012.00000002.550165546.00007FF5C890D000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C890D000
Size:	8192

Details

Name:	0000001A.00000002.638872733.00007FF58832E000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58832E000
Size:	4096

Details

Name:	00000004.00000000.489263236.0000000002ADE000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2ADE000
Size:	4096

Details

Name:	00000009.00000002.771189273.000000EE28AF9000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	EE28AF9000
Size:	28672

Details

Name:	00000003.00000003.768595504.0000000005A62000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A62000
Size:	4096

Details

Name:	0000000C.00000003.492132626.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.486651362.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000002.00000000.473445284.0000000002F1E000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	2F1E000
Size:	8192

Details

Name:	0000000F.00000003.497880630.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000009.00000003.489834683.000002389A636000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2389A636000
Size:	172032

Details

Name:	0000000F.00000002.519989034.000000000254F000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	254F000
Size:	4096

Details

Name:	00000016.00000002.817238887.00000009ADE7B000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	9ADE7B000
Size:	20480

Details

Name:	0000000C.00000000.476923549.000000007F582000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F582000
Size:	4096

Details

Name:	0000000C.00000003.486398107.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.492873354.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000001A.00000003.610840970.000001DD8859C000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD8859C000
Size:	114688

Details

Name:	0000000F.00000003.497832197.00000000006E0000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6E0000
Size:	8192

Details

Name:	0000000C.00000002.498130298.0000000002916000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2916000
Size:	16384

Details

Name:	0000001B.00000003.617855083.000001B9C7B86000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B9C7B86000
Size:	69632

Details

Name:	0000001A.00000003.614003629.000001DD88595000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD88595000
Size:	12288

Details

Name:	00000010.00000002.509967150.00007FF524BC0000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF524BC0000
Size:	4096

Details

Name:	00000016.00000003.577817600.0000016F79ED0000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16F79ED0000
Size:	4096

Details

Name:	00000002.00000000.472296471.0000000002BF8000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BF8000
Size:	16384

Details

Name:	00000004.00000000.490095955.0000000002F90000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2F90000
Size:	4096

Details

Name:	0000000C.00000003.478992517.00000000030DB000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30DB000
Size:	4096

Details

Name:	0000000F.00000003.500577368.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000002.520933505.000000007FED2000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FED2000
Size:	4096

Details

Name:	00000000.00000003.504126700.0000000000DFC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DFC000
Size:	16384

Details

Name:	00000003.00000003.492530164.0000000002E40000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2E40000
Size:	4096

Details

Name:	0000000C.00000003.482004640.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.486456482.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000002.00000000.473311250.0000000002BBF000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BBF000
Size:	16384

Details

Name:	00000004.00000003.459631619.0000000005120000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5120000
Size:	4096

Details

Name:	00000003.00000000.294114331.000000007F140000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F140000
Size:	4096

Details

Name:	0000000F.00000003.496980223.0000000000744000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	744000
Size:	4096

Details

Name:	0000001A.00000003.618803933.000001DD88A02000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD88A02000
Size:	159744

Details

Name:	0000000F.00000002.520524508.0000000004500000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4500000
Size:	36864

Details

Name:	0000000C.00000003.491685986.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000003.500291386.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000003.00000002.821898635.0000000005970000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5970000
Size:	4096

Details

Name:	00000012.00000002.550131378.00007FF5C890A000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C890A000
Size:	8192

Details

Name:	0000001A.00000003.623891477.000001DD8858B000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD8858B000
Size:	4096

Details

Name:	00000002.00000000.472697351.000000007FAA2000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FAA2000
Size:	4096

Details

Name:	00000012.00000002.547261070.00000200222D0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	200222D0000
Size:	4096

Details

Name:	0000000C.00000002.499111088.00000000050C9000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	50C9000
Size:	8192

Details

Name:	0000000F.00000002.520307604.00000000026EB000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26EB000
Size:	4096

Details

Name:	00000000.00000002.820029497.000000006EA29000.00000040.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute and read and write
Base address:	6EA29000
Size:	12288

Details

Name:	0000000F.00000003.500133640.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000003.499670689.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.479984599.000000000310A000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	310A000
Size:	20480

Details

Name:	00000003.00000001.294435338.000000006E9C0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E9C0000
Size:	4096

Details

Name:	0000000F.00000003.515333989.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000005.00000002.494899412.0000000002BF3000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BF3000
Size:	4096

Details

Name:	00000012.00000002.547580229.00007FF5C8741000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C8741000
Size:	8192

Details

Name:	0000000C.00000000.476061932.000000007F580000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F580000
Size:	4096

Details

Name:	0000000F.00000003.500125383.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.482621366.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000002.00000003.459227734.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	00000003.00000002.819857463.0000000003340000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3340000
Size:	73728

Details

Name:	00000016.00000002.819361391.00007FF549D4A000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF549D4A000
Size:	12288

Details

Name:	0000000C.00000003.482594362.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000017.00000002.586631916.0000023930846000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	23930846000
Size:	16384

Details

Name:	00000005.00000003.459675286.0000000000920000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	920000
Size:	4096

Details

Name:	00000004.00000003.452934908.0000000003296000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3296000
Size:	12288

Details

Name:	0000000F.00000003.509661503.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000002.00000003.453266931.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	00000005.00000002.494098741.0000000000DE1000.00000020.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	DE1000
Size:	45056

Details

Name:	0000000C.00000003.492319803.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000012.00000002.550327280.00007FF5C8981000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C8981000
Size:	32768

Details

Name:	00000002.00000002.499861410.0000000000D60000.00000040.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page execute and read and write
Base address:	D60000
Size:	4096

Details

Name:	0000001A.00000003.611771475.000001DD88A03000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD88A03000
Size:	241664

Details

Name:	00000017.00000002.586930417.00007DF5CC460000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5CC460000
Size:	12288

Details

Name:	00000017.00000002.587436542.00007FF5BE733000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BE733000
Size:	24576

Details

Name:	00000000.00000002.818905968.00000000024D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24D0000
Size:	4096

Details

Name:	0000001B.00000002.618560490.000001B9C7E70000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B9C7E70000
Size:	73728

Details

Name:	0000000C.00000003.482413223.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.481913395.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000C.00000003.486872051.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.499596383.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000001A.00000002.638552054.00007FF588255000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF588255000
Size:	4096

Details

Name:	00000002.00000000.473121764.00000000029D3000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	29D3000
Size:	4096

Details

Name:	0000000C.00000003.486389305.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000C.00000002.498219607.0000000002984000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2984000
Size:	8192

Details

Name:	0000000C.00000003.479148480.00000000030CA000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30CA000
Size:	4096

Details

Name:	0000000C.00000002.498777526.000000000310C000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	310C000
Size:	12288

Details

Name:	00000002.00000003.434311823.0000000002F20000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F20000
Size:	4096

Details

Name:	0000000F.00000003.502893998.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000004.00000000.486855721.0000000002B1A000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B1A000
Size:	12288

Details

Name:	00000002.00000002.499818628.0000000000C50000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	C50000
Size:	16384

Details

Name:	00000004.00000002.521458275.0000000002B16000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B16000
Size:	4096

Details

Name:	0000000C.00000003.486463927.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000016.00000002.818627943.00007FF549523000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF549523000
Size:	16384

Details

Name:	0000000C.00000003.485897319.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000003.00000002.818317497.0000000002B1A000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B1A000
Size:	12288

Details

Name:	00000010.00000002.510082987.00007FF524C45000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF524C45000
Size:	20480

Details

Name:	00000010.00000002.507355703.000000F7382FB000.00000004.00000010.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F7382FB000
Size:	20480

Details

Name:	00000002.00000000.473361751.0000000002BDB000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BDB000
Size:	36864

Details

Name:	0000001A.00000003.610823774.000001DD8858B000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD8858B000
Size:	57344

Details

Name:	0000000C.00000003.482657787.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.500208013.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000005.00000003.461406158.0000000000920000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	920000
Size:	4096

Details

Name:	0000001A.00000003.616348099.000001DD885A4000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD885A4000
Size:	4096

Details

Name:	0000000F.00000003.500808079.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000003.502186923.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000002.520064623.0000000002579000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2579000
Size:	12288

Details

Name:	00000004.00000000.491913753.00000000068AE000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	68AE000
Size:	8192

Details

Name:	00000004.00000000.489238743.0000000002AD8000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AD8000
Size:	8192

Details

Name:	0000000F.00000002.519593113.0000000000650000.00000004.00000020.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	650000
Size:	675840

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000010.00000002.507997670.00007DF532A62000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF532A62000
Size:	4096

Details

Name:	0000001B.00000002.618916622.00007FF5A8E4F000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A8E4F000
Size:	12288

Details

Name:	00000009.00000002.771906445.00007FF572EC9000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF572EC9000
Size:	4096

Details

Name:	0000000C.00000003.491631992.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000001B.00000002.618948921.00007FF5A8E56000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A8E56000
Size:	16384

Details

Name:	00000003.00000002.817780548.0000000000D6D000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	D6D000
Size:	8192

Details

Name:	0000001A.00000002.638438884.00007FF5881DF000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5881DF000
Size:	8192

Details

Name:	0000000C.00000003.487430613.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000001A.00000002.638048805.00007FF587C0C000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF587C0C000
Size:	4096

Details

Name:	00000003.00000003.634155651.0000000002FB5000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FB5000
Size:	4096

Details

Name:	0000001A.00000002.637291700.000001DD87C58000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD87C58000
Size:	90112

Details

Name:	00000002.00000003.438698340.0000000002F30000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F30000
Size:	4096

Details

Name:	0000000C.00000003.491885929.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.513999317.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000001A.00000003.626372743.000001DD8858F000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD8858F000
Size:	40960

Details

Name:	0000001B.00000002.618307506.000001B9C7B98000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B9C7B98000
Size:	8192

Details

Name:	0000000F.00000003.503422392.0000000004601000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4601000
Size:	8192

Details

Name:	00000005.00000002.494119702.0000000000DED000.00000004.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	DED000
Size:	8192

Details

Name:	0000000F.00000002.520413799.0000000002776000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2776000
Size:	12288

Details

Name:	00000012.00000002.547009778.000002002204D000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2002204D000
Size:	8192

Details

Name:	0000000C.00000000.475616110.0000000000C05000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	C05000
Size:	4096

Details

Name:	0000000F.00000003.501596589.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000C.00000003.485877722.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000004.00000000.487373317.000000000326A000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	326A000
Size:	110592

Details

Name:	00000003.00000002.818426662.0000000002B47000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B47000
Size:	12288

Details

Name:	0000000F.00000003.509728923.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.479345599.00000000050BC000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50BC000
Size:	12288

Details

Name:	00000000.00000002.819626614.000000006E9C1000.00000020.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	6E9C1000
Size:	8192

Details

Name:	0000001A.00000002.638937112.00007FF58834D000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58834D000
Size:	12288

Details

Name:	0000000F.00000003.502147249.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000C.00000003.486561898.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000003.499480874.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000002.00000003.462242489.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	00000004.00000000.491941746.00000000068EE000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	68EE000
Size:	8192

Details

Name:	00000002.00000000.472940105.0000000000930000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	930000
Size:	102400

Details

Name:	00000005.00000002.493463924.00000000007A0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7A0000
Size:	4096

Details

Name:	0000000C.00000000.475664588.0000000002EB0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2EB0000
Size:	16384

Details

Name:	00000004.00000000.492271625.000000006E9C3000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E9C3000
Size:	4096

Details

Name:	0000000F.00000003.496638888.000000000074A000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	74A000
Size:	20480

Details

Name:	00000003.00000000.294107143.000000007F130000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F130000
Size:	4096

Details

Name:	00000002.00000003.461540174.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	0000000C.00000003.483441831.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000003.00000003.812618415.0000000002FA0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FA0000
Size:	61440

Details

Name:	00000003.00000002.818626843.0000000002BCA000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BCA000
Size:	24576

Details

Name:	0000000F.00000003.505171446.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000C.00000003.486748094.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000016.00000002.818742528.00007FF5495D1000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5495D1000
Size:	8192

Details

Name:	00000004.00000002.522821092.000000007F350000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F350000
Size:	4096

Details

Name:	0000001A.00000002.638592731.00007FF588292000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF588292000
Size:	4096

Details

Name:	0000001A.00000002.637751395.000001DD88514000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD88514000
Size:	16384

Details

Name:	00000004.00000000.490140433.0000000002FC0000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	2FC0000
Size:	20480

Details

Name:	0000000C.00000003.479382026.00000000030ED000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30ED000
Size:	4096

Details

Name:	0000000F.00000003.499996065.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000003.499502227.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000002.499119703.00000000050CC000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	50CC000
Size:	8192

Details

Name:	00000005.00000001.321623947.000000006E9C0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E9C0000
Size:	4096

Details

Name:	0000000C.00000003.483201498.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000004.00000003.459699224.0000000005120000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5120000
Size:	4096

Details

Name:	00000009.00000002.772319090.00007FF5731F7000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5731F7000
Size:	16384

Details

Name:	0000000F.00000003.499800162.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000001B.00000002.619108432.00007FF5A8EBD000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A8EBD000
Size:	8192

Details

Name:	0000000F.00000003.514950916.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000005.00000002.493481534.00000000007E0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7E0000
Size:	4096

Details

Name:	0000001A.00000002.637056005.000000469377F000.00000004.00000010.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	469377F000
Size:	4096

Details

Name:	0000000C.00000003.482427033.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000C.00000003.483538879.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000005.00000002.493630781.000000000094A000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	94A000
Size:	110592

Details

Name:	00000004.00000000.492649831.000000006EA3F000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	6EA3F000
Size:	16384

Details

Name:	00000002.00000000.472351666.0000000002F77000.00000004.00000020.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	2F77000
Size:	28672

Details

Name:	0000000F.00000002.520700575.000000000496F000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	496F000
Size:	4096

Details

Name:	00000004.00000000.490062046.0000000002F00000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2F00000
Size:	4096

Details

Name:	00000002.00000000.472090536.0000000002B35000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B35000
Size:	16384

Details

Name:	00000003.00000003.768638870.0000000002FB0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FB0000
Size:	16384

Details

Name:	00000004.00000000.492705163.000000007F352000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F352000
Size:	4096

Details

Name:	00000012.00000000.530334022.00007DF5D6602000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5D6602000
Size:	4096

Details

Name:	00000004.00000002.522803333.000000007F250000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F250000
Size:	20480

Details

Name:	00000004.00000000.489277992.0000000002AEE000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AEE000
Size:	28672

Details

Name:	00000010.00000002.507850804.00000286D8E7E000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	286D8E7E000
Size:	8192

Details

Name:	0000000C.00000003.481718243.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.513785163.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000003.497719206.00000000006CB000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6CB000
Size:	4096

Details

Name:	0000000C.00000003.486711955.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000003.00000003.442985424.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	00000002.00000000.473275783.0000000002B6C000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B6C000
Size:	4096

Details

Name:	0000001B.00000002.618110938.00000009159FD000.00000004.00000010.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	9159FD000
Size:	12288

Details

Name:	00000004.00000003.485520868.0000000004D10000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4D10000
Size:	4096

Details

Name:	00000016.00000000.563443187.0000016F79D00000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	16F79D00000
Size:	102400

Details

Name:	0000001B.00000002.618410768.000001B9C7C70000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B9C7C70000
Size:	36864

Details

Name:	00000002.00000000.471868229.00000000009CB000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	9CB000
Size:	20480

Details

Name:	00000009.00000002.772167064.00007FF5731D9000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5731D9000
Size:	8192

Details

Name:	00000003.00000002.818072116.0000000002A1C000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A1C000
Size:	4096

Details

Name:	00000010.00000002.510617706.00007FF524D6D000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF524D6D000
Size:	8192

Details

Name:	0000001A.00000002.638525867.00007FF58823C000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58823C000
Size:	4096

Details

Name:	00000002.00000002.500094508.0000000002A25000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A25000
Size:	4096

Details

Name:	0000000F.00000003.507413913.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000003.00000002.819708570.0000000003137000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3137000
Size:	12288

Details

Name:	00000002.00000000.474163446.000000007F990000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F990000
Size:	20480

Details

Name:	00000005.00000003.459341021.0000000000920000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	920000
Size:	4096

Details

Name:	0000000F.00000003.500873451.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000004.00000002.522597708.000000006E9C3000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E9C3000
Size:	4096

Details

Name:	0000000F.00000003.497892606.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000C.00000003.483754170.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.484053522.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.492166597.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000001B.00000000.605986163.00007DF5B6BA0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5B6BA0000
Size:	4096

Details

Name:	00000012.00000000.530325025.00007DF5D6600000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5D6600000
Size:	4096

Details

Name:	00000012.00000002.547663621.00007FF5C879F000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C879F000
Size:	8192

Details

Name:	0000000C.00000003.492202215.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000002.00000002.501345743.00000000030CF000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	30CF000
Size:	4096

Details

Name:	0000000F.00000003.502528229.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000C.00000003.483556691.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000C.00000002.499255924.000000000597D000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	597D000
Size:	12288

Details

Name:	0000000C.00000003.479645933.0000000004FF7000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FF7000
Size:	20480

Details

Name:	00000004.00000000.487116167.0000000002E50000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E50000
Size:	102400

Details

Name:	00000002.00000000.471943181.0000000000D70000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	D70000
Size:	4096

Details

Name:	00000004.00000000.490083319.0000000002F70000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2F70000
Size:	16384

Details

Name:	00000002.00000000.473373612.0000000002BE6000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BE6000
Size:	12288

Details

Name:	0000000C.00000003.492282135.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000004.00000003.450524829.0000000002FB0000.00000040.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	2FB0000
Size:	4096

Details

Name:	0000000C.00000002.498090224.00000000028FF000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28FF000
Size:	20480

Details

Name:	0000000F.00000003.515345830.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000017.00000002.587298950.00007FF5BE6E9000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BE6E9000
Size:	8192

Details

Name:	00000005.00000002.495127388.0000000005F30000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	5F30000
Size:	733184

Details

Name:	0000000C.00000002.499092071.00000000050C3000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	50C3000
Size:	12288

Details

Name:	0000000F.00000003.514091035.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.479593557.00000000030E7000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30E7000
Size:	4096

Details

Name:	00000004.00000000.486975445.0000000002B70000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B70000
Size:	73728

Details

Name:	0000000C.00000002.498886431.0000000004E9D000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4E9D000
Size:	12288

Details

Name:	0000000C.00000002.498690257.000000000300E000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	300E000
Size:	8192

Details

Name:	00000009.00000002.771333767.000002389A602000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2389A602000
Size:	40960

Details

Name:	00000004.00000000.488344675.000000006E9C3000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E9C3000
Size:	4096

Details

Name:	00000000.00000002.817830701.00000000009CE000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	9CE000
Size:	8192

Details

Name:	0000000F.00000002.520966530.000000007FEF0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FEF0000
Size:	12288

Details

Name:	0000000C.00000003.486700957.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.493212627.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000002.00000000.472303733.0000000002E20000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	2E20000
Size:	4096

Details

Name:	00000009.00000002.772191947.00007FF5731DD000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5731DD000
Size:	4096

Details

Name:	0000000C.00000000.475626159.00000000029B8000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	29B8000
Size:	16384

Details

Name:	00000004.00000000.487654471.0000000004CCD000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	4CCD000
Size:	12288

Details

Name:	00000004.00000002.522252189.00000000037B0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	37B0000
Size:	4096

Details

Name:	0000000C.00000003.482020124.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000009.00000002.772660810.00007FF5732C5000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5732C5000
Size:	16384

Details

Name:	00000016.00000002.817646409.0000016F79E55000.00000004.00000040.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	16F79E55000
Size:	12288

Details

Name:	0000000C.00000003.479304623.00000000030F9000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30F9000
Size:	4096

Details

Name:	00000002.00000002.500400856.0000000002B3B000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B3B000
Size:	12288

Details

Name:	0000000C.00000002.498843933.00000000033E0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	33E0000
Size:	36864

Details

Name:	0000000F.00000002.520779183.0000000004CD0000.00000004.00000040.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4CD0000
Size:	4096

Details

Name:	00000000.00000003.775987467.0000000000E08000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E08000
Size:	8192

Details

Name:	00000009.00000002.771323037.000002389A600000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2389A600000
Size:	4096

Details

Name:	0000000F.00000003.497156511.0000000000744000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	744000
Size:	4096

Details

Name:	00000004.00000000.487258356.0000000002F90000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2F90000
Size:	4096

Details

Name:	00000002.00000002.501852884.0000000004E4C000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4E4C000
Size:	16384

Details

Name:	00000002.00000000.472319646.0000000002F20000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	2F20000
Size:	4096

Details

Name:	0000000F.00000002.520195050.00000000026AA000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26AA000
Size:	12288

Details

Name:	0000000F.00000000.494742895.000000007FEF0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FEF0000
Size:	12288

Details

Name:	0000000C.00000003.481860056.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000012.00000002.547272959.00000200224D0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	200224D0000
Size:	12288

Details

Name:	00000003.00000002.820761440.0000000004F7A000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4F7A000
Size:	24576

Details

Name:	0000000C.00000003.482852467.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000004.00000002.522190960.000000000329A000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	329A000
Size:	57344

Details

Name:	00000012.00000002.550204487.00007FF5C8969000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C8969000
Size:	12288

Details

Name:	0000000C.00000002.498671963.0000000002FCE000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2FCE000
Size:	8192

Details

Name:	00000000.00000003.594996975.0000000000E0B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E0B000
Size:	77824

Details

Name:	00000002.00000000.472660971.00000000068A0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	68A0000
Size:	4096

Details

Name:	00000003.00000003.459295332.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	00000003.00000002.817843609.0000000000D75000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	D75000
Size:	12288

Details

Name:	00000005.00000002.495372173.000000007EFE2000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7EFE2000
Size:	4096

Details

Name:	00000000.00000003.596028171.0000000003E31000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E31000
Size:	462848

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000F.00000003.499405606.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000000.494034489.000000007FEF0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FEF0000
Size:	12288

Details

Name:	0000000C.00000003.491596969.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.496990412.000000000074A000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	74A000
Size:	20480

Details

Name:	00000017.00000002.586766358.0000023930908000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	23930908000
Size:	24576

Details

Name:	0000000C.00000003.479682191.00000000030E7000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30E7000
Size:	4096

Details

Name:	00000009.00000002.772299462.00007FF5731F3000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5731F3000
Size:	12288

Details

Name:	0000001B.00000002.618331044.000001B9C7BA1000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B9C7BA1000
Size:	36864

Details

Name:	0000000F.00000003.505928010.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000003.500565896.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.484071447.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000C.00000002.498904511.0000000004EE0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4EE0000
Size:	36864

Details

Name:	00000005.00000003.459800504.0000000000920000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	920000
Size:	4096

Details

Name:	0000000F.00000003.497819322.00000000006D4000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6D4000
Size:	4096

Details

Name:	0000000F.00000000.494474065.00000000000D0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	D0000
Size:	102400

Details

Name:	0000000F.00000003.497630084.000000000070E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	70E000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000000.00000003.729300360.0000000000E0B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E0B000
Size:	110592

Details

Name:	0000001A.00000002.637762857.000001DD88519000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD88519000
Size:	204800

Details

Name:	00000016.00000002.819034321.00007FF549C76000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF549C76000
Size:	16384

Details

Name:	0000000F.00000003.498270460.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000002.00000002.500553082.0000000002B4D000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B4D000
Size:	32768

Details

Name:	00000010.00000002.510297472.00007FF524CF9000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF524CF9000
Size:	8192

Details

Name:	00000003.00000002.819625827.0000000003130000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3130000
Size:	20480

Details

Name:	0000000C.00000003.486759375.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000002.00000000.473344533.0000000002BD1000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BD1000
Size:	32768

Details

Name:	0000001A.00000003.615456886.000001DD885C4000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD885C4000
Size:	147456

Details

Name:	00000012.00000002.550177228.00007FF5C8962000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C8962000
Size:	12288

Details

Name:	00000016.00000003.563963337.0000016F79F6C000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16F79F6C000
Size:	8192

Details

Name:	00000002.00000000.472038871.0000000002ADE000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2ADE000
Size:	4096

Details

Name:	0000000C.00000003.491794179.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.500351502.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000002.00000002.500952096.0000000002BDB000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BDB000
Size:	36864

Details

Name:	0000000C.00000003.482180791.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.509966563.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000002.00000002.501946188.000000007FA92000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FA92000
Size:	4096

Details

Name:	00000000.00000003.684915268.0000000000E1E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E1E000
Size:	4096

Details

Name:	0000000F.00000002.519475285.0000000000450000.00000004.00000020.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	450000
Size:	16384

Details

Name:	0000000F.00000003.514910564.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000003.513714203.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000016.00000002.818272651.0000016F7AC30000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	16F7AC30000
Size:	65536

Details

Name:	0000001A.00000003.611830205.000001DD885A4000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD885A4000
Size:	126976

Details

Name:	00000012.00000002.547521121.00007FF5C8477000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C8477000
Size:	32768

Details

Name:	00000002.00000002.501977825.000000007FAA2000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FAA2000
Size:	4096

Details

Name:	0000000C.00000002.498298549.00000000029A6000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29A6000
Size:	12288

Details

Name:	0000000C.00000003.486449938.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000000.00000003.595050858.0000000000DB7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DB7000
Size:	299008

Details

Name:	0000000F.00000002.520799675.0000000004D5E000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4D5E000
Size:	8192

Details

Name:	0000000C.00000003.483375843.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000002.519726118.000000000074B000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	74B000
Size:	16384

Details

Name:	0000000F.00000002.520910421.000000007FDD0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FDD0000
Size:	20480

Details

Name:	0000000F.00000003.503028557.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000003.515578440.0000000004659000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4659000
Size:	36864

Details

Name:	00000002.00000002.500005203.00000000029D3000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29D3000
Size:	4096

Details

Name:	00000003.00000003.587074545.0000000002F92000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F92000
Size:	4096

Details

Name:	0000001A.00000003.623951917.000001DD88595000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD88595000
Size:	28672

Details

Name:	00000002.00000000.472684752.000000007FA92000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FA92000
Size:	4096

Details

Name:	0000000F.00000003.500039719.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000000.00000002.817588834.000000000079C000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	79C000
Size:	4096

Details

Name:	00000003.00000002.818096161.0000000002A25000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A25000
Size:	4096

Details

Name:	0000000C.00000003.479793531.00000000030FE000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30FE000
Size:	4096

Details

Name:	00000009.00000002.771398275.000002389A639000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2389A639000
Size:	4096

Details

Name:	00000000.00000003.596173743.0000000000E1E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E1E000
Size:	32768

Details

Name:	00000016.00000002.818453124.00007DF5579C2000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5579C2000
Size:	4096

Details

Name:	00000003.00000003.495465954.0000000002F45000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F45000
Size:	77824

Details

Name:	00000016.00000002.817587169.0000016F79E40000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	16F79E40000
Size:	16384

Details

Name:	00000009.00000003.512277599.000002389A63A000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2389A63A000
Size:	172032

Details

Name:	0000000C.00000003.496348757.00000000049F0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	49F0000
Size:	4096

Details

Name:	0000000C.00000003.485519856.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000001A.00000002.636880377.0000004692C7B000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4692C7B000
Size:	20480

Details

Name:	0000000C.00000003.486660207.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000003.00000003.445865539.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	0000000F.00000003.505876339.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000003.00000003.586643642.0000000002FB5000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FB5000
Size:	4096

Details

Name:	00000002.00000000.474110850.0000000004E4C000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	4E4C000
Size:	16384

Details

Name:	0000000F.00000003.514728995.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000000.00000002.820221499.000000007F722000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F722000
Size:	4096

Details

Name:	00000016.00000002.817445093.0000016F79CF0000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	16F79CF0000
Size:	4096

Details

Name:	0000000F.00000003.507021066.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000003.00000002.820435094.0000000004A9C000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4A9C000
Size:	16384

Details

Name:	0000000C.00000003.482098597.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000012.00000002.549841130.00007FF5C88A3000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C88A3000
Size:	28672

Details

Name:	0000000C.00000003.484532833.0000000005375000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5375000
Size:	12288

Details

Name:	0000000C.00000003.480449488.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.480245644.00000000050BC000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50BC000
Size:	8192

Details

Name:	00000002.00000000.473130263.00000000029F1000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	29F1000
Size:	36864

Details

Name:	0000000C.00000002.499204495.00000000057CB000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	57CB000
Size:	20480

Details

Name:	0000000F.00000003.497695648.00000000006C5000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C5000
Size:	12288

Details

Name:	0000001A.00000002.637695830.000001DD88500000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD88500000
Size:	65536

Details

Name:	00000003.00000003.494922552.0000000002F45000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F45000
Size:	77824

Details

Name:	00000004.00000000.487062512.0000000002BE6000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BE6000
Size:	12288

Details

Name:	00000003.00000002.822692716.000000007F142000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F142000
Size:	4096

Details

Name:	0000000C.00000003.486913318.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000001A.00000002.638952775.00007FF5883A2000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5883A2000
Size:	12288

Details

Name:	00000005.00000002.494813458.0000000002BBF000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BBF000
Size:	16384

Details

Name:	00000003.00000002.818256474.0000000002AF1000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AF1000
Size:	16384

Details

Name:	0000001A.00000002.637345845.000001DD87C81000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD87C81000
Size:	221184

Details

Name:	00000016.00000002.818413574.00007DF455890000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF455890000
Size:	20480

Details

Name:	0000000F.00000003.500600973.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.486780455.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000003.00000002.817243195.00000000009B0000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	9B0000
Size:	4096

Details

Name:	00000005.00000003.458240587.0000000000972000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	972000
Size:	12288

Details

Name:	00000004.00000000.490940107.00000000037B0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	37B0000
Size:	4096

Details

Name:	0000000C.00000002.498586668.0000000002F3A000.00000004.00000040.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2F3A000
Size:	20480

Details

Name:	00000000.00000003.640710213.0000000000E25000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E25000
Size:	4096

Details

Name:	0000000F.00000000.494021422.000000007FEE2000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FEE2000
Size:	4096

Details

Name:	00000005.00000002.494800304.0000000002BBB000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BBB000
Size:	12288

Details

Name:	0000000F.00000003.515076936.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000009.00000002.772148300.00007FF5731C7000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5731C7000
Size:	4096

Details

Name:	0000000C.00000003.492213859.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.482760418.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.515189186.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000002.00000000.472136262.0000000002B6C000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B6C000
Size:	4096

Details

Name:	0000001A.00000002.638312995.00007FF588121000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF588121000
Size:	4096

Details

Name:	00000004.00000000.488646060.000000006EA3E000.00000004.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page read and write
Base address:	6EA3E000
Size:	4096

Details

Name:	00000003.00000003.459965484.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	00000002.00000002.499837853.0000000000C70000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	C70000
Size:	4096

Details

Name:	00000016.00000003.577795149.0000016F7ACB0000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16F7ACB0000
Size:	20480

Details

Name:	00000004.00000000.490575609.0000000003260000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	3260000
Size:	32768

Details

Name:	0000000C.00000000.475687844.0000000002ED0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	2ED0000
Size:	4096

Details

Name:	0000000C.00000003.493202774.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000003.00000002.818244937.0000000002AEE000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AEE000
Size:	8192

Details

Name:	0000000F.00000002.519762528.0000000000810000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	810000
Size:	4096

Details

Name:	00000002.00000000.293770890.000000007FA90000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FA90000
Size:	4096

Details

Name:	0000000C.00000003.480137678.000000000308B000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	308B000
Size:	4096

Details

Name:	0000001A.00000003.607350177.000001DD883A0000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD883A0000
Size:	4096

Details

Name:	0000001A.00000002.638470637.00007FF5881E7000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5881E7000
Size:	4096

Details

Name:	0000001B.00000000.606095371.00007FF5A8F41000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A8F41000
Size:	16384

Details

Name:	0000000F.00000003.502993998.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000010.00000000.494357860.00000286D8CF0000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	286D8CF0000
Size:	102400

Details

Name:	00000002.00000000.474101927.00000000049EF000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	49EF000
Size:	4096

Details

Name:	0000000F.00000003.499251339.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000003.507472636.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000002.519293016.00000000000C0000.00000004.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	C0000
Size:	4096

Details

Name:	0000000C.00000003.483476111.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000C.00000003.492749652.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000003.00000003.459562971.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	00000002.00000000.473046257.0000000000C50000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	C50000
Size:	16384

Details

Name:	0000000F.00000003.496446853.0000000000744000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	744000
Size:	4096

Details

Name:	00000012.00000002.549925658.00007FF5C88B7000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C88B7000
Size:	16384

Details

Name:	00000005.00000003.463180473.0000000000930000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	930000
Size:	4096

Details

Name:	0000000F.00000003.518993046.0000000002BA0000.00000004.00000040.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	2BA0000
Size:	8192

Details

Name:	0000000C.00000003.481695278.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.501755274.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000003.499349992.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000009.00000002.771769271.00007DF580F42000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF580F42000
Size:	4096

Details

Name:	00000004.00000000.486839885.0000000002B11000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B11000
Size:	4096

Details

Name:	00000004.00000000.489912657.0000000002BF8000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BF8000
Size:	16384

Details

Name:	0000001A.00000003.619468001.000001DD88A02000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD88A02000
Size:	425984

Details

Name:	00000016.00000000.563483982.00007DF5579D0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5579D0000
Size:	4096

Details

Name:	0000000F.00000003.497014650.0000000004659000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4659000
Size:	36864

Details

Name:	0000001B.00000002.618745809.00007DF5B6BA0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5B6BA0000
Size:	4096

Details

Name:	0000000F.00000003.514039768.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000004.00000000.486962324.0000000002B6C000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B6C000
Size:	4096

Details

Name:	0000000C.00000003.483512874.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000003.497398106.0000000000733000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	733000
Size:	4096

Details

Name:	00000009.00000003.771011691.000002389AB17000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2389AB17000
Size:	4096

Details

Name:	0000001A.00000002.637968202.00007DF596042000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF596042000
Size:	4096

Details

Name:	00000003.00000003.587009806.0000000002F93000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F93000
Size:	8192

Details

Name:	00000004.00000000.489484375.0000000002B3F000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B3F000
Size:	24576

Details

Name:	0000000F.00000003.502869042.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000000.495019393.0000000000170000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	170000
Size:	16384

Details

Name:	00000002.00000000.473051486.0000000000C70000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	C70000
Size:	4096

Details

Name:	0000001A.00000002.637612805.000001DD88250000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1DD88250000
Size:	4096

Details

Name:	0000001B.00000002.618931441.00007FF5A8E53000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A8E53000
Size:	8192

Details

Name:	00000005.00000003.458330193.0000000000830000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	830000
Size:	4096

Details

Name:	0000000F.00000003.514060076.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.480073519.00000000050C4000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50C4000
Size:	4096

Details

Name:	00000004.00000002.522642412.000000006E9D0000.00000020.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	6E9D0000
Size:	135168

Details

Name:	00000003.00000003.678140129.0000000002EF6000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2EF6000
Size:	196608

Details

Name:	00000002.00000002.499732316.00000000009CB000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	9CB000
Size:	20480

Details

Name:	00000002.00000000.473194792.0000000002B16000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B16000
Size:	4096

Details

Name:	0000000F.00000003.501231427.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000003.00000002.818818079.0000000002ECA000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2ECA000
Size:	376832

Details

Name:	0000000F.00000003.517649468.000000000462B000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	462B000
Size:	65536

Details

Name:	00000000.00000002.819523836.0000000003C9D000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3C9D000
Size:	12288

Details

Name:	00000003.00000002.819771084.0000000003140000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3140000
Size:	36864

Details

Name:	0000000C.00000003.479586543.00000000030DB000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30DB000
Size:	4096

Details

Name:	0000000C.00000003.492778760.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000003.00000003.462443572.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	00000000.00000003.551236562.0000000002FF9000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	2FF9000
Size:	466944

Details

Name:	0000001A.00000003.607155915.000001DD87C9F000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD87C9F000
Size:	4096

Details

Name:	0000000C.00000002.498700136.0000000003010000.00000004.00000020.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	3010000
Size:	28672

Details

Name:	00000002.00000000.472680485.000000007FA90000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FA90000
Size:	4096

Details

Name:	0000001A.00000003.636734539.000001DD87C4A000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD87C4A000
Size:	4096

Details

Name:	00000002.00000000.473578347.00000000030CF000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	30CF000
Size:	4096

Details

Name:	0000000C.00000002.498941024.0000000004FF4000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4FF4000
Size:	45056

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	00000002.00000000.472114336.0000000002B4D000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B4D000
Size:	32768

Details

Name:	00000012.00000002.547614246.00007FF5C875D000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C875D000
Size:	4096

Details

Name:	0000000F.00000003.501933984.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000002.00000000.473458241.0000000002F20000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	2F20000
Size:	4096

Details

Name:	00000003.00000002.821370495.000000000582E000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	582E000
Size:	8192

Details

Name:	0000000C.00000003.492238210.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000C.00000003.494500752.0000000005460000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5460000
Size:	4096

Details

Name:	00000004.00000002.521549530.0000000002B3F000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B3F000
Size:	24576

Details

Name:	00000004.00000000.492214542.000000006E9C0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E9C0000
Size:	4096

Details

Name:	0000001A.00000002.638279339.00007FF5880DB000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5880DB000
Size:	8192

Details

Name:	00000012.00000002.545637464.0000008537E7E000.00000004.00000010.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8537E7E000
Size:	8192

Details

Name:	0000000C.00000003.481920347.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.497579046.0000000000744000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	744000
Size:	4096

Details

Name:	00000002.00000002.500241987.0000000002B1A000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B1A000
Size:	12288

Details

Name:	0000000F.00000002.520213095.00000000026B9000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26B9000
Size:	32768

Details

Name:	00000002.00000003.460099394.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	0000001B.00000002.618271606.000001B9C7B70000.00000004.00000020.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1B9C7B70000
Size:	69632

Details

Name:	00000000.00000002.819490852.0000000003C4F000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3C4F000
Size:	4096

Details

Name:	0000000F.00000002.520434852.0000000002782000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2782000
Size:	8192

Details

Name:	00000004.00000003.459299314.0000000005120000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5120000
Size:	4096

Details

Name:	0000000C.00000003.482805179.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000016.00000002.817467246.0000016F79D00000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	16F79D00000
Size:	102400

Details

Name:	00000003.00000003.459194232.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	0000000F.00000003.496400490.0000000000733000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	733000
Size:	4096

Details

Name:	00000004.00000000.488711957.000000007F352000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F352000
Size:	4096

Details

Name:	0000001B.00000002.618187204.000001B9C7A70000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B9C7A70000
Size:	4096

Details

Name:	00000005.00000003.460836902.0000000000920000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	920000
Size:	4096

Details

Name:	0000000F.00000003.500932231.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000002.519551020.00000000005EE000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5EE000
Size:	8192

Details

Name:	00000002.00000000.473961314.00000000033D0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	33D0000
Size:	73728

Details

Name:	0000001B.00000002.618869512.00007FF5A8778000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A8778000
Size:	8192

Details

Name:	0000000F.00000002.520168421.000000000267F000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	267F000
Size:	12288

Details

Name:	0000001B.00000002.619263849.00007FF5A8F3A000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A8F3A000
Size:	4096

Details

Name:	00000017.00000003.585011439.000002393087E000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2393087E000
Size:	36864

Details

Name:	0000000F.00000003.514432510.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000010.00000002.507925996.00000286D92D0000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	286D92D0000
Size:	12288

Details

Name:	0000000C.00000002.498032635.00000000028E9000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28E9000
Size:	32768

Details

Name:	00000004.00000000.492042644.00000000069E3000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	heap private
Protect:	page read and write
Base address:	69E3000
Size:	8192

Details

Name:	0000000C.00000002.497857998.00000000027A9000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27A9000
Size:	12288

Details

Name:	00000004.00000000.490539098.000000000325A000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	heap private
Protect:	page read and write
Base address:	325A000
Size:	12288

Details

Name:	00000016.00000002.817613319.0000016F79E50000.00000004.00000040.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	16F79E50000
Size:	12288

Details

Name:	00000017.00000002.587073890.00007FF5BE2C7000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BE2C7000
Size:	32768

Details

Name:	00000003.00000002.818615292.0000000002BC4000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BC4000
Size:	8192

Details

Name:	0000001B.00000002.618812899.00007DF5B6BB2000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5B6BB2000
Size:	4096

Details

Name:	00000016.00000002.818470950.00007DF5579D0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5579D0000
Size:	4096

Details

Name:	0000000C.00000000.476041471.0000000002EB0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2EB0000
Size:	16384

Details

Name:	00000016.00000002.818712766.00007FF5495B0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5495B0000
Size:	8192

Details

Name:	0000001A.00000000.604626672.00007DF596040000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF596040000
Size:	4096

Details

Name:	00000000.00000002.817548729.0000000000791000.00000020.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	791000
Size:	45056

Details

Name:	00000012.00000000.530284884.0000020021F50000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	20021F50000
Size:	102400

Details

Name:	00000004.00000000.486792649.0000000002AD8000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AD8000
Size:	8192

Details

Name:	0000001B.00000000.606037150.00007DF5B6BB0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5B6BB0000
Size:	4096

Details

Name:	00000010.00000002.510585751.00007FF524D67000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF524D67000
Size:	8192

Details

Name:	0000001B.00000002.618974453.00007FF5A8E60000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A8E60000
Size:	4096

Details

Name:	0000001A.00000002.638413279.00007FF5881A0000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5881A0000
Size:	4096

Details

Name:	0000000F.00000003.501697055.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000004.00000000.490830142.0000000003430000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	3430000
Size:	36864

Details

Name:	0000001B.00000003.617638694.000001B9C7BB7000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B9C7BB7000
Size:	4096

Details

Name:	00000003.00000003.437794277.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	0000000F.00000003.499772922.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000002.519820638.00000000009D5000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	9D5000
Size:	4096

Details

Name:	0000000C.00000003.492663669.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000003.00000003.461541185.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	00000016.00000002.818832577.00007FF549AFA000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF549AFA000
Size:	12288

Details

Name:	0000000C.00000003.483394344.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000003.499920770.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000003.504630594.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.479252109.00000000030FE000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30FE000
Size:	8192

Details

Name:	0000000F.00000003.498234343.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.484407765.00000000050C4000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50C4000
Size:	12288

Details

Name:	0000000F.00000003.496791315.000000000072D000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	72D000
Size:	4096

Details

Name:	00000000.00000003.595016714.0000000000E21000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E21000
Size:	20480

Details

Name:	00000009.00000002.771286351.000002389A5C0000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2389A5C0000
Size:	12288

Details

Name:	0000000F.00000003.503220354.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000003.00000003.769122836.0000000002FB0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FB0000
Size:	24576

Details

Name:	00000016.00000002.819324077.00007FF549D44000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF549D44000
Size:	20480

Details

Name:	0000000F.00000003.502961993.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000001A.00000002.637467609.000001DD87CEE000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD87CEE000
Size:	45056

Details

Name:	0000000F.00000000.493951964.0000000000170000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	170000
Size:	16384

Details

Name:	0000000C.00000003.480218548.00000000030A0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30A0000
Size:	4096

Details

Name:	0000000C.00000003.481796514.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000001A.00000003.611744429.000001DD88A02000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD88A02000
Size:	122880

Details

Name:	00000004.00000002.521762553.0000000002BE6000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BE6000
Size:	12288

Details

Name:	00000004.00000003.459834408.0000000005120000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5120000
Size:	4096

Details

Name:	0000000F.00000003.500524161.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000000.00000002.817612366.000000000079D000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	79D000
Size:	8192

Details

Name:	0000000F.00000003.514787193.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000001B.00000002.618351111.000001B9C7BAB000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B9C7BAB000
Size:	8192

Details

Name:	00000002.00000000.473174936.0000000002AEE000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AEE000
Size:	28672

Details

Name:	00000003.00000003.442013839.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	00000010.00000002.510270525.00007FF524CE7000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF524CE7000
Size:	4096

Details

Name:	00000003.00000003.462242937.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	00000004.00000003.485554293.0000000005108000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5108000
Size:	4096

Details

Name:	00000003.00000003.678110559.0000000002FB5000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FB5000
Size:	4096

Details

Name:	0000000F.00000003.497129512.0000000004617000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4617000
Size:	20480

Details

Name:	0000000F.00000000.495066997.0000000002788000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2788000
Size:	16384

Details

Name:	0000000F.00000003.513947815.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000C.00000003.483351215.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000005.00000002.494840526.0000000002BCB000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BCB000
Size:	20480

Details

Name:	00000003.00000002.818288467.0000000002B11000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B11000
Size:	4096

Details

Name:	00000003.00000002.817898337.0000000002993000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2993000
Size:	8192

Details

Name:	00000016.00000002.817556484.0000016F79D30000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	16F79D30000
Size:	4096

Details

Name:	00000002.00000000.472633217.0000000004E8E000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	4E8E000
Size:	8192

Details

Name:	00000003.00000002.822371028.000000006E9C6000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E9C6000
Size:	40960

Details

Name:	00000002.00000002.501660386.00000000031C0000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	31C0000
Size:	20480

Details

Name:	0000000C.00000003.492153097.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000005.00000002.493471837.00000000007C0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7C0000
Size:	16384

Details

Name:	0000000C.00000002.498870747.0000000004D80000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4D80000
Size:	4096

Details

Name:	00000005.00000000.319688821.000000007EFE2000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7EFE2000
Size:	4096

Details

Name:	0000000C.00000002.498962142.0000000005003000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5003000
Size:	28672

Details

Name:	00000002.00000003.424867595.0000000000D90000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D90000
Size:	4096

Details

Name:	00000003.00000003.768698324.0000000002FB5000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FB5000
Size:	4096

Details

Name:	00000002.00000002.501822501.00000000049AE000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	49AE000
Size:	8192

Details

Name:	0000000F.00000003.502541022.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.486470787.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000003.00000002.818711956.0000000002BEC000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BEC000
Size:	16384

Details

Name:	0000000C.00000003.478195841.000000000302B000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	302B000
Size:	24576

Details

Name:	0000000F.00000003.505979084.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000003.00000003.542165129.0000000005419000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5419000
Size:	471040

Details

Name:	0000000C.00000003.479317724.0000000003104000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3104000
Size:	8192

Details

Name:	00000016.00000002.818669129.00007FF549564000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF549564000
Size:	4096

Details

Name:	0000000F.00000003.505971202.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.480871873.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000001B.00000002.619002544.00007FF5A8E67000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A8E67000
Size:	16384

Details

Name:	0000001B.00000003.617715000.000001B9C7BB7000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B9C7BB7000
Size:	4096

Details

Name:	00000005.00000002.494629487.0000000002B35000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B35000
Size:	16384

Details

Name:	0000000C.00000000.475729500.000000007F5A0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F5A0000
Size:	12288

Details

Name:	0000000C.00000003.482888282.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000017.00000002.586433196.00000239306E0000.00000004.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	239306E0000
Size:	4096

Details

Name:	0000001A.00000003.610864363.000001DD88A02000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD88A02000
Size:	4096

Details

Name:	0000001A.00000003.623910029.000001DD8858D000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD8858D000
Size:	8192

Details

Name:	0000000F.00000003.505081327.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.482669664.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000005.00000002.494730353.0000000002B5B000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B5B000
Size:	12288

Details

Name:	00000003.00000003.541277381.0000000002F94000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F94000
Size:	12288

Details

Name:	0000000F.00000003.499528825.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000009.00000002.771501425.000002389A702000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2389A702000
Size:	4096

Details

Name:	00000003.00000003.540126493.0000000002F89000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F89000
Size:	32768

Details

Name:	0000000F.00000003.496711065.0000000000744000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	744000
Size:	4096

Details

Name:	00000003.00000003.460033048.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	0000000F.00000003.499817038.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000003.496865609.000000000074A000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	74A000
Size:	20480

Details

Name:	0000000C.00000003.491431384.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000004.00000002.521326035.00000000029D3000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29D3000
Size:	4096

Details

Name:	00000002.00000000.472171081.0000000002BCB000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BCB000
Size:	20480

Details

Name:	0000000F.00000002.519895982.0000000002532000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2532000
Size:	4096

Details

Name:	0000000C.00000003.491510510.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000003.510595705.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000004.00000000.489941193.0000000002E50000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E50000
Size:	102400

Details

Name:	0000000F.00000003.498302975.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000003.496154653.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.483008949.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000000.00000002.818171019.0000000000D9B000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	D9B000
Size:	442368

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery
URLs found in memory or binary data	Networking

Details

Name:	0000001A.00000003.616476681.000001DD88595000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD88595000
Size:	16384

Details

Name:	00000002.00000000.472402352.00000000030D0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	30D0000
Size:	733184

Details

Name:	00000012.00000002.547361012.00007DF5D65F2000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5D65F2000
Size:	4096

Details

Name:	00000003.00000003.459696884.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	00000000.00000003.640669845.0000000003EAA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3EAA000
Size:	4096

Details

Name:	00000009.00000002.771683409.00007DF580F32000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF580F32000
Size:	4096

Details

Name:	00000002.00000002.500836106.0000000002BBB000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BBB000
Size:	12288

Details

Name:	0000000F.00000003.498025023.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000004.00000000.489927397.0000000002E40000.00000004.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page read and write
Base address:	2E40000
Size:	4096

Details

Name:	00000004.00000000.490431238.0000000002FE0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2FE0000
Size:	12288

Details

Name:	0000000C.00000003.483616082.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000003.500642669.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000C.00000002.498575403.0000000002F36000.00000004.00000040.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2F36000
Size:	8192

Details

Name:	0000000C.00000003.486926067.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.484044355.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	8192

Details

Name:	0000000F.00000002.519400286.00000000001D0000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D0000
Size:	8192

Details

Name:	0000000F.00000002.519792120.00000000008E6000.00000004.00000040.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	8E6000
Size:	8192

Details

Name:	0000001B.00000003.617727232.000001B9C7BB4000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B9C7BB4000
Size:	8192

Details

Name:	0000001A.00000002.638229174.00007FF588097000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF588097000
Size:	12288

Details

Name:	00000012.00000002.549604398.00007FF5C880B000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C880B000
Size:	8192

Details

Name:	0000000F.00000003.515593892.0000000004623000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4623000
Size:	36864

Details

Name:	0000000C.00000003.483089404.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000017.00000002.586527935.0000023930760000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	23930760000
Size:	16384

Details

Name:	0000000F.00000003.507611200.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.492032009.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000003.502773064.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000000.476815939.00000000029B8000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	29B8000
Size:	16384

Details

Name:	0000001A.00000002.638027801.00007FF587B7F000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF587B7F000
Size:	4096

Details

Name:	0000000C.00000003.483463382.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000002.00000000.474193609.000000007FAA2000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FAA2000
Size:	4096

Details

Name:	0000001B.00000002.619206135.00007FF5A8F31000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A8F31000
Size:	12288

Details

Name:	0000000C.00000003.493100320.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000001A.00000002.637672558.000001DD883B0000.00000004.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1DD883B0000
Size:	8192

Details

Name:	0000000C.00000003.479973239.0000000003104000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3104000
Size:	8192

Details

Name:	0000000F.00000003.497440921.000000000074A000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	74A000
Size:	20480

Details

Name:	0000000F.00000003.496240778.00000000046E1000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	46E1000
Size:	86016

Details

Name:	0000001A.00000003.623615295.000001DD88A02000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD88A02000
Size:	397312

Details

Name:	00000003.00000003.586615439.0000000002F8B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F8B000
Size:	32768

Details

Name:	00000002.00000000.472688878.000000007FAA0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FAA0000
Size:	4096

Details

Name:	0000000C.00000003.480343130.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.479757290.0000000004FE5000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FE5000
Size:	4096

Details

Name:	0000000C.00000003.483167414.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000001A.00000003.617458890.000001DD885A3000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD885A3000
Size:	131072

Details

Name:	00000016.00000002.819439075.00007FF549D5A000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF549D5A000
Size:	4096

Details

Name:	00000000.00000003.460629582.0000000000770000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	770000
Size:	4096

Details

Name:	0000000F.00000002.520251258.00000000026CB000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26CB000
Size:	12288

Details

Name:	00000000.00000002.817405964.00000000003F0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3F0000
Size:	16384

Details

Name:	00000010.00000002.509729425.00007FF524A75000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF524A75000
Size:	8192

Details

Name:	00000004.00000000.487860192.00000000075EE000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	75EE000
Size:	8192

Details

Name:	0000000C.00000003.480368579.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000001A.00000002.638660400.00007FF5882C7000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5882C7000
Size:	4096

Details

Name:	00000000.00000003.459737510.0000000000770000.00000040.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page execute and read and write
Base address:	770000
Size:	4096

Details

Name:	00000003.00000002.818329981.0000000002B26000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B26000
Size:	8192

Details

Name:	00000002.00000003.459362223.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	00000002.00000002.500301511.0000000002B29000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B29000
Size:	32768

Details

Name:	00000003.00000002.819090333.0000000002F59000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2F59000
Size:	282624

Details

Name:	00000002.00000000.473934627.00000000031C7000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	heap private
Protect:	page read and write
Base address:	31C7000
Size:	4096

Details

Name:	00000003.00000003.442482635.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	00000005.00000003.462277868.0000000000930000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	930000
Size:	4096

Details

Name:	00000003.00000003.634598429.0000000002F99000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F99000
Size:	4096

Details

Name:	0000000F.00000003.501610232.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000017.00000000.573407232.0000023930700000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	23930700000
Size:	102400

Details

Name:	0000001B.00000002.618290887.000001B9C7B86000.00000004.00000020.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1B9C7B86000
Size:	69632

Details

Name:	00000004.00000002.522486704.00000000069E3000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	69E3000
Size:	8192

Details

Name:	0000000F.00000003.513677459.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000003.499180029.0000000004501000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4501000
Size:	172032

Details

Name:	0000001A.00000002.638198197.00007FF587FC7000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF587FC7000
Size:	8192

Details

Name:	00000003.00000002.820498718.0000000004AB0000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4AB0000
Size:	4096

Details

Name:	0000000F.00000003.501889714.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000003.498189195.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000001A.00000000.604599540.00007DF596030000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF596030000
Size:	4096

Details

Name:	00000016.00000002.817341489.00000009AE079000.00000004.00000010.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	9AE079000
Size:	28672

Details

Name:	00000016.00000003.564006758.0000016F79F6E000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16F79F6E000
Size:	4096

Details

Name:	0000000C.00000003.486975539.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.497538363.00000000033D8000.00000004.00000040.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	33D8000
Size:	4096

Details

Name:	0000000F.00000003.503150028.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	8192

Details

Name:	0000000C.00000003.480545338.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000004.00000002.522784621.000000006EA3F000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6EA3F000
Size:	16384

Details

Name:	0000000C.00000003.480532415.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000012.00000002.550098780.00007FF5C88EE000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C88EE000
Size:	4096

Details

Name:	0000000F.00000003.514213063.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000004.00000000.488755188.000000007F370000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F370000
Size:	12288

Details

Name:	0000000F.00000003.509957646.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000003.509989006.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000005.00000002.494416348.0000000002B11000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B11000
Size:	4096

Details

Name:	0000001A.00000002.638404109.00007FF58819D000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58819D000
Size:	4096

Details

Name:	0000000F.00000003.510604873.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000002.00000002.501300331.0000000002F8A000.00000004.00000020.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2F8A000
Size:	65536

Details

Name:	0000000C.00000003.485792990.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.479098887.00000000050BC000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50BC000
Size:	12288

Details

Name:	0000000C.00000002.498878853.0000000004DE0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4DE0000
Size:	4096

Details

Name:	00000002.00000003.440105470.0000000002F30000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F30000
Size:	4096

Details

Name:	00000012.00000002.549877795.00007FF5C88B0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C88B0000
Size:	4096

Details

Name:	0000000C.00000002.499195880.000000000578D000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	578D000
Size:	12288

Details

Name:	00000012.00000002.550375321.00007FF5C8991000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C8991000
Size:	16384

Details

Name:	00000010.00000002.507858139.00000286D8E9B000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	286D8E9B000
Size:	24576

Details

Name:	00000002.00000000.472044015.0000000002AEE000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AEE000
Size:	28672

Details

Name:	0000000C.00000000.476952102.000000007F5A0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F5A0000
Size:	12288

Details

Name:	00000000.00000003.594450229.0000000000DB1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DB1000
Size:	12288

Details

Name:	0000000F.00000003.500819025.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000000.494659065.00000000009D5000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	9D5000
Size:	4096

Details

Name:	0000000F.00000003.503579530.0000000004980000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4980000
Size:	4096

Details

Name:	00000000.00000002.819306645.00000000035CF000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	35CF000
Size:	4096

Details

Name:	0000000C.00000003.486413468.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000002.520769909.0000000004CBE000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4CBE000
Size:	8192

Details

Name:	00000004.00000002.521516660.0000000002B35000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B35000
Size:	16384

Details

Name:	0000000F.00000003.505954508.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000003.00000003.768669799.0000000002FB0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FB0000
Size:	16384

Details

Name:	00000012.00000002.547206699.0000020022102000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20022102000
Size:	12288

Details

Name:	00000016.00000000.563559128.00007FF535C71000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF535C71000
Size:	8192

Details

Name:	0000000C.00000003.482273339.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000001B.00000002.618081525.00000009158F9000.00000004.00000010.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	9158F9000
Size:	28672

Details

Name:	00000004.00000000.488360241.000000006E9C6000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E9C6000
Size:	40960

Details

Name:	0000001A.00000002.638605496.00007FF5882AA000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5882AA000
Size:	8192

Details

Name:	0000000F.00000002.519567184.000000000062E000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	62E000
Size:	8192

Details

Name:	00000004.00000000.490493917.0000000003240000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	3240000
Size:	4096

Details

Name:	0000000F.00000003.505897562.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000017.00000002.587367074.00007FF5BE700000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BE700000
Size:	4096

Details

Name:	00000010.00000002.507319311.000000F7380FE000.00000004.00000010.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F7380FE000
Size:	8192

Details

Name:	00000017.00000000.573541209.00007DF5CC460000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5CC460000
Size:	12288

Details

Name:	00000004.00000003.459769529.0000000005120000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5120000
Size:	4096

Details

Name:	00000003.00000003.540204961.0000000002F44000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F44000
Size:	81920

Details

Name:	0000000F.00000003.515178770.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000002.00000003.459495975.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	0000000F.00000003.514480890.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000003.501180888.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000002.00000002.501031113.0000000002BEC000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BEC000
Size:	16384

Details

Name:	0000001A.00000003.636700991.000001DD87C4E000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD87C4E000
Size:	16384

Details

Name:	0000000C.00000003.482504428.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000C.00000003.482203508.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000003.00000003.495514463.0000000002F3A000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F3A000
Size:	16384

Details

Name:	00000002.00000002.499745233.00000000009D0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	9D0000
Size:	16384

Details

Name:	00000000.00000003.775923717.0000000003EAA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3EAA000
Size:	4096

Details

Name:	00000002.00000003.459966239.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	0000000C.00000003.484542943.0000000005600000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5600000
Size:	4096

Details

Name:	0000000F.00000003.499392999.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.482752912.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000001A.00000002.639098068.00007FF5883D0000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5883D0000
Size:	20480

Details

Name:	00000000.00000002.817645815.000000000079F000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	79F000
Size:	4096

Details

Name:	00000004.00000002.522857877.000000007F360000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F360000
Size:	4096

Details

Name:	00000004.00000000.490596093.000000000326A000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	326A000
Size:	110592

Details

Name:	0000000F.00000003.497642809.000000000074B000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	74B000
Size:	16384

Details

Name:	00000004.00000002.521430842.0000000002AFF000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AFF000
Size:	16384

Details

Name:	0000000F.00000003.514153997.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000C.00000003.483242953.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000002.00000000.293774901.000000007FA92000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FA92000
Size:	4096

Details

Name:	0000000C.00000003.482063782.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000003.00000003.634189527.0000000002FA0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FA0000
Size:	28672

Details

Name:	0000000F.00000003.498219379.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000003.502098979.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000003.499291069.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000004.00000000.490473154.00000000031F0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	31F0000
Size:	4096

Details

Name:	0000000C.00000003.482174735.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000003.502724819.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000012.00000002.550361926.00007FF5C898A000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C898A000
Size:	4096

Details

Name:	0000000F.00000003.507590702.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000003.00000003.446567192.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	00000002.00000000.474141997.00000000068A0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	68A0000
Size:	4096

Details

Name:	0000000C.00000003.491409586.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000002.520360708.0000000002754000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2754000
Size:	8192

Details

Name:	00000000.00000003.504907462.000000000307B000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	307B000
Size:	4096

Details

Name:	00000003.00000002.818781541.0000000002E9D000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2E9D000
Size:	12288

Details

Name:	00000012.00000003.545288165.000002002204F000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2002204F000
Size:	12288

Details

Name:	00000003.00000002.822655322.000000007F130000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F130000
Size:	4096

Details

Name:	00000002.00000000.472071437.0000000002B1A000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B1A000
Size:	12288

Details

Name:	00000016.00000000.563491783.00007DF5579D2000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5579D2000
Size:	4096

Details

Name:	0000000F.00000003.503432245.0000000004617000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4617000
Size:	20480

Details

Name:	0000000F.00000003.497756375.00000000006D2000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6D2000
Size:	4096

Details

Name:	00000003.00000003.445329465.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	00000000.00000002.820190523.000000007F720000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F720000
Size:	4096

Details

Name:	00000010.00000003.507131888.00000286D8E4B000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	286D8E4B000
Size:	20480

Details

Name:	0000001B.00000000.606052754.00007DF5B6BB2000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5B6BB2000
Size:	4096

Details

Name:	00000000.00000003.595029828.0000000000E21000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E21000
Size:	20480

Details

Name:	0000000F.00000003.514013218.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000001B.00000002.618693811.00007DF4B4A70000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4B4A70000
Size:	20480

Details

Name:	0000000F.00000003.514418361.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000003.497328735.0000000004659000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4659000
Size:	36864

Details

Name:	0000000C.00000003.480149363.000000000308D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	308D000
Size:	4096

Details

Name:	0000000F.00000003.496819506.0000000000739000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	739000
Size:	4096

Details

Name:	00000005.00000003.459177525.0000000000920000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	920000
Size:	4096

Details

Name:	00000003.00000002.817588164.0000000000CE0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	CE0000
Size:	16384

Details

Name:	00000002.00000002.500272460.0000000002B26000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B26000
Size:	8192

Details

Name:	0000000F.00000002.520589822.000000000462E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	462E000
Size:	20480

Details

Name:	00000002.00000002.500626476.0000000002B56000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B56000
Size:	16384

Details

Name:	00000004.00000000.492722685.000000007F362000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F362000
Size:	4096

Details

Name:	00000003.00000002.821533066.00000000058AD000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	58AD000
Size:	12288

Details

Name:	00000002.00000003.459160760.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	00000005.00000002.493507546.0000000000810000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	810000
Size:	4096

Details

Name:	0000000F.00000003.501491464.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000C.00000003.492882562.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000001A.00000003.610879357.000001DD88A1D000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD88A1D000
Size:	118784

Details

Name:	0000000C.00000003.484486467.0000000005362000.00000004.00000040.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5362000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	0000001A.00000003.618864924.000001DD885A3000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD885A3000
Size:	212992

Details

Name:	00000003.00000003.587046910.0000000002FB5000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FB5000
Size:	4096

Details

Name:	00000000.00000003.463450870.0000000000770000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	770000
Size:	4096

Details

Name:	0000000C.00000002.497713059.000000000275A000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	275A000
Size:	8192

Details

Name:	00000004.00000003.462514069.0000000003200000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3200000
Size:	4096

Details

Name:	0000000F.00000003.507860131.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000003.00000003.678123620.0000000002FA0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FA0000
Size:	28672

Details

Name:	00000005.00000003.460627201.0000000000920000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	920000
Size:	4096

Details

Name:	00000012.00000002.547352021.00007DF5D65F0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5D65F0000
Size:	4096

Details

Name:	0000001A.00000002.637839100.000001DD8856E000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD8856E000
Size:	65536

Details

Name:	00000002.00000000.471966893.0000000000DB0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	DB0000
Size:	4096

Details

Name:	0000000F.00000003.497507302.000000000074A000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	74A000
Size:	20480

Details

Name:	0000001B.00000002.619055292.00007FF5A8E93000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A8E93000
Size:	24576

Details

Name:	0000000C.00000003.479839515.00000000030F9000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30F9000
Size:	4096

Details

Name:	0000000F.00000003.515008228.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000C.00000003.485885734.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.486443673.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000002.00000000.472152751.0000000002BBB000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BBB000
Size:	12288

Details

Name:	0000000C.00000003.482922455.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000004.00000003.459900014.0000000005120000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5120000
Size:	4096

Details

Name:	0000000F.00000002.519859471.0000000002524000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2524000
Size:	4096

Details

Name:	00000012.00000002.547386374.00007DF5D6600000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5D6600000
Size:	4096

Details

Name:	00000005.00000003.459466918.0000000000920000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	920000
Size:	4096

Details

Name:	0000001A.00000002.637949540.00007DF596032000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF596032000
Size:	4096

Details

Name:	00000010.00000002.507412976.000000F73867F000.00000004.00000010.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F73867F000
Size:	4096

Details

Name:	00000003.00000002.817545638.0000000000C7B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C7B000
Size:	20480

Details

Name:	00000004.00000000.489392681.0000000002B1A000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B1A000
Size:	12288

Details

Name:	00000003.00000002.822089346.0000000005A62000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5A62000
Size:	4096

Details

Name:	00000004.00000002.521338409.00000000029F1000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29F1000
Size:	36864

Details

Name:	0000000F.00000003.499553921.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000002.00000002.500197086.0000000002AFF000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AFF000
Size:	16384

Details

Name:	00000002.00000000.472160552.0000000002BBF000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BBF000
Size:	16384

Details

Name:	0000000F.00000003.497800173.00000000006D0000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6D0000
Size:	4096

Details

Name:	00000004.00000002.522174120.0000000003290000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	3290000
Size:	36864

Details

Name:	0000000F.00000003.497939404.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000003.00000003.540463933.0000000002F15000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F15000
Size:	69632

Details

Name:	00000002.00000000.473224002.0000000002B35000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B35000
Size:	16384

Details

Name:	00000002.00000000.293779246.000000007FAA0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FAA0000
Size:	4096

Details

Name:	0000000F.00000002.519972314.000000000254D000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	254D000
Size:	4096

Details

Name:	0000000F.00000003.496557279.000000000070E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	70E000
Size:	4096

Details

Name:	0000000F.00000002.520881979.0000000004EAE000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4EAE000
Size:	8192

Details

Name:	0000000C.00000003.492917940.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000002.00000000.473300247.0000000002BBB000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BBB000
Size:	12288

Details

Name:	0000000C.00000003.492623765.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000C.00000002.499022360.0000000005026000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5026000
Size:	172032

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000002.521377011.0000000002A25000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A25000
Size:	4096

Details

Name:	00000003.00000003.435451889.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	0000000C.00000003.483070113.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000003.507396783.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000003.00000003.463347886.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	0000000F.00000003.499326727.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000C.00000002.497819770.000000000277F000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	277F000
Size:	4096

Details

Name:	0000000C.00000003.496390902.000000000500C000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	500C000
Size:	49152

Details

Name:	0000000F.00000003.499277314.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000012.00000000.530387557.00007FF5C8991000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C8991000
Size:	16384

Details

Name:	0000000C.00000003.486592846.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000003.00000003.463113231.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	0000000C.00000003.492906566.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.507320309.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000001A.00000002.638823622.00007FF58831B000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58831B000
Size:	12288

Details

Name:	0000000F.00000003.513969731.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000001A.00000002.637735107.000001DD88512000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD88512000
Size:	4096

Details

Name:	0000000C.00000003.482027859.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000003.00000002.821001957.0000000005090000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5090000
Size:	4096

Details

Name:	0000000F.00000002.519306933.00000000000D0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	D0000
Size:	102400

Details

Name:	0000000F.00000003.501433905.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000003.00000003.768685849.0000000002FB5000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FB5000
Size:	4096

Details

Name:	0000000F.00000003.509761198.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000010.00000002.510625250.00007FF524DC2000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF524DC2000
Size:	12288

Details

Name:	00000003.00000003.722375461.00000000059F1000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	59F1000
Size:	466944

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.684903589.0000000000E25000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E25000
Size:	4096

Details

Name:	00000010.00000002.510365663.00007FF524D03000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF524D03000
Size:	28672

Details

Name:	0000000F.00000003.496661206.0000000000727000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	727000
Size:	4096

Details

Name:	00000003.00000002.820720342.0000000004F3D000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4F3D000
Size:	12288

Details

Name:	00000016.00000002.818688172.00007FF549569000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF549569000
Size:	4096

Details

Name:	00000010.00000002.507912506.00000286D90D0000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	286D90D0000
Size:	4096

Details

Name:	0000000C.00000003.479243325.00000000030F9000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30F9000
Size:	4096

Details

Name:	00000004.00000002.522419451.00000000068EE000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	68EE000
Size:	8192

Details

Name:	0000000C.00000000.476053023.0000000002EC0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2EC0000
Size:	8192

Details

Name:	00000016.00000002.818600937.00007FF535C71000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF535C71000
Size:	8192

Details

Name:	0000001A.00000002.638247957.00007FF5880A2000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5880A2000
Size:	4096

Details

Name:	00000000.00000002.818933181.0000000002520000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2520000
Size:	20480

Details

Name:	00000012.00000002.545901199.0000020021FA0000.00000004.00000020.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	20021FA0000
Size:	8192

Details

Name:	0000000C.00000002.498662847.0000000002F8E000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2F8E000
Size:	8192

Details

Name:	00000005.00000002.494348570.0000000002AEE000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AEE000
Size:	28672

Details

Name:	00000004.00000000.490072733.0000000002F50000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	2F50000
Size:	4096

Details

Name:	0000000C.00000003.479738399.0000000005039000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5039000
Size:	36864

Details

Name:	00000003.00000002.818125359.0000000002A27000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A27000
Size:	12288

Details

Name:	00000002.00000000.471814111.0000000000930000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	930000
Size:	102400

Details

Name:	0000000C.00000003.486966745.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000C.00000002.498379325.0000000002D24000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D24000
Size:	4096

Details

Name:	0000001A.00000002.638986607.00007FF5883B4000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5883B4000
Size:	20480

Details

Name:	00000010.00000002.507377709.000000F738477000.00000004.00000010.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F738477000
Size:	36864

Details

Name:	0000001B.00000003.617768562.000001B9C7BA1000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B9C7BA1000
Size:	36864

Details

Name:	00000002.00000000.473096396.0000000000DA0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	DA0000
Size:	8192

Details

Name:	0000000F.00000003.499787494.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.483111418.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000001A.00000002.638649516.00007FF5882BE000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5882BE000
Size:	8192

Details

Name:	0000000F.00000002.519806215.00000000008EA000.00000004.00000040.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	8EA000
Size:	20480

Details

Name:	00000005.00000003.458229389.0000000000979000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	979000
Size:	86016

Details

Name:	00000003.00000003.633829244.0000000002F99000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F99000
Size:	53248

Details

Name:	00000004.00000000.490035718.0000000002EEB000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	2EEB000
Size:	20480

Details

Name:	00000002.00000002.500075133.0000000002A0C000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A0C000
Size:	8192

Details

Name:	00000012.00000002.547654250.00007FF5C877B000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C877B000
Size:	8192

Details

Name:	00000005.00000003.459865296.0000000000920000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	920000
Size:	4096

Details

Name:	00000010.00000002.509937235.00007FF524BBD000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF524BBD000
Size:	4096

Details

Name:	0000000C.00000003.492100261.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.483261996.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000002.00000003.437258643.0000000002F30000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F30000
Size:	4096

Details

Name:	0000001A.00000003.615362121.000001DD885A0000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD885A0000
Size:	294912

Details

Name:	00000004.00000000.490956506.00000000037C0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	37C0000
Size:	372736

Details

Name:	0000000F.00000003.501378645.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000004.00000000.487730883.00000000069E0000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	heap private
Protect:	page read and write
Base address:	69E0000
Size:	8192

Details

Name:	0000000F.00000003.501805589.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000004.00000000.489039979.00000000029C9000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	29C9000
Size:	8192

Details

Name:	0000000C.00000003.480109975.000000000310B000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	310B000
Size:	16384

Details

Name:	00000000.00000003.460837777.0000000000770000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	770000
Size:	4096

Details

Name:	0000001A.00000003.636723782.000001DD87C4B000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD87C4B000
Size:	8192

Details

Name:	0000000F.00000003.500310317.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000001A.00000002.638095604.00007FF587EB1000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF587EB1000
Size:	20480

Details

Name:	0000000C.00000003.484502273.0000000005368000.00000004.00000040.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5368000
Size:	40960

Details

Name:	00000017.00000000.573499378.00007DF5CC450000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5CC450000
Size:	4096

Details

Name:	0000000C.00000003.480271348.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000010.00000002.507884787.00000286D8F02000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	286D8F02000
Size:	12288

Details

Name:	00000016.00000002.818883405.00007FF549BCC000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF549BCC000
Size:	16384

Details

Name:	0000000F.00000003.498439017.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000004.00000000.490443935.0000000002FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	2FF0000
Size:	4096

Details

Name:	00000017.00000002.587288208.00007FF5BE6D7000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BE6D7000
Size:	4096

Details

Name:	00000000.00000002.817873711.0000000000B50000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	B50000
Size:	73728

Details

Name:	0000000C.00000003.481688769.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000C.00000003.483424968.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000017.00000002.586696637.0000023930870000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	23930870000
Size:	57344

Details

Name:	0000001A.00000002.638562189.00007FF58827F000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58827F000
Size:	4096

Details

Name:	0000000F.00000003.514750388.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000005.00000002.494316529.0000000002AD8000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AD8000
Size:	8192

Details

Name:	0000000F.00000002.520118316.00000000025AC000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25AC000
Size:	28672

Details

Name:	00000002.00000000.471897329.0000000000BB8000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	BB8000
Size:	12288

Details

Name:	0000000C.00000003.480131980.0000000003089000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3089000
Size:	4096

Details

Name:	00000005.00000003.462075739.0000000000930000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	930000
Size:	4096

Details

Name:	0000000C.00000003.492770385.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000001A.00000002.638058285.00007FF587D37000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF587D37000
Size:	12288

Details

Name:	0000000F.00000003.515096062.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000004.00000000.486725757.00000000029C9000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	29C9000
Size:	8192

Details

Name:	00000000.00000002.818442924.0000000000E09000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	E09000
Size:	86016

Details

Name:	0000000F.00000002.520788320.0000000004D1D000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4D1D000
Size:	12288

Details

Name:	0000001A.00000003.610744050.000001DD88A03000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD88A03000
Size:	225280

Details

Name:	0000000F.00000003.496808439.0000000000733000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	733000
Size:	4096

Details

Name:	0000000F.00000003.499268538.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000003.503208389.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000003.496746553.0000000000721000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	721000
Size:	4096

Details

Name:	0000001A.00000003.607390563.000001DD883A0000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD883A0000
Size:	4096

Details

Name:	0000000F.00000003.497769567.00000000006D4000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6D4000
Size:	4096

Details

Name:	0000000C.00000003.478148877.0000000003030000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3030000
Size:	4096

Details

Name:	00000004.00000000.490482722.0000000003200000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	3200000
Size:	4096

Details

Name:	00000003.00000003.634541550.0000000005A62000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A62000
Size:	4096

Details

Name:	0000000F.00000003.513738499.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000003.500051675.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000000.00000003.461574139.0000000000770000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	770000
Size:	4096

Details

Name:	0000000C.00000003.483598475.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000003.00000003.542061628.0000000005AF1000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AF1000
Size:	466944

Details

Name:	0000000C.00000002.498533632.0000000002F10000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2F10000
Size:	8192

Details

Name:	00000002.00000002.500447073.0000000002B3F000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B3F000
Size:	24576

Details

Name:	0000000C.00000003.483364924.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000002.00000003.458424124.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	0000000C.00000003.492890564.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.501846371.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000003.507988231.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000C.00000003.486529976.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.491664329.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000002.00000002.500758183.0000000002B6C000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B6C000
Size:	4096

Details

Name:	0000000C.00000003.492795333.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000004.00000000.487249484.0000000002F70000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2F70000
Size:	16384

Details

Name:	0000000C.00000003.479518086.0000000005039000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5039000
Size:	36864

Details

Name:	0000000F.00000003.501251398.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000002.00000003.439636304.0000000002F30000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F30000
Size:	4096

Details

Name:	00000010.00000002.507601165.00000286D8E4D000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	286D8E4D000
Size:	12288

Details

Name:	00000017.00000002.587379196.00007FF5BE703000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BE703000
Size:	12288

Details

Name:	0000000C.00000003.492584170.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000000.00000003.459792998.0000000000770000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	770000
Size:	4096

Details

Name:	00000009.00000000.468649371.00007DF580F40000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF580F40000
Size:	4096

Details

Name:	0000001B.00000003.617788359.000001B9C7BAB000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B9C7BAB000
Size:	8192

Details

Name:	0000000C.00000003.486644213.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000C.00000003.484433507.0000000005700000.00000004.00000040.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5700000
Size:	4096

Details

Name:	0000000F.00000003.505941167.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000003.507172734.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000000.00000002.820001825.000000006EA27000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6EA27000
Size:	8192

Details

Name:	0000001A.00000002.636967807.00000046930F9000.00000004.00000010.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	46930F9000
Size:	28672

Details

Name:	00000004.00000000.487230091.0000000002F50000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	2F50000
Size:	4096

Details

Name:	0000000C.00000003.483546313.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000016.00000002.817695357.0000016F79E60000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	16F79E60000
Size:	4096

Details

Name:	0000001B.00000002.618362833.000001B9C7BB1000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B9C7BB1000
Size:	12288

Details

Name:	00000010.00000002.510433211.00007FF524D17000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF524D17000
Size:	16384

Details

Name:	00000010.00000002.509762024.00007FF524B76000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF524B76000
Size:	16384

Details

Name:	00000004.00000002.521990511.0000000002FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2FF0000
Size:	4096

Details

Name:	0000000F.00000003.514693726.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000003.501093056.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000004.00000002.522221461.0000000003630000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3630000
Size:	73728

Details

Name:	00000002.00000000.472009629.00000000029F1000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	29F1000
Size:	36864

Details

Name:	0000000C.00000002.497980488.00000000028C1000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28C1000
Size:	8192

Details

Name:	0000000F.00000003.513768446.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000004.00000000.492712903.000000007F360000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F360000
Size:	4096

Details

Name:	00000004.00000002.522207982.0000000003430000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3430000
Size:	36864

Details

Name:	0000000F.00000003.515320454.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000C.00000002.498991647.000000000500F000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	500F000
Size:	36864

Details

Name:	0000000F.00000003.514128582.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000003.498338233.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.486584531.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000001B.00000002.618169869.000001B9C7980000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B9C7980000
Size:	12288

Details

Name:	00000010.00000002.507961781.00007DF430920000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF430920000
Size:	20480

Details

Name:	0000000C.00000003.478483954.0000000004EE1000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4EE1000
Size:	40960

Details

Name:	0000000F.00000002.519937745.000000000253C000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	253C000
Size:	20480

Details

Name:	0000000C.00000003.480333997.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000000.00000003.775558903.0000000000E07000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E07000
Size:	126976

Details

Name:	0000000C.00000003.483728180.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.482904699.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.479387772.00000000030F3000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30F3000
Size:	4096

Details

Name:	00000002.00000002.501765229.00000000033D0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	33D0000
Size:	73728

Details

Name:	0000000C.00000003.481062464.0000000005480000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5480000
Size:	126976

Details

Name:	00000002.00000000.473397703.0000000002BF3000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BF3000
Size:	4096

Details

Name:	0000001A.00000003.615323472.000001DD885A0000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD885A0000
Size:	147456

Details

Name:	0000000F.00000003.507510953.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000003.00000002.822682696.000000007F140000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F140000
Size:	4096

Details

Name:	00000002.00000003.466280547.0000000004A00000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4A00000
Size:	4096

Details

Name:	0000001A.00000002.638393650.00007FF588189000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF588189000
Size:	4096

Details

Name:	00000002.00000002.499876464.0000000000D70000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	D70000
Size:	4096

Details

Name:	00000002.00000000.473166233.0000000002ADE000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2ADE000
Size:	4096

Details

Name:	00000000.00000002.819595595.0000000003EAA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3EAA000
Size:	4096

Details

Name:	00000010.00000002.507511413.00000286D8E00000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	286D8E00000
Size:	73728

Details

Name:	0000000C.00000003.492254695.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.514892460.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000003.00000002.818595344.0000000002BBF000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BBF000
Size:	16384

Details

Name:	00000004.00000002.521704218.0000000002BCB000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BCB000
Size:	20480

Details

Name:	00000005.00000002.494082596.0000000000DC0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	DC0000
Size:	4096

Details

Name:	00000000.00000002.817221481.0000000000380000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	380000
Size:	4096

Details

Name:	00000002.00000002.500230182.0000000002B16000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B16000
Size:	4096

Details

Name:	0000000C.00000003.479005811.00000000030E7000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30E7000
Size:	4096

Details

Name:	00000003.00000002.817660466.0000000000D30000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	D30000
Size:	12288

Details

Name:	00000000.00000003.503933325.0000000000E00000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E00000
Size:	4096

Details

Name:	0000000F.00000003.507435575.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000009.00000002.772378040.00007FF573225000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF573225000
Size:	16384

Details

Name:	00000005.00000002.494155617.00000000029D3000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29D3000
Size:	4096

Details

Name:	00000004.00000000.487320679.0000000003200000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	3200000
Size:	4096

Details

Name:	00000002.00000003.458893013.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	0000000C.00000003.483058661.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000002.00000000.472023300.0000000002A0C000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A0C000
Size:	8192

Details

Name:	00000002.00000002.500775391.0000000002B70000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B70000
Size:	73728

Details

Name:	00000016.00000002.819305631.00007FF549D39000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF549D39000
Size:	12288

Details

Name:	00000000.00000002.820162606.000000007F712000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F712000
Size:	4096

Details

Name:	00000009.00000002.771221156.000000EE28FFB000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	EE28FFB000
Size:	20480

Details

Name:	0000000C.00000003.484469960.00000000053A2000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	53A2000
Size:	4096

Details

Name:	0000000C.00000003.494482850.0000000005460000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5460000
Size:	4096

Details

Name:	0000000F.00000002.520943662.000000007FEE0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FEE0000
Size:	4096

Details

Name:	00000003.00000003.443923103.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	00000003.00000003.767596647.0000000002FAD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FAD000
Size:	36864

Details

Name:	00000017.00000002.586796551.0000023930AD0000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	23930AD0000
Size:	4096

Details

Name:	0000000F.00000003.497492435.0000000000744000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	744000
Size:	4096

Details

Name:	00000003.00000003.812604751.0000000005A62000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A62000
Size:	4096

Details

Name:	00000002.00000000.471947952.0000000000D90000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	D90000
Size:	12288

Details

Name:	00000010.00000000.494409420.00007DF532A62000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF532A62000
Size:	4096

Details

Name:	0000000C.00000003.497525408.00000000033D0000.00000004.00000040.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	33D0000
Size:	8192

Details

Name:	00000004.00000000.491884969.0000000004D0E000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	4D0E000
Size:	8192

Details

Name:	0000001B.00000002.618053600.00000009155BF000.00000004.00000010.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	9155BF000
Size:	4096

Details

Name:	0000001B.00000000.605962535.000001B9C7960000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B9C7960000
Size:	102400

Details

Name:	0000000C.00000003.485834246.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000009.00000002.772044253.00007FF5731A1000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5731A1000
Size:	4096

Details

Name:	00000000.00000002.819645918.000000006E9C3000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E9C3000
Size:	4096

Details

Name:	0000001A.00000003.622790792.000001DD88A02000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD88A02000
Size:	159744

Details

Name:	0000001A.00000002.638729888.00007FF5882E3000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5882E3000
Size:	28672

Details

Name:	00000004.00000000.310299486.000000007F370000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F370000
Size:	12288

Details

Name:	0000000C.00000003.483159951.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000C.00000003.479625727.0000000003104000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3104000
Size:	8192

Details

Name:	0000000F.00000003.513750740.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000000.00000003.462514822.0000000000770000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	770000
Size:	4096

Details

Name:	0000000F.00000003.501742699.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.484520981.0000000005373000.00000004.00000040.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5373000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	0000000F.00000003.503015635.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000C.00000003.479887252.000000000310A000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	310A000
Size:	20480

Details

Name:	00000002.00000001.294022779.000000006E9C0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E9C0000
Size:	4096

Details

Name:	0000000F.00000003.507553276.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000017.00000002.586888814.00007DF5CC442000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5CC442000
Size:	4096

Details

Name:	0000000C.00000003.492328781.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000002.519774304.00000000008E0000.00000004.00000040.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	8E0000
Size:	16384

Details

Name:	00000005.00000002.493438018.000000000067B000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	67B000
Size:	20480

Details

Name:	0000001A.00000002.637333362.000001DD87C78000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD87C78000
Size:	32768

Details

Name:	00000002.00000000.473149989.0000000002A0C000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A0C000
Size:	8192

Details

Name:	0000000C.00000003.496710036.000000000500B000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	500B000
Size:	4096

Details

Name:	0000000C.00000003.479015772.00000000030ED000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30ED000
Size:	4096

Details

Name:	0000000F.00000002.520347350.000000000274F000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	274F000
Size:	16384

Details

Name:	00000000.00000002.817724822.00000000007B0000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	7B0000
Size:	16384

Details

Name:	0000000F.00000003.501408902.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000003.00000003.769138869.0000000002FB0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FB0000
Size:	24576

Details

Name:	00000000.00000003.595041738.0000000000DB5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DB5000
Size:	4096

Details

Name:	00000004.00000002.521641429.0000000002B70000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B70000
Size:	73728

Details

Name:	00000003.00000003.459429339.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	00000009.00000002.772480144.00007FF5732A9000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5732A9000
Size:	12288

Details

Name:	0000000C.00000003.480181054.00000000050BE000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50BE000
Size:	4096

Details

Name:	0000000C.00000002.497750802.000000000276A000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	276A000
Size:	4096

Details

Name:	00000012.00000002.545763666.0000020021F30000.00000004.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	20021F30000
Size:	4096

Details

Name:	00000004.00000000.487088826.0000000002BF8000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BF8000
Size:	16384

Details

Name:	00000016.00000002.818355073.0000016F7AC40000.00000002.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	16F7AC40000
Size:	4096

Details

Name:	00000012.00000002.547397068.00007DF5D6602000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5D6602000
Size:	4096

Details

Name:	00000004.00000000.488741320.000000007F362000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F362000
Size:	4096

Details

Name:	0000000C.00000002.499156396.000000000533E000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	533E000
Size:	8192

Details

Name:	0000001A.00000002.637145962.000001DD87BB0000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD87BB0000
Size:	4096

Details

Name:	00000010.00000002.510342654.00007FF524CFF000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF524CFF000
Size:	12288

Details

Name:	00000017.00000002.587268695.00007FF5BE661000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BE661000
Size:	12288

Details

Name:	00000004.00000000.487168066.0000000002EF0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2EF0000
Size:	16384

Details

Name:	0000000F.00000003.514682694.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000002.00000003.436321627.0000000002F30000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F30000
Size:	4096

Details

Name:	00000016.00000002.819004019.00007FF549C73000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF549C73000
Size:	8192

Details

Name:	0000000F.00000003.514321680.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000002.497763430.000000000276C000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	276C000
Size:	20480

Details

Name:	00000004.00000000.489870724.0000000002BEC000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BEC000
Size:	16384

Details

Name:	0000000F.00000000.495106866.000000007FEE2000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FEE2000
Size:	4096

Details

Name:	0000000C.00000003.479870112.0000000003104000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3104000
Size:	8192

Details

Name:	00000004.00000000.492198127.00000000075EE000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	75EE000
Size:	8192

Details

Name:	00000005.00000002.494006968.0000000000A40000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	A40000
Size:	36864

Details

Name:	0000001B.00000003.617651914.000001B9C7B97000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B9C7B97000
Size:	32768

Details

Name:	0000000C.00000003.491853759.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000009.00000002.772217819.00007FF5731DF000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5731DF000
Size:	12288

Details

Name:	00000002.00000002.499644625.0000000000920000.00000004.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	920000
Size:	4096

Details

Name:	0000000F.00000000.494713866.000000007FED2000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FED2000
Size:	4096

Details

Name:	00000016.00000002.818849594.00007FF549B72000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF549B72000
Size:	8192

Details

Name:	0000000C.00000003.493086813.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000002.00000000.474000958.0000000003560000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	3560000
Size:	372736

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	00000003.00000000.294121475.000000007F150000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F150000
Size:	12288

Details

Name:	0000000C.00000003.484085837.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.514290616.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.479540205.00000000030F9000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30F9000
Size:	4096

Details

Name:	00000016.00000002.818383464.0000016F7AC50000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	16F7AC50000
Size:	4096

Details

Name:	0000000C.00000003.493253902.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000002.00000003.452733067.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	0000001A.00000002.637271233.000001DD87C4F000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD87C4F000
Size:	12288

Details

Name:	00000016.00000002.818506226.00007DF5579E0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5579E0000
Size:	12288

Details

Name:	0000000C.00000003.483829662.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000016.00000002.818951762.00007FF549C6D000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF549C6D000
Size:	4096

Details

Name:	00000005.00000002.495395673.000000007EFF2000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7EFF2000
Size:	4096

Details

Name:	00000002.00000003.477157193.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	0000000C.00000003.481989438.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.484593305.0000000005373000.00000004.00000040.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5373000
Size:	8192

Details

Name:	0000001B.00000002.618199725.000001B9C7A90000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B9C7A90000
Size:	8192

Details

Name:	00000002.00000000.293764952.0000000002BF8000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BF8000
Size:	16384

Details

Name:	0000000F.00000003.517984941.0000000000630000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	630000
Size:	4096

Details

Name:	0000000C.00000003.491867960.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000C.00000000.476070885.000000007F582000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F582000
Size:	4096

Details

Name:	0000000F.00000003.498505385.0000000000890000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	890000
Size:	131072

Details

Name:	00000004.00000002.522559297.00000000075EE000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	75EE000
Size:	8192

Details

Name:	00000005.00000003.459597886.0000000000920000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	920000
Size:	4096

Details

Name:	00000004.00000000.486906281.0000000002B3B000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B3B000
Size:	12288

Details

Name:	00000004.00000000.487328078.0000000003240000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	3240000
Size:	4096

Details

Name:	00000004.00000002.522620742.000000006E9C6000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E9C6000
Size:	40960

Details

Name:	0000000C.00000003.482387316.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.497029578.000000000071B000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	71B000
Size:	4096

Details

Name:	0000000F.00000003.499955451.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000002.00000002.500730297.0000000002B5B000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B5B000
Size:	12288

Details

Name:	00000009.00000002.771252499.000002389A590000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2389A590000
Size:	4096

Details

Name:	0000000C.00000003.480286775.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000001B.00000002.618318223.000001B9C7B9B000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B9C7B9B000
Size:	20480

Details

Name:	0000000F.00000003.497432286.0000000000744000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	744000
Size:	4096

Details

Name:	00000002.00000002.501333383.000000000308E000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	308E000
Size:	8192

Details

Name:	0000000C.00000003.483580909.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000003.514672753.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000005.00000002.494914740.000000000426D000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	426D000
Size:	12288

Details

Name:	0000000F.00000003.507244466.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000C.00000002.498016335.00000000028E6000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28E6000
Size:	8192

Details

Name:	0000000F.00000003.497085251.0000000004617000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4617000
Size:	20480

Details

Name:	0000000F.00000003.497380074.000000000072D000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	72D000
Size:	4096

Details

Name:	00000012.00000002.550269549.00007FF5C8974000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C8974000
Size:	20480

Details

Name:	00000004.00000000.489581274.0000000002B6C000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B6C000
Size:	4096

Details

Name:	0000000F.00000003.515030708.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000003.00000000.294102194.0000000002BF8000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BF8000
Size:	16384

Details

Name:	0000000F.00000003.497063373.000000000072D000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	72D000
Size:	4096

Details

Name:	0000000F.00000003.499759552.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000017.00000002.586659046.000002393084F000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2393084F000
Size:	4096

Details

Name:	00000012.00000002.547491094.00007FF5C813F000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C813F000
Size:	4096

Details

Name:	00000017.00000002.587321399.00007FF5BE6EF000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BE6EF000
Size:	12288

Details

Name:	0000000F.00000003.499707872.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000009.00000002.771539044.000002389A723000.00000004.00000040.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2389A723000
Size:	4096

Details

Name:	00000004.00000003.459096149.0000000005120000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5120000
Size:	4096

Details

Name:	00000004.00000000.488352868.000000006E9C5000.00000004.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page read and write
Base address:	6E9C5000
Size:	4096

Details

Name:	0000000C.00000003.483297240.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000C.00000003.480087203.000000000310B000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	310B000
Size:	16384

Details

Name:	00000004.00000002.522880381.000000007F370000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F370000
Size:	12288

Details

Name:	0000000C.00000003.486801791.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000004.00000000.489471544.0000000002B3B000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B3B000
Size:	12288

Details

Name:	00000004.00000003.463215459.0000000003200000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3200000
Size:	4096

Details

Name:	0000000C.00000003.483116262.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.479023152.00000000030F3000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30F3000
Size:	4096

Details

Name:	00000009.00000003.512331074.000002389A666000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2389A666000
Size:	16384

Details

Name:	00000003.00000002.817886665.00000000028EE000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28EE000
Size:	8192

Details

Name:	00000016.00000002.819267974.00007FF549CDD000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF549CDD000
Size:	8192

Details

Name:	0000000F.00000000.494706688.000000007FED0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FED0000
Size:	4096

Details

Name:	0000000C.00000003.480120218.0000000003085000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3085000
Size:	12288

Details

Name:	0000000C.00000002.498629392.0000000002F45000.00000004.00000020.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2F45000
Size:	8192

Details

Name:	00000012.00000000.530306938.00007DF5D65F0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5D65F0000
Size:	4096

Details

Name:	0000000F.00000003.497218288.0000000000733000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	733000
Size:	4096

Details

Name:	0000000F.00000003.498378233.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000000.00000002.818888169.00000000024CE000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	24CE000
Size:	8192

Details

Name:	0000000C.00000002.497879760.00000000027CA000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27CA000
Size:	12288

Details

Name:	0000001A.00000002.639032532.00007FF5883C1000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5883C1000
Size:	32768

Details

Name:	00000009.00000002.772461709.00007FF57324D000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57324D000
Size:	8192

Details

Name:	00000017.00000002.587572403.00007FF5BE7DA000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BE7DA000
Size:	4096

Details

Name:	0000000C.00000002.499418670.000000007F590000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F590000
Size:	4096

Details

Name:	0000000C.00000003.493044510.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.483842098.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000003.503604155.0000000004AC8000.00000004.00000040.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4AC8000
Size:	53248

Details

Name:	00000005.00000002.494182437.00000000029FD000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29FD000
Size:	8192

Details

Name:	00000002.00000002.500854725.0000000002BBF000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BBF000
Size:	16384

Details

Name:	00000000.00000003.463216934.0000000000770000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	770000
Size:	4096

Details

Name:	00000017.00000002.586549239.0000023930800000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	23930800000
Size:	73728

Details

Name:	0000000F.00000003.496298740.000000000070E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	70E000
Size:	4096

Details

Name:	00000009.00000002.771205955.000000EE28EF9000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	EE28EF9000
Size:	28672

Details

Name:	0000000C.00000003.493131820.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000003.497733137.00000000006CD000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6CD000
Size:	4096

Details

Name:	0000000C.00000003.479786328.00000000030F9000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30F9000
Size:	4096

Details

Name:	0000000F.00000002.519450606.000000000033E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	33E000
Size:	4096

Details

Name:	0000000F.00000002.520371530.000000000275B000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	275B000
Size:	20480

Details

Name:	00000016.00000002.817371059.00000009AE0FE000.00000004.00000010.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	9AE0FE000
Size:	8192

Details

Name:	0000000C.00000000.476124919.000000007F5A0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F5A0000
Size:	12288

Details

Name:	00000003.00000002.817705892.0000000000D60000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	D60000
Size:	4096

Details

Name:	00000002.00000000.473079185.0000000000D60000.00000040.00000010.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	stack
Protect:	page execute and read and write
Base address:	D60000
Size:	4096

Details

Name:	0000000C.00000003.479552605.0000000003104000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3104000
Size:	8192

Details

Name:	00000004.00000000.488036671.000000006E9C0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E9C0000
Size:	4096

Details

Name:	0000000F.00000003.498011360.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000003.00000003.768612612.0000000002F99000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F99000
Size:	81920

Details

Name:	0000000F.00000003.515105058.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.480188067.000000000308D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	308D000
Size:	4096

Details

Name:	00000003.00000003.443454276.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	0000000C.00000000.476943242.000000007F592000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F592000
Size:	4096

Details

Name:	0000000C.00000003.482876066.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.496436656.000000000073E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	73E000
Size:	8192

Details

Name:	00000002.00000002.499944773.0000000000DA4000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DA4000
Size:	4096

Details

Name:	0000000F.00000002.519956649.0000000002548000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2548000
Size:	12288

Details

Name:	0000000C.00000003.496421061.0000000005019000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5019000
Size:	225280

Details

Name:	00000002.00000000.471953293.0000000000DA0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	DA0000
Size:	8192

Details

Name:	0000000F.00000003.517597402.00000000006F5000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6F5000
Size:	4096

Details

Name:	00000004.00000000.486873296.0000000002B29000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B29000
Size:	32768

Details

Name:	0000000F.00000003.514141557.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000003.503586949.0000000004AC0000.00000004.00000040.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4AC0000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000017.00000002.587247007.00007FF5BE63B000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BE63B000
Size:	24576

Details

Name:	0000001A.00000003.609512642.000001DD8857F000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD8857F000
Size:	94208

Details

Name:	00000003.00000002.821731598.000000000592E000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	592E000
Size:	8192

Details

Name:	0000001A.00000002.638334919.00007FF588135000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF588135000
Size:	4096

Details

Name:	00000002.00000002.500879268.0000000002BC4000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BC4000
Size:	8192

Details

Name:	0000000F.00000003.518944877.00000000007E0000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	7E0000
Size:	4096

Details

Name:	0000000C.00000000.475986659.0000000002E10000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E10000
Size:	102400

Details

Name:	0000000C.00000003.480276260.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000009.00000002.771552207.000002389AA02000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2389AA02000
Size:	24576

Details

Name:	0000000F.00000003.503565495.00000000008B0000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	8B0000
Size:	4096

Details

Name:	00000000.00000003.462082624.0000000000770000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	770000
Size:	4096

Details

Name:	0000000F.00000003.514194757.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000002.497991399.00000000028D6000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28D6000
Size:	8192

Details

Name:	00000002.00000000.473042321.0000000000C30000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	C30000
Size:	4096

Details

Name:	00000004.00000002.522112561.000000000326A000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	326A000
Size:	110592

Details

Name:	0000000C.00000003.482664419.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000010.00000002.508004621.00007DF532A70000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF532A70000
Size:	12288

Details

Name:	00000000.00000002.820235175.000000007F730000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F730000
Size:	12288

Details

Name:	0000000C.00000003.492041816.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000010.00000002.507504865.00000286D8D70000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	286D8D70000
Size:	4096

Details

Name:	0000000C.00000003.486479243.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000004.00000002.521797650.0000000002BF8000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BF8000
Size:	16384

Details

Name:	00000005.00000002.494563590.0000000002B26000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B26000
Size:	8192

Details

Name:	0000000C.00000002.498256558.0000000002991000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2991000
Size:	32768

Details

Name:	00000004.00000000.490784611.000000000329A000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	329A000
Size:	57344

Details

Name:	00000002.00000000.472516230.00000000031CA000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	heap private
Protect:	page read and write
Base address:	31CA000
Size:	12288

Details

Name:	00000010.00000000.494398229.00007DF532A60000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF532A60000
Size:	4096

Details

Name:	0000000C.00000003.482565021.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000012.00000002.545919356.0000020021FB0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	20021FB0000
Size:	16384

Details

Name:	0000000F.00000003.500719175.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000C.00000003.496581238.0000000005025000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5025000
Size:	176128

Details

Name:	0000000C.00000003.482530126.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.514518683.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000001A.00000002.637106634.000001DD87B50000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1DD87B50000
Size:	12288

Details

Name:	00000005.00000003.459530173.0000000000920000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	920000
Size:	4096

Details

Name:	00000002.00000000.472272930.0000000002BF3000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BF3000
Size:	4096

Details

Name:	00000004.00000000.492744725.000000007F370000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F370000
Size:	12288

Details

Name:	0000000F.00000003.501115994.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000004.00000003.459564803.0000000005120000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5120000
Size:	4096

Details

Name:	00000005.00000002.493541931.0000000000897000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	897000
Size:	8192

Details

Name:	0000000C.00000000.476842567.0000000002E10000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E10000
Size:	102400

Details

Name:	00000003.00000002.821627625.00000000058EE000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	58EE000
Size:	8192

Details

Name:	00000010.00000002.509646245.00007FF5248D7000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5248D7000
Size:	32768

Details

Name:	0000001A.00000002.638571824.00007FF588281000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF588281000
Size:	24576

Details

Name:	00000003.00000003.459898656.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	00000003.00000003.678216920.0000000002F59000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F59000
Size:	262144

Details

Name:	00000004.00000000.489689847.0000000002BCB000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BCB000
Size:	20480

Details

Name:	00000005.00000002.494966040.0000000004370000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4370000
Size:	8192

Details

Name:	0000000C.00000003.479861981.00000000030FE000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30FE000
Size:	4096

Details

Name:	0000000F.00000003.501332657.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000002.00000000.472387113.000000000308E000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	308E000
Size:	8192

Details

Name:	0000000F.00000003.497048116.0000000000727000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	727000
Size:	4096

Details

Name:	00000009.00000000.468701485.00007FF5732D1000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5732D1000
Size:	16384

Details

Name:	0000001B.00000002.619037098.00007FF5A8E8B000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A8E8B000
Size:	12288

Details

Name:	0000000C.00000003.482156694.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000003.499299328.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000C.00000003.482937741.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.514739015.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000002.520600322.0000000004634000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4634000
Size:	28672

Details

Name:	0000000C.00000002.498896456.0000000004EDE000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4EDE000
Size:	8192

Details

Name:	0000000F.00000003.503005966.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000002.498788803.000000000321E000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	321E000
Size:	8192

Details

Name:	00000003.00000002.822636849.000000007F030000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F030000
Size:	20480

Details

Name:	00000004.00000000.487475627.00000000037B0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	37B0000
Size:	4096

Details

Name:	0000000C.00000003.479298042.00000000030F3000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30F3000
Size:	4096

Details

Name:	0000001A.00000000.604573375.000001DD87B30000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1DD87B30000
Size:	102400

Details

Name:	00000003.00000003.438262772.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	0000000F.00000003.505110196.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000004.00000002.522519246.0000000006D70000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6D70000
Size:	4096

Details

Name:	00000004.00000000.489115626.0000000002A25000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A25000
Size:	4096

Details

Name:	0000001A.00000002.637380352.000001DD87CBA000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD87CBA000
Size:	32768

Details

Name:	00000009.00000002.771364095.000002389A613000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2389A613000
Size:	81920

Details

Name:	0000000F.00000003.504519858.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000C.00000003.478156739.0000000003031000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3031000
Size:	139264

Details

Name:	0000000C.00000003.496654341.0000000005058000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5058000
Size:	77824

Details

Name:	0000000F.00000003.513648052.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000003.513637921.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000002.00000003.434788965.0000000002F30000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F30000
Size:	4096

Details

Name:	00000004.00000000.487107777.0000000002E40000.00000004.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page read and write
Base address:	2E40000
Size:	4096

Details

Name:	0000000C.00000003.481707741.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000005.00000003.493089556.00000000043D0000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	43D0000
Size:	4096

Details

Name:	0000000F.00000003.513821713.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000002.520503071.0000000002BB0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BB0000
Size:	36864

Details

Name:	00000004.00000000.489590015.0000000002B70000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B70000
Size:	73728

Details

Name:	00000004.00000000.490716039.0000000003287000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	3287000
Size:	32768

Details

Name:	0000001A.00000003.607169144.000001DD87CA6000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD87CA6000
Size:	16384

Details

Name:	00000002.00000000.293749897.0000000000930000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	930000
Size:	102400

Details

Name:	0000001B.00000002.618016940.00000009154BA000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	9154BA000
Size:	24576

Details

Name:	0000000C.00000003.482709829.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000004.00000000.492477609.000000006E9F1000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E9F1000
Size:	221184

Details

Name:	00000010.00000002.507947925.00000286D9450000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	286D9450000
Size:	4096

Details

Name:	00000016.00000002.817671022.0000016F79E59000.00000004.00000040.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	16F79E59000
Size:	4096

Details

Name:	00000010.00000002.507546792.00000286D8E29000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	286D8E29000
Size:	73728

Details

Name:	00000005.00000003.459958933.0000000000920000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	920000
Size:	4096

Details

Name:	00000005.00000002.495403051.000000007F000000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F000000
Size:	12288

Details

Name:	0000000C.00000003.492959081.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000010.00000002.510640877.00007FF524DC9000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF524DC9000
Size:	12288

Details

Name:	0000000F.00000003.497992017.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000004.00000000.490505386.0000000003250000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	heap private
Protect:	page read and write
Base address:	3250000
Size:	20480

Details

Name:	0000000F.00000003.502435668.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000003.496168517.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000003.501028165.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000005.00000002.494056291.0000000000C40000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	C40000
Size:	73728

Details

Name:	0000000F.00000003.507187664.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000004.00000000.310295248.000000007F362000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F362000
Size:	4096

Details

Name:	0000000C.00000003.482882366.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000004.00000002.522044770.0000000003250000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3250000
Size:	20480

Details

Name:	0000001B.00000002.618067642.000000091587E000.00000004.00000010.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	91587E000
Size:	8192

Details

Name:	0000000F.00000003.504572268.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000003.00000002.817995267.00000000029B8000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29B8000
Size:	12288

Details

Name:	00000010.00000000.494420379.00007DF532A70000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF532A70000
Size:	12288

Details

Name:	00000012.00000002.547562623.00007FF5C8716000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C8716000
Size:	16384

Details

Name:	00000004.00000000.487436710.0000000003430000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	3430000
Size:	36864

Details

Name:	00000003.00000003.495958868.0000000002F45000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F45000
Size:	77824

Details

Name:	0000000F.00000003.514300691.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000001A.00000003.623372814.000001DD88B63000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD88B63000
Size:	397312

Details

Name:	0000000F.00000003.499973696.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000002.00000000.473234706.0000000002B3B000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B3B000
Size:	12288

Details

Name:	0000000C.00000002.499224889.000000000584F000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	584F000
Size:	4096

Details

Name:	00000004.00000002.522534023.00000000075AC000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	75AC000
Size:	16384

Details

Name:	0000000F.00000003.497680793.000000000074B000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	74B000
Size:	16384

Details

Name:	0000000F.00000003.514644202.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000002.00000002.501813094.0000000003550000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3550000
Size:	4096

Details

Name:	00000003.00000002.818743515.0000000002BF8000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BF8000
Size:	16384

Details

Name:	00000005.00000003.458244834.0000000000976000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	976000
Size:	12288

Details

Name:	00000004.00000000.488407171.000000006E9D0000.00000020.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page execute read
Base address:	6E9D0000
Size:	135168

Details

Name:	0000000F.00000003.502469027.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.483417599.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000017.00000003.585059137.000002393084A000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2393084A000
Size:	24576

Details

Name:	0000000C.00000003.482092998.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000003.501796654.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000004.00000000.490017983.0000000002EAB000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	2EAB000
Size:	20480

Details

Name:	0000000C.00000003.485501594.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.514860526.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000004.00000000.486914489.0000000002B3F000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B3F000
Size:	24576

Details

Name:	00000005.00000000.319692182.000000007EFF0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7EFF0000
Size:	4096

Details

Name:	0000000F.00000003.501548021.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000001A.00000003.611812721.000001DD88593000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD88593000
Size:	61440

Details

Name:	0000000F.00000002.520296837.00000000026E6000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26E6000
Size:	16384

Details

Name:	00000000.00000003.502828764.0000000000DBD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DBD000
Size:	270336

Details

Name:	00000017.00000002.586328305.0000006CA2EFE000.00000004.00000010.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	6CA2EFE000
Size:	8192

Details

Name:	0000000C.00000002.497845712.0000000002793000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2793000
Size:	16384

Details

Name:	0000000C.00000003.480295851.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000003.00000002.818029249.00000000029D3000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29D3000
Size:	4096

Details

Name:	0000000F.00000003.505905141.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000009.00000002.772240010.00007FF5731E3000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5731E3000
Size:	28672

Details

Name:	0000000F.00000003.501128331.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000003.00000002.822580988.000000006EA29000.00000040.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute and read and write
Base address:	6EA29000
Size:	12288

Details

Name:	00000004.00000000.487289667.0000000002FE0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2FE0000
Size:	12288

Details

Name:	00000002.00000002.499805448.0000000000C30000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C30000
Size:	4096

Details

Name:	0000000C.00000002.497927562.00000000027EB000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27EB000
Size:	4096

Details

Name:	00000002.00000000.472324562.0000000002F50000.00000004.00000020.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	2F50000
Size:	32768

Details

Name:	00000000.00000002.820074551.000000006EA3F000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6EA3F000
Size:	16384

Details

Name:	00000002.00000003.454204267.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	00000010.00000002.510555609.00007FF524D43000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF524D43000
Size:	24576

Details

Name:	0000000F.00000003.501675071.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000001A.00000002.638486241.00007FF588225000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF588225000
Size:	20480

Details

Name:	00000004.00000000.492609299.000000006EA27000.00000004.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page read and write
Base address:	6EA27000
Size:	8192

Details

Name:	0000000F.00000003.504623089.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000009.00000002.772443194.00007FF57324A000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57324A000
Size:	8192

Details

Name:	00000004.00000002.522154424.0000000003287000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	3287000
Size:	32768

Details

Name:	0000000F.00000003.496895975.0000000004659000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4659000
Size:	36864

Details

Name:	00000012.00000002.550063231.00007FF5C88DB000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C88DB000
Size:	12288

Details

Name:	0000001A.00000002.638891272.00007FF588347000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF588347000
Size:	8192

Details

Name:	00000002.00000000.472059972.0000000002B11000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B11000
Size:	4096

Details

Name:	00000003.00000003.722602692.0000000002FB5000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FB5000
Size:	4096

Details

Name:	0000000F.00000002.519432001.000000000033A000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	33A000
Size:	8192

Details

Name:	0000000F.00000003.515207149.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000004.00000000.487694489.00000000068F0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	68F0000
Size:	4096

Details

Name:	00000002.00000003.440574060.0000000002F30000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F30000
Size:	4096

Details

Name:	0000000C.00000003.493023800.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000001A.00000002.637154818.000001DD87BE0000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1DD87BE0000
Size:	8192

Details

Name:	00000000.00000002.818952711.000000000262C000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	262C000
Size:	16384

Details

Name:	0000001A.00000002.637203168.000001DD87C13000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD87C13000
Size:	86016

Details

Name:	00000003.00000003.440138727.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	00000005.00000002.494647134.0000000002B3B000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B3B000
Size:	12288

Details

Name:	00000004.00000002.521721712.0000000002BD1000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BD1000
Size:	32768

Details

Name:	00000005.00000002.493711296.0000000000971000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	971000
Size:	32768

Details

Name:	00000012.00000002.549822960.00007FF5C889F000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C889F000
Size:	12288

Details

Name:	00000002.00000002.499921225.0000000000DA0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DA0000
Size:	8192

Details

Name:	0000000C.00000003.481753260.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000002.00000000.293788765.000000007FAB0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FAB0000
Size:	12288

Details

Name:	0000000C.00000003.486537665.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000005.00000000.319701778.000000007F000000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F000000
Size:	12288

Details

Name:	0000001A.00000002.638290374.00007FF588114000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF588114000
Size:	4096

Details

Name:	0000001A.00000003.614369947.000001DD88A02000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD88A02000
Size:	94208

Details

Name:	0000000F.00000003.500187295.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000003.497784034.00000000006E0000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6E0000
Size:	8192

Details

Name:	0000000F.00000003.497231417.000000000460B000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	460B000
Size:	4096

Details

Name:	0000001A.00000002.637254816.000001DD87C3C000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD87C3C000
Size:	53248

Details

Name:	00000002.00000003.459563515.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	00000012.00000000.530315499.00007DF5D65F2000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5D65F2000
Size:	4096

Details

Name:	00000012.00000002.547420993.00007DF5D6610000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5D6610000
Size:	12288

Details

Name:	00000012.00000002.546723241.0000020021FD0000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20021FD0000
Size:	4096

Details

Name:	00000004.00000000.489772791.0000000002BDB000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BDB000
Size:	36864

Details

Name:	00000009.00000003.770971122.000002389AB13000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2389AB13000
Size:	4096

Details

Name:	0000000F.00000003.507144084.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.480235253.000000000310C000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	310C000
Size:	12288

Details

Name:	0000000F.00000002.520490643.0000000002B30000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B30000
Size:	4096

Details

Name:	00000002.00000002.501704415.00000000031CA000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	31CA000
Size:	12288

Details

Name:	0000000C.00000003.483247664.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000001B.00000003.617682789.000001B9C7BAB000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B9C7BAB000
Size:	8192

Details

Name:	00000009.00000002.771172848.000000EE2873D000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	EE2873D000
Size:	12288

Details

Name:	00000002.00000000.472177473.0000000002BD1000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BD1000
Size:	32768

Details

Name:	00000010.00000002.507333052.000000F7381FB000.00000004.00000010.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F7381FB000
Size:	20480

Details

Name:	0000001A.00000002.637876614.000001DD88599000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD88599000
Size:	8192

Details

Name:	00000004.00000000.492689537.000000007F350000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F350000
Size:	4096

Details

Name:	0000000C.00000003.486406473.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000009.00000002.772686060.00007FF5732CA000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5732CA000
Size:	4096

Details

Name:	00000003.00000002.818485346.0000000002B56000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B56000
Size:	16384

Details

Name:	00000000.00000002.817428928.00000000005B2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5B2000
Size:	8192

Details

Name:	0000000F.00000003.513959716.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000003.00000003.460610012.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	0000001A.00000002.638130851.00007FF587F37000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF587F37000
Size:	4096

Details

Name:	0000000F.00000003.502930697.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.481767588.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000001B.00000002.618377065.000001B9C7BB5000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B9C7BB5000
Size:	4096

Details

Name:	0000000C.00000003.482773344.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.505157295.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000016.00000002.818063558.0000016F7A020000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	16F7A020000
Size:	4096

Details

Name:	00000000.00000003.503943248.0000000000DB0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DB0000
Size:	4096

Details

Name:	00000003.00000003.767614152.0000000002FB3000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FB3000
Size:	12288

Details

Name:	0000000F.00000003.514494120.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000000.00000002.817852787.0000000000A0C000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A0C000
Size:	16384

Details

Name:	0000000C.00000003.492820639.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000002.520177178.0000000002691000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2691000
Size:	8192

Details

Name:	0000000F.00000003.507227627.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.482307142.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000003.499887637.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000003.515359082.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000C.00000003.479567485.0000000005039000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5039000
Size:	36864

Details

Name:	00000010.00000002.507819811.00000286D8E64000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	286D8E64000
Size:	45056

Details

Name:	00000004.00000003.459967435.0000000005120000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5120000
Size:	4096

Details

Name:	0000000C.00000003.486365319.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000C.00000003.491525828.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.501312268.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000004.00000000.486847861.0000000002B16000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B16000
Size:	4096

Details

Name:	0000001B.00000002.618236428.000001B9C7AD0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B9C7AD0000
Size:	16384

Details

Name:	00000009.00000002.771863620.00007FF572E68000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF572E68000
Size:	4096

Details

Name:	0000001A.00000002.638382265.00007FF588185000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF588185000
Size:	12288

Details

Name:	0000000F.00000003.500917582.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000010.00000002.510113049.00007FF524C4B000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF524C4B000
Size:	24576

Details

Name:	00000002.00000000.473329989.0000000002BCB000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BCB000
Size:	20480

Details

Name:	0000000C.00000002.497870489.00000000027C6000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27C6000
Size:	12288

Details

Name:	0000000C.00000003.486542688.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.497550437.00000000033DB000.00000004.00000040.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	33DB000
Size:	16384

Details

Name:	00000002.00000000.471926204.0000000000C70000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	C70000
Size:	4096

Details

Name:	00000003.00000003.722437282.0000000002FAC000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FAC000
Size:	40960

Details

Name:	00000002.00000000.473568659.000000000308E000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	308E000
Size:	8192

Details

Name:	00000003.00000002.819004186.0000000002F27000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2F27000
Size:	106496

Details

Name:	00000004.00000000.487747889.0000000006D6E000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	6D6E000
Size:	8192

Details

Name:	0000000F.00000000.494636182.0000000000170000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	170000
Size:	16384

Details

Name:	00000009.00000003.489958779.000002389A663000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2389A663000
Size:	12288

Details

Name:	0000000C.00000003.479179561.00000000030D5000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30D5000
Size:	4096

Details

Name:	00000003.00000002.819970647.00000000034D0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	34D0000
Size:	372736

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	00000003.00000002.822228563.000000006E9C0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E9C0000
Size:	4096

Details

Name:	00000003.00000002.818342083.0000000002B29000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B29000
Size:	32768

Details

Name:	00000002.00000002.501055293.0000000002BF3000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BF3000
Size:	4096

Details

Name:	0000000C.00000002.498166922.000000000292C000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	292C000
Size:	8192

Details

Name:	00000004.00000003.459228522.0000000005120000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5120000
Size:	4096

Details

Name:	0000000F.00000003.513807845.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000000.00000000.292192070.000000007F710000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F710000
Size:	4096

Details

Name:	0000001A.00000003.617499905.000001DD885C4000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD885C4000
Size:	65536

Details

Name:	00000002.00000000.473190321.0000000002B11000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B11000
Size:	4096

Details

Name:	00000003.00000003.459764306.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	0000000C.00000000.476103716.000000007F592000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F592000
Size:	4096

Details

Name:	0000000F.00000003.501556467.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000004.00000003.460804632.0000000005120000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5120000
Size:	4096

Details

Name:	0000000C.00000003.487442411.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000000.00000003.502978479.0000000000DFD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DFD000
Size:	8192

Details

Name:	00000002.00000000.472229575.0000000002BEC000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BEC000
Size:	16384

Details

Name:	00000010.00000000.494391143.00007DF532A52000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF532A52000
Size:	4096

Details

Name:	00000002.00000000.472501868.00000000031C0000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	heap private
Protect:	page read and write
Base address:	31C0000
Size:	20480

Details

Name:	0000000F.00000000.494007635.000000007FED2000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FED2000
Size:	4096

Details

Name:	0000000C.00000003.497499062.0000000005360000.00000004.00000040.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5360000
Size:	53248

Details

Name:	00000005.00000002.493427282.000000000063A000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	63A000
Size:	24576

Details

Name:	00000004.00000002.522726931.000000006EA27000.00000004.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6EA27000
Size:	8192

Details

Name:	00000000.00000003.503443910.0000000000DBA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DBA000
Size:	270336

Details

Name:	00000010.00000002.507287200.000000F737DAB000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F737DAB000
Size:	20480

Details

Name:	0000000F.00000003.496687002.0000000000739000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	739000
Size:	4096

Details

Name:	0000001B.00000002.618887396.00007FF5A877C000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A877C000
Size:	4096

Details

Name:	0000000C.00000003.479805425.0000000005039000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5039000
Size:	36864

Details

Name:	0000000C.00000003.483303391.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.502648501.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000005.00000002.494848691.0000000002BD1000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BD1000
Size:	32768

Details

Name:	0000000C.00000003.481962446.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.513915803.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000000.00000003.594433017.0000000000E1E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E1E000
Size:	32768

Details

Name:	00000000.00000003.595091153.0000000000DB3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DB3000
Size:	8192

Details

Name:	0000000F.00000003.514766489.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000003.500494423.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000004.00000002.521786949.0000000002BF3000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BF3000
Size:	4096

Details

Name:	0000001A.00000002.638774809.00007FF5882F7000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5882F7000
Size:	16384

Details

Name:	0000000C.00000003.483033309.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000003.502616976.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000C.00000000.476908468.000000007F580000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F580000
Size:	4096

Details

Name:	00000012.00000000.530343497.00007DF5D6610000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5D6610000
Size:	12288

Details

Name:	00000000.00000003.459865715.0000000000770000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	770000
Size:	4096

Details

Name:	00000003.00000003.459630454.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	00000016.00000002.818968985.00007FF549C6F000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF549C6F000
Size:	12288

Details

Name:	0000000F.00000003.502040289.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000003.500702616.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000002.00000002.499713688.000000000098B000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	98B000
Size:	20480

Details

Name:	0000000F.00000003.500436831.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000003.00000003.585156697.0000000002F89000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F89000
Size:	184320

Details

Name:	0000000C.00000003.483403685.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.505885081.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000010.00000002.507441515.00000286D8CE0000.00000004.00000040.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	286D8CE0000
Size:	4096

Details

Name:	0000000F.00000003.519013728.0000000002BA8000.00000004.00000040.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	2BA8000
Size:	4096

Details

Name:	0000000C.00000003.480205346.0000000003092000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3092000
Size:	4096

Details

Name:	0000000C.00000003.480260448.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000C.00000002.498493053.0000000002EA2000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2EA2000
Size:	57344

Details

Name:	0000000F.00000000.494692636.0000000002788000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2788000
Size:	16384

Details

Name:	0000000F.00000002.519383680.0000000000180000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	180000
Size:	8192

Details

Name:	0000000C.00000003.479720033.0000000004FEB000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FEB000
Size:	4096

Details

Name:	00000003.00000002.821045531.00000000050A0000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	50A0000
Size:	471040

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000C.00000003.481901525.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000002.497938559.000000000289E000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	289E000
Size:	4096

Details

Name:	0000000F.00000003.515222015.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000C.00000003.479599351.00000000030ED000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30ED000
Size:	4096

Details

Name:	0000000F.00000002.520758364.0000000004C7B000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4C7B000
Size:	20480

Details

Name:	00000002.00000000.472512283.00000000031C7000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	heap private
Protect:	page read and write
Base address:	31C7000
Size:	4096

Details

Name:	00000004.00000003.461377284.0000000005120000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5120000
Size:	4096

Details

Name:	00000017.00000002.587450699.00007FF5BE73E000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BE73E000
Size:	4096

Details

Name:	00000000.00000003.594463709.0000000000DB7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DB7000
Size:	299008

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000C.00000003.479274452.000000000310A000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	310A000
Size:	20480

Details

Name:	0000000F.00000003.515125296.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000001B.00000002.619075022.00007FF5A8E9E000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A8E9E000
Size:	8192

Details

Name:	0000000C.00000000.476875899.0000000002EB0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2EB0000
Size:	16384

Details

Name:	00000010.00000002.507425986.00000286D8CD0000.00000004.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	286D8CD0000
Size:	4096

Details

Name:	0000000F.00000003.500372796.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000017.00000002.587131116.00007FF5BE591000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BE591000
Size:	8192

Details

Name:	00000005.00000003.458068225.0000000000810000.00000040.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page execute and read and write
Base address:	810000
Size:	4096

Details

Name:	0000000F.00000003.498316967.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000004.00000000.489431939.0000000002B29000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B29000
Size:	32768

Details

Name:	0000000F.00000000.493971575.0000000000190000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	190000
Size:	4096

Details

Name:	00000003.00000003.540318644.0000000002F59000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F59000
Size:	196608

Details

Name:	00000005.00000002.493566256.00000000008A0000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8A0000
Size:	4096

Details

Name:	0000000F.00000003.498058493.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000004.00000000.487405177.0000000003290000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	3290000
Size:	36864

Details

Name:	0000000C.00000003.482581995.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000C.00000002.499009307.0000000005019000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5019000
Size:	49152

Details

Name:	0000000C.00000003.491608685.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000003.00000002.818700085.0000000002BE6000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BE6000
Size:	12288

Details

Name:	0000000C.00000003.497483439.0000000004DB0000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	4DB0000
Size:	4096

Details

Name:	0000000C.00000002.499388877.000000007F580000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F580000
Size:	4096

Details

Name:	0000001A.00000002.637405954.000001DD87CCA000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD87CCA000
Size:	36864

Details

Name:	00000002.00000002.501898955.00000000068A0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	68A0000
Size:	4096

Details

Name:	00000002.00000000.472563828.0000000003560000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	3560000
Size:	372736

Details

Name:	00000005.00000002.493453978.0000000000680000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	680000
Size:	4096

Details

Name:	0000000F.00000002.520669493.000000000492E000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	492E000
Size:	8192

Details

Name:	0000000C.00000003.492371249.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.491572900.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.483284077.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.480102006.00000000030A1000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30A1000
Size:	4096

Details

Name:	0000000C.00000003.478917448.00000000030CA000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30CA000
Size:	4096

Details

Name:	0000000F.00000003.496498345.000000000074A000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	74A000
Size:	20480

Details

Name:	0000000F.00000003.501481349.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000003.499678311.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000003.503554011.0000000004AD5000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4AD5000
Size:	12288

Details

Name:	00000000.00000002.819021747.00000000026AE000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	26AE000
Size:	8192

Details

Name:	0000001A.00000002.639079945.00007FF5883CA000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5883CA000
Size:	4096

Details

Name:	0000000F.00000003.509926769.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000001A.00000003.622753183.000001DD885A5000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD885A5000
Size:	176128

Details

Name:	0000000C.00000003.482434178.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000001A.00000003.616464913.000001DD8858C000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD8858C000
Size:	32768

Details

Name:	00000002.00000000.473321825.0000000002BC4000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BC4000
Size:	8192

Details

Name:	0000000F.00000003.501319630.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000C.00000003.483084486.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000C.00000002.498152514.000000000291B000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	291B000
Size:	4096

Details

Name:	00000004.00000000.487266011.0000000002FA0000.00000040.00000001.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	2FA0000
Size:	4096

Details

Name:	0000000F.00000003.500779730.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000003.498263710.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.483002010.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000004.00000002.522839039.000000007F352000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F352000
Size:	4096

Details

Name:	00000002.00000003.462041959.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	00000002.00000000.473105657.0000000000DB0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	DB0000
Size:	4096

Details

Name:	0000001A.00000002.637117076.000001DD87B60000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1DD87B60000
Size:	4096

Details

Name:	00000012.00000002.545744516.000000853837E000.00000004.00000010.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	853837E000
Size:	8192

Details

Name:	00000000.00000002.819548312.0000000003D9A000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3D9A000
Size:	24576

Details

Name:	0000000C.00000003.481746601.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000002.519348718.0000000000162000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	162000
Size:	57344

Details

Name:	0000000F.00000003.500251435.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000003.502242142.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000017.00000002.587548803.00007FF5BE7CA000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BE7CA000
Size:	12288

Details

Name:	0000000C.00000003.492863122.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000001A.00000003.636713162.000001DD87C4D000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD87C4D000
Size:	4096

Details

Name:	00000003.00000002.822507690.000000006E9F1000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E9F1000
Size:	221184

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000004.00000000.491967201.00000000069AE000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	69AE000
Size:	8192

Details

Name:	00000016.00000002.818932681.00007FF549C66000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF549C66000
Size:	4096

Details

Name:	0000000C.00000003.491463723.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.515040161.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000005.00000002.494089396.0000000000DE0000.00000004.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000016.00000002.818139243.0000016F7A5B0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	16F7A5B0000
Size:	4096

Details

Name:	0000000C.00000003.483800429.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000004.00000003.462112708.0000000005120000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5120000
Size:	4096

Details

Name:	0000000F.00000003.499937515.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000009.00000002.771575571.000002389AA13000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2389AA13000
Size:	4096

Details

Name:	00000002.00000000.471938125.0000000000D60000.00000040.00000010.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	stack
Protect:	page execute and read and write
Base address:	D60000
Size:	4096

Details

Name:	0000000C.00000000.475636955.0000000002E10000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E10000
Size:	102400

Details

Name:	00000009.00000002.772282500.00007FF5731F0000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5731F0000
Size:	4096

Details

Name:	0000000F.00000003.496767749.0000000000727000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	727000
Size:	4096

Details

Name:	00000004.00000000.489065527.00000000029F1000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	29F1000
Size:	36864

Details

Name:	0000000F.00000003.496388901.000000000072D000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	72D000
Size:	4096

Details

Name:	00000004.00000000.487273556.0000000002FB0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	2FB0000
Size:	4096

Details

Name:	00000000.00000002.817484731.0000000000700000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	700000
Size:	4096

Details

Name:	0000000F.00000003.501290550.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000010.00000002.507580827.00000286D8E3C000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	286D8E3C000
Size:	61440

Details

Name:	0000001A.00000002.636935393.0000004692F77000.00000004.00000010.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4692F77000
Size:	36864

Details

Name:	00000003.00000002.822561805.000000006EA27000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6EA27000
Size:	8192

Details

Name:	00000004.00000000.488626440.000000006EA29000.00000040.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page execute and read and write
Base address:	6EA29000
Size:	12288

Details

Name:	00000017.00000002.587106112.00007FF5BE465000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BE465000
Size:	8192

Details

Name:	00000003.00000003.422817633.0000000000D10000.00000040.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page execute and read and write
Base address:	D10000
Size:	4096

Details

Name:	00000000.00000002.819734296.000000006E9F1000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E9F1000
Size:	221184

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000002.00000000.472131120.0000000002B5B000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B5B000
Size:	12288

Details

Name:	0000001A.00000003.619166353.000001DD88A6A000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD88A6A000
Size:	425984

Details

Name:	00000002.00000003.441042940.0000000002F30000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F30000
Size:	4096

Details

Name:	0000000C.00000003.478772757.0000000004EE1000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4EE1000
Size:	167936

Details

Name:	00000000.00000002.819614325.000000006E9C0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E9C0000
Size:	4096

Details

Name:	0000000C.00000003.481760789.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000004.00000002.521627078.0000000002B6C000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B6C000
Size:	4096

Details

Name:	00000012.00000002.549787583.00007FF5C889D000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C889D000
Size:	4096

Details

Name:	00000004.00000000.487048737.0000000002BDB000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BDB000
Size:	36864

Details

Name:	00000000.00000002.817803271.00000000008CD000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8CD000
Size:	12288

Details

Name:	00000003.00000002.817573112.0000000000CC0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	CC0000
Size:	8192

Details

Name:	0000000F.00000003.515085180.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000003.499607321.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000C.00000003.482899606.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000003.00000002.821928294.00000000059F0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	59F0000
Size:	462848

Details

Name:	00000005.00000002.494907078.0000000002BF8000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BF8000
Size:	16384

Details

Name:	00000005.00000002.494890333.0000000002BEC000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BEC000
Size:	16384

Details

Name:	00000004.00000000.487304992.00000000031EC000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	31EC000
Size:	12288

Details

Name:	0000000C.00000002.499244464.000000000593E000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	593E000
Size:	8192

Details

Name:	00000002.00000002.499845518.0000000000C80000.00000004.00000020.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	C80000
Size:	20480

Details

Name:	00000003.00000000.294086964.00000000009C0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	9C0000
Size:	102400

Details

Name:	0000000F.00000003.514718708.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000003.00000002.818452171.0000000002B4D000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B4D000
Size:	32768

Details

Name:	0000000C.00000002.498235447.000000000298B000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	298B000
Size:	20480

Details

Name:	0000000F.00000003.515170268.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000004.00000000.490048962.0000000002EF0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2EF0000
Size:	16384

Details

Name:	00000000.00000002.817500994.0000000000750000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	750000
Size:	8192

Details

Name:	0000000C.00000003.479605227.00000000030F3000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30F3000
Size:	4096

Details

Name:	0000000F.00000003.496668365.000000000072D000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	72D000
Size:	4096

Details

Name:	00000002.00000003.461372623.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	00000003.00000002.822420944.000000006E9D0000.00000020.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	6E9D0000
Size:	135168

Details

Name:	00000004.00000002.522755388.000000006EA3E000.00000004.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6EA3E000
Size:	4096

Details

Name:	0000000F.00000000.495119375.000000007FEF0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FEF0000
Size:	12288

Details

Name:	0000000F.00000003.507873559.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000003.498448928.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000001A.00000002.637514881.000001DD87D08000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD87D08000
Size:	32768

Details

Name:	0000000C.00000003.480309780.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000C.00000003.492532215.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000001A.00000002.637322001.000001DD87C71000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD87C71000
Size:	24576

Details

Name:	00000002.00000000.472620668.0000000004E4C000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	4E4C000
Size:	16384

Details

Name:	0000000C.00000003.492016892.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000009.00000003.493034629.000002389AB02000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2389AB02000
Size:	16384

Details

Name:	0000000C.00000003.480195929.000000000308F000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	308F000
Size:	8192

Details

Name:	0000000C.00000002.498332205.00000000029B2000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29B2000
Size:	8192

Details

Name:	0000000F.00000000.495091395.000000007FED2000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FED2000
Size:	4096

Details

Name:	0000000C.00000003.494492233.0000000005460000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5460000
Size:	4096

Details

Name:	0000000C.00000003.486736247.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000000.00000002.817779068.00000000007B5000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	7B5000
Size:	16384

Details

Name:	00000012.00000002.549894222.00007FF5C88B3000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C88B3000
Size:	12288

Details

Name:	0000000C.00000002.498647791.0000000002F4E000.00000004.00000020.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000000.00000000.292179078.0000000000390000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	390000
Size:	102400

Details

Name:	00000002.00000000.471833337.000000000098B000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	98B000
Size:	20480

Details

Name:	00000004.00000000.486765639.00000000029FD000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	29FD000
Size:	8192

Details

Name:	00000000.00000002.819055174.00000000026F0000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	26F0000
Size:	4096

Details

Name:	0000000C.00000002.497727657.0000000002760000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2760000
Size:	4096

Details

Name:	00000003.00000002.818298580.0000000002B16000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B16000
Size:	8192

Details

Name:	00000002.00000002.500061238.00000000029FD000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29FD000
Size:	8192

Details

Name:	0000000F.00000003.507267480.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.483053653.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000010.00000003.505997938.00000286D8E50000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	286D8E50000
Size:	77824

Details

Name:	00000005.00000003.463414785.0000000000930000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	930000
Size:	4096

Details

Name:	00000000.00000002.819236641.0000000002C7E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2C7E000
Size:	8192

Details

Name:	0000001A.00000002.636896943.0000004692CFE000.00000004.00000010.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4692CFE000
Size:	8192

Details

Name:	0000001B.00000003.617804995.000001B9C7BB1000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B9C7BB1000
Size:	12288

Details

Name:	00000016.00000002.818494515.00007DF5579D2000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5579D2000
Size:	4096

Details

Name:	0000000C.00000003.486667854.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.482298787.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000002.498196196.000000000297F000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	297F000
Size:	16384

Details

Name:	00000000.00000003.461405312.0000000000770000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	770000
Size:	4096

Details

Name:	0000000F.00000003.499652650.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000000.00000002.817529423.0000000000790000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	790000
Size:	4096

Details

Name:	00000003.00000000.294110634.000000007F132000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F132000
Size:	4096

Details

Name:	00000002.00000000.293784703.000000007FAA2000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FAA2000
Size:	4096

Details

Name:	00000004.00000000.490880945.0000000003630000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	3630000
Size:	73728

Details

Name:	00000004.00000003.462312966.0000000005120000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5120000
Size:	4096

Details

Name:	00000017.00000002.586781061.0000023930913000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	23930913000
Size:	12288

Details

Name:	00000012.00000002.545612671.0000008537BAD000.00000004.00000010.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8537BAD000
Size:	12288

Details

Name:	0000000C.00000003.497456218.0000000004DA0000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	4DA0000
Size:	4096

Details

Name:	00000017.00000002.586402677.0000006CA337F000.00000004.00000010.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	6CA337F000
Size:	4096

Details

Name:	00000005.00000002.494954752.000000000436E000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	436E000
Size:	8192

Details

Name:	0000001B.00000003.617560689.000001B9C7BA1000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B9C7BA1000
Size:	36864

Details

Name:	0000000F.00000003.499694811.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.481938679.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.492359641.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000002.00000002.499794372.0000000000BBC000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	BBC000
Size:	4096

Details

Name:	00000002.00000003.460802671.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	0000000F.00000003.499725042.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000004.00000000.490528298.0000000003257000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	heap private
Protect:	page read and write
Base address:	3257000
Size:	4096

Details

Name:	00000003.00000003.458256683.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	00000012.00000002.546737614.0000020022000000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20022000000
Size:	73728

Details

Name:	00000002.00000002.501001951.0000000002BE6000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BE6000
Size:	12288

Details

Name:	00000012.00000002.545560234.0000008537B2B000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8537B2B000
Size:	20480

Details

Name:	0000000C.00000003.485773646.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000C.00000003.492001515.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000003.500220434.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000005.00000002.493350162.00000000003C0000.00000004.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	3C0000
Size:	4096

Details

Name:	00000004.00000000.488510969.000000006E9F1000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E9F1000
Size:	221184

Details

Name:	00000012.00000002.547328543.00007DF4D44C0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4D44C0000
Size:	20480

Details

Name:	0000000C.00000002.499265875.0000000005980000.00000008.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page write copy
Base address:	5980000
Size:	266240

Details

Name:	0000000C.00000003.486692771.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000C.00000003.483858801.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.496638689.0000000005052000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5052000
Size:	12288

Details

Name:	0000001B.00000002.618221280.000001B9C7AC0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B9C7AC0000
Size:	8192

Details

Name:	00000009.00000002.772359310.00007FF5731FE000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5731FE000
Size:	4096

Details

Name:	00000004.00000000.488684543.000000007F250000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F250000
Size:	20480

Details

Name:	0000000F.00000003.496317877.0000000000715000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	715000
Size:	4096

Details

Name:	0000000F.00000003.499626427.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000005.00000002.493527138.0000000000840000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000002.00000000.472701486.000000007FAB0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FAB0000
Size:	12288

Details

Name:	0000001A.00000002.637419779.000001DD87CD4000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD87CD4000
Size:	8192

Details

Name:	00000004.00000000.486997971.0000000002BBB000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BBB000
Size:	12288

Details

Name:	00000009.00000000.468654690.00007DF580F42000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF580F42000
Size:	4096

Details

Name:	0000000C.00000003.480981632.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000C.00000003.478115140.0000000003031000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3031000
Size:	139264

Details

Name:	0000000F.00000003.515742577.000000000463D000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	463D000
Size:	40960

Details

Name:	00000002.00000000.471909359.0000000000C30000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	C30000
Size:	4096

Details

Name:	00000002.00000000.473402200.0000000002BF8000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BF8000
Size:	16384

Details

Name:	00000010.00000002.507485080.00000286D8D40000.00000004.00000020.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	286D8D40000
Size:	8192

Details

Name:	0000001A.00000002.638423468.00007FF5881BB000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5881BB000
Size:	8192

Details

Name:	0000001A.00000003.616356956.000001DD885B7000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD885B7000
Size:	151552

Details

Name:	00000004.00000002.522062394.0000000003257000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3257000
Size:	4096

Details

Name:	00000004.00000000.492308536.000000006E9C6000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E9C6000
Size:	40960

Details

Name:	00000002.00000000.473160481.0000000002AD8000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AD8000
Size:	8192

Details

Name:	0000000C.00000003.485527795.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000003.514548070.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000005.00000002.494994273.00000000043BF000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	43BF000
Size:	4096

Details

Name:	0000000F.00000003.514026857.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.479661467.00000000030F3000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30F3000
Size:	4096

Details

Name:	0000000C.00000003.492853794.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000005.00000002.494147001.00000000029C9000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29C9000
Size:	8192

Details

Name:	0000001A.00000003.626345095.000001DD8854F000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD8854F000
Size:	122880

Details

Name:	00000009.00000000.468637794.00007DF580F30000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF580F30000
Size:	4096

Details

Name:	00000005.00000003.462923292.0000000000930000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	930000
Size:	4096

Details

Name:	00000010.00000002.507370839.000000F73837F000.00000004.00000010.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F73837F000
Size:	4096

Details

Name:	0000000F.00000003.503491349.0000000004981000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4981000
Size:	4096

Details

Name:	00000003.00000002.822672116.000000007F132000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F132000
Size:	4096

Details

Name:	0000000F.00000003.507122696.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000004.00000000.487018829.0000000002BC4000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BC4000
Size:	8192

Details

Name:	00000004.00000002.521774327.0000000002BEC000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BEC000
Size:	16384

Details

Name:	0000001A.00000003.610720166.000001DD88A02000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD88A02000
Size:	114688

Details

Name:	00000002.00000002.501731496.00000000031D0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	31D0000
Size:	36864

Details

Name:	00000002.00000000.474133304.0000000004E8E000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	4E8E000
Size:	8192

Details

Name:	0000001A.00000002.638368982.00007FF588181000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF588181000
Size:	12288

Details

Name:	0000000F.00000003.514574703.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000017.00000002.587188441.00007FF5BE5EF000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BE5EF000
Size:	8192

Details

Name:	0000001A.00000002.637924259.00007DF493F00000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF493F00000
Size:	20480

Details

Name:	0000000C.00000003.486422228.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000016.00000002.817422403.0000016F79CE0000.00000004.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	16F79CE0000
Size:	4096

Details

Name:	0000000F.00000003.507387363.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000003.498205438.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000012.00000002.549738129.00007FF5C8899000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C8899000
Size:	8192

Details

Name:	00000012.00000002.547235623.0000020022113000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20022113000
Size:	12288

Details

Name:	00000017.00000002.587347012.00007FF5BE6F3000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BE6F3000
Size:	28672

Details

Name:	0000000F.00000003.505993867.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000004.00000000.486814142.0000000002AEE000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AEE000
Size:	28672

Details

Name:	00000004.00000000.492295981.000000006E9C5000.00000004.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page read and write
Base address:	6E9C5000
Size:	4096

Details

Name:	0000000F.00000003.514506653.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000003.497185072.0000000000715000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	715000
Size:	4096

Details

Name:	0000000C.00000000.476090502.000000007F590000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F590000
Size:	4096

Details

Name:	00000010.00000002.509628865.00007FF5248D1000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5248D1000
Size:	20480

Details

Name:	0000000F.00000002.520612860.000000000463C000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	463C000
Size:	36864

Details

Name:	0000000F.00000003.499337132.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000000.00000003.684938824.0000000000DB1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DB1000
Size:	335872

Details

Name:	0000000F.00000003.496952067.000000000073E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	73E000
Size:	8192

Details

Name:	0000000F.00000003.510031687.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000002.00000003.424795213.0000000002F89000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F89000
Size:	86016

Details

Name:	00000000.00000002.817982903.0000000000D3B000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	D3B000
Size:	385024

Signature Hits	Behavior Group	Mitre Attack
Creates a DirectInput object (often for capturing keystrokes)	Key, Mouse, Clipboard, Microphone and Screen Capturing	Input Capture
URLs found in memory or binary data	Networking

Details

Name:	00000012.00000002.550073200.00007FF5C88E3000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C88E3000
Size:	24576

Details

Name:	0000000F.00000003.499430361.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000003.497708509.00000000006C9000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C9000
Size:	4096

Details

Name:	0000000C.00000002.498857645.0000000004D50000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4D50000
Size:	4096

Details

Name:	00000004.00000002.521388560.0000000002AD8000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AD8000
Size:	8192

Details

Name:	0000000F.00000003.514704275.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000004.00000000.306042937.0000000002BF8000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BF8000
Size:	16384

Details

Name:	0000001A.00000002.638789648.00007FF5882FE000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5882FE000
Size:	28672

Details

Name:	00000005.00000002.494866628.0000000002BDB000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BDB000
Size:	36864

Details

Name:	0000000C.00000003.479217555.00000000030E7000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30E7000
Size:	4096

Details

Name:	00000000.00000002.817382329.00000000003ED000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3ED000
Size:	12288

Details

Name:	0000000F.00000000.494646528.0000000000180000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	180000
Size:	8192

Details

Name:	00000003.00000003.634177156.0000000002F99000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F99000
Size:	4096

Details

Name:	0000000F.00000003.505213152.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000003.507036820.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000003.502803521.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000003.514851337.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.478884099.00000000050C2000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50C2000
Size:	4096

Details

Name:	0000001A.00000002.637016321.000000469347C000.00000004.00000010.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	469347C000
Size:	16384

Details

Name:	0000000C.00000002.499441567.000000007F5A0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F5A0000
Size:	12288

Details

Name:	0000001A.00000002.638039251.00007FF587C08000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF587C08000
Size:	8192

Details

Name:	0000000C.00000003.479375411.00000000030E7000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30E7000
Size:	4096

Details

Name:	0000000F.00000003.503518869.00000000049A2000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	49A2000
Size:	4096

Details

Name:	00000002.00000000.473083157.0000000000D70000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	D70000
Size:	4096

Details

Name:	00000002.00000000.472985734.00000000009CB000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	9CB000
Size:	20480

Details

Name:	00000004.00000000.491842181.0000000004CCD000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	4CCD000
Size:	12288

Details

Name:	00000002.00000003.459898112.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	0000000C.00000003.479654048.00000000030ED000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30ED000
Size:	4096

Details

Name:	0000000C.00000003.492418296.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000C.00000003.478496004.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	32768

Details

Name:	00000000.00000002.819677010.000000006E9C6000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E9C6000
Size:	40960

Details

Name:	00000003.00000003.439200567.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	0000000F.00000003.505095176.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000004.00000003.459498023.0000000005120000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5120000
Size:	4096

Details

Name:	0000000C.00000002.499065247.0000000005058000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5058000
Size:	77824

Details

Name:	0000000C.00000003.492400159.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000003.00000003.440607373.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	0000000F.00000003.496920686.0000000000739000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	739000
Size:	4096

Details

Name:	00000009.00000002.772569028.00007FF5732B4000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5732B4000
Size:	20480

Details

Name:	0000000C.00000003.486519084.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000000.00000003.775531261.0000000003EAA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3EAA000
Size:	4096

Details

Name:	0000000C.00000003.483635919.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000003.00000002.818646682.0000000002BD1000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BD1000
Size:	32768

Details

Name:	0000001A.00000002.638454215.00007FF5881E2000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5881E2000
Size:	8192

Details

Name:	0000000C.00000003.479641110.0000000004FF1000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FF1000
Size:	4096

Details

Name:	00000017.00000002.587209158.00007FF5BE635000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BE635000
Size:	20480

Details

Name:	00000005.00000002.494821766.0000000002BC4000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BC4000
Size:	8192

Details

Name:	0000000C.00000003.492806026.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000003.502937993.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000012.00000002.547215714.0000020022108000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20022108000
Size:	24576

Details

Name:	00000016.00000002.818761458.00007FF5495E9000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5495E9000
Size:	12288

Details

Name:	0000000C.00000003.492763740.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000012.00000002.548702768.00007FF5C87FC000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C87FC000
Size:	4096

Details

Name:	0000000F.00000002.520579184.000000000462B000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	462B000
Size:	8192

Details

Name:	00000002.00000000.473381173.0000000002BEC000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BEC000
Size:	16384

Details

Name:	00000009.00000002.771513626.000002389A715000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2389A715000
Size:	4096

Details

Name:	00000012.00000002.549949786.00007FF5C88BE000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C88BE000
Size:	28672

Details

Name:	0000000C.00000003.482639723.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000003.501239351.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000001A.00000002.637028106.0000004693578000.00000004.00000010.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4693578000
Size:	32768

Details

Name:	0000001A.00000002.638673782.00007FF5882D9000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5882D9000
Size:	8192

Details

Name:	0000000F.00000003.499238814.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000003.00000003.633276995.00000000059F1000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	59F1000
Size:	466944

Details

Name:	00000002.00000003.439167201.0000000002F30000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F30000
Size:	4096

Details

Name:	0000000F.00000003.501785237.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000002.520204371.00000000026B6000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26B6000
Size:	8192

Details

Name:	0000000F.00000003.504592791.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000016.00000000.563475453.00007DF5579C2000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5579C2000
Size:	4096

Details

Name:	00000003.00000003.460098953.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	0000000C.00000002.498803543.0000000003220000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3220000
Size:	73728

Details

Name:	00000005.00000002.494941616.000000000432F000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	432F000
Size:	4096

Details

Name:	00000003.00000002.822592637.000000006EA3E000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6EA3E000
Size:	4096

Details

Name:	0000001A.00000002.638144737.00007FF587F39000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF587F39000
Size:	4096

Details

Name:	0000000F.00000003.500391882.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000002.498979481.000000000500B000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	500B000
Size:	4096

Details

Name:	00000004.00000000.492624404.000000006EA29000.00000040.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page execute and read and write
Base address:	6EA29000
Size:	12288

Details

Name:	0000000F.00000000.495050106.00000000009D5000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	9D5000
Size:	4096

Details

Name:	0000000C.00000002.497832693.0000000002781000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2781000
Size:	20480

Details

Name:	00000003.00000002.817820958.0000000000D70000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	D70000
Size:	16384

Details

Name:	00000010.00000003.505956892.00000286D8E80000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	286D8E80000
Size:	36864

Details

Name:	00000012.00000002.548513324.00007FF5C87E5000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C87E5000
Size:	20480

Details

Name:	0000000C.00000003.491493126.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000002.498516726.0000000002EB0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2EB0000
Size:	16384

Details

Name:	0000000C.00000003.483910929.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000C.00000003.482524227.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000002.520564563.0000000004621000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4621000
Size:	32768

Details

Name:	0000001B.00000002.618124652.000001B9C7940000.00000004.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1B9C7940000
Size:	4096

Details

Name:	00000002.00000000.472607898.00000000049AE000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	49AE000
Size:	8192

Details

Name:	00000017.00000002.586227365.0000006CA2BCB000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6CA2BCB000
Size:	20480

Details

Name:	0000000F.00000003.501042850.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000004.00000000.309894278.000000007F360000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F360000
Size:	4096

Details

Name:	0000001B.00000002.619023832.00007FF5A8E6E000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A8E6E000
Size:	4096

Details

Name:	00000012.00000002.547026307.0000020022055000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20022055000
Size:	106496

Details

Name:	0000001B.00000002.618902417.00007FF5A8E4D000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A8E4D000
Size:	4096

Details

Name:	0000000F.00000003.514373064.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000003.496848216.0000000000744000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	744000
Size:	4096

Details

Name:	00000004.00000000.489359740.0000000002B11000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B11000
Size:	4096

Details

Name:	00000000.00000003.503356986.0000000000DB0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DB0000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000F.00000003.501344504.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000004.00000000.487675591.00000000068AE000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	68AE000
Size:	8192

Details

Name:	00000009.00000003.770940089.000002389AB00000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2389AB00000
Size:	4096

Details

Name:	00000004.00000000.490118499.0000000002FB0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	2FB0000
Size:	4096

Details

Name:	00000000.00000003.596113687.0000000003EAA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3EAA000
Size:	4096

Details

Name:	0000001A.00000002.637937254.00007DF596030000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF596030000
Size:	4096

Details

Name:	0000000F.00000003.501067248.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000003.00000003.495042451.0000000002F85000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F85000
Size:	8192

Details

Name:	0000000C.00000003.485551990.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.482279745.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000016.00000000.563581051.00007FF549D61000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF549D61000
Size:	16384

Details

Name:	00000012.00000002.549652366.00007FF5C8811000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C8811000
Size:	12288

Details

Name:	00000004.00000000.306745234.0000000002E50000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E50000
Size:	102400

Details

Name:	0000000C.00000003.479309767.00000000030FE000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30FE000
Size:	8192

Details

Name:	00000017.00000002.587312511.00007FF5BE6ED000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BE6ED000
Size:	4096

Details

Name:	00000000.00000003.776340813.0000000000E25000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E25000
Size:	4096

Details

Name:	0000000C.00000003.482040671.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000004.00000002.522471455.00000000069E0000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	69E0000
Size:	8192

Details

Name:	0000000C.00000002.498610271.0000000002F40000.00000004.00000020.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2F40000
Size:	16384

Details

Name:	0000000F.00000003.499517209.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000004.00000002.522379547.0000000004D0E000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4D0E000
Size:	8192

Details

Name:	00000003.00000003.495433918.0000000002F8A000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F8A000
Size:	8192

Details

Name:	00000000.00000003.729225219.0000000003E31000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E31000
Size:	458752

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000010.00000002.509999426.00007FF524BDB000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF524BDB000
Size:	8192

Details

Name:	00000005.00000002.494241761.0000000002A25000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A25000
Size:	4096

Details

Name:	0000001A.00000002.638759087.00007FF5882F3000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5882F3000
Size:	12288

Details

Name:	0000000C.00000003.482196718.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000003.505229748.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000F.00000003.502023422.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000001A.00000002.638968810.00007FF5883A9000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5883A9000
Size:	12288

Details

Name:	0000000F.00000003.501211270.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000C.00000003.484461961.0000000005391000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5391000
Size:	8192

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000004.00000000.487711544.00000000069AE000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	69AE000
Size:	8192

Details

Name:	00000002.00000002.501917496.000000007F990000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F990000
Size:	20480

Details

Name:	00000009.00000002.772418435.00007FF573247000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF573247000
Size:	8192

Details

Name:	00000002.00000002.501869779.0000000004E8E000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4E8E000
Size:	8192

Details

Name:	0000000F.00000002.520956085.000000007FEE2000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FEE2000
Size:	4096

Details

Name:	0000001B.00000002.618252640.000001B9C7B60000.00000004.00000040.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1B9C7B60000
Size:	12288

Details

Name:	00000003.00000002.819056007.0000000002F42000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2F42000
Size:	90112

Details

Name:	0000001A.00000002.637900946.000001DD88A00000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD88A00000
Size:	8192

Details

Name:	00000004.00000002.521445729.0000000002B11000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B11000
Size:	4096

Details

Name:	0000000C.00000002.498366704.0000000002D20000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D20000
Size:	8192

Details

Name:	00000004.00000000.487738848.00000000069E3000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	heap private
Protect:	page read and write
Base address:	69E3000
Size:	8192

Details

Name:	0000000C.00000002.498526553.0000000002EC0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2EC0000
Size:	8192

Details

Name:	00000002.00000002.500144684.0000000002AEE000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AEE000
Size:	28672

Details

Name:	00000004.00000000.489849364.0000000002BE6000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BE6000
Size:	12288

Details

Name:	00000004.00000000.489529312.0000000002B56000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B56000
Size:	16384

Details

Name:	00000003.00000003.459496437.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	00000003.00000002.818505953.0000000002B5B000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B5B000
Size:	12288

Details

Name:	00000010.00000002.510165667.00007FF524C71000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF524C71000
Size:	12288

Details

Name:	00000000.00000003.503953695.0000000000DB8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DB8000
Size:	294912

Details

Name:	0000000F.00000003.514534856.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000016.00000002.817391182.00000009AE179000.00000004.00000010.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	9AE179000
Size:	28672

Details

Name:	0000000C.00000003.494433647.0000000005039000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5039000
Size:	36864

Details

Name:	0000001A.00000000.604690300.00007FF5883D1000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5883D1000
Size:	16384

Details

Name:	0000000F.00000003.498347069.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000004.00000002.522585027.000000006E9C1000.00000020.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	6E9C1000
Size:	8192

Details

Name:	00000009.00000002.772590197.00007FF5732BA000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5732BA000
Size:	12288

Details

Name:	0000000C.00000003.480265683.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.483671710.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000000.00000003.502908199.0000000000DB9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DB9000
Size:	4096

Details

Name:	0000000C.00000003.481853245.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000005.00000003.458798086.0000000000920000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	920000
Size:	4096

Details

Name:	0000000C.00000003.483190588.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.492971510.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000C.00000003.493144905.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000002.00000000.473073188.0000000000C80000.00000004.00000020.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	C80000
Size:	20480

Details

Name:	0000000F.00000003.505129581.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000009.00000003.493044780.000002389AB13000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2389AB13000
Size:	20480

Details

Name:	0000000F.00000003.508207100.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000002.00000000.472051045.0000000002AFF000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AFF000
Size:	16384

Details

Name:	00000004.00000002.522572429.000000006E9C0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E9C0000
Size:	4096

Details

Name:	0000000F.00000003.496349736.0000000000721000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	721000
Size:	4096

Details

Name:	00000002.00000003.454673884.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	00000012.00000003.545305497.000002002204B000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2002204B000
Size:	16384

Details

Name:	0000001B.00000002.619140738.00007FF5A8F19000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A8F19000
Size:	12288

Details

Name:	0000000F.00000003.499539714.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	0000000C.00000003.480079812.00000000030BC000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30BC000
Size:	4096

Details

Name:	0000001A.00000002.637857370.000001DD8857F000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD8857F000
Size:	102400

Details

Name:	00000005.00000002.494111160.0000000000DEC000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	DEC000
Size:	4096

Details

Name:	00000004.00000002.522608756.000000006E9C5000.00000004.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6E9C5000
Size:	4096

Details

Name:	00000004.00000000.487335032.0000000003250000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	heap private
Protect:	page read and write
Base address:	3250000
Size:	20480

Details

Name:	00000017.00000000.573519484.00007DF5CC452000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5CC452000
Size:	4096

Details

Name:	0000000C.00000003.479395824.00000000030F9000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30F9000
Size:	4096

Details

Name:	00000003.00000003.494947092.0000000002F59000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F59000
Size:	188416

Details

Name:	00000003.00000003.769085925.0000000002FA0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FA0000
Size:	53248

Details

Name:	00000000.00000002.819324359.00000000036CF000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	36CF000
Size:	4096

Details

Name:	0000000F.00000002.519463404.000000000043E000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	43E000
Size:	8192

Details

Name:	0000000F.00000003.501579021.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000004.00000000.309491309.000000007F352000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F352000
Size:	4096

Details

Name:	00000003.00000003.678181515.0000000002F27000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F27000
Size:	200704

Details

Name:	00000004.00000003.460100693.0000000005120000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5120000
Size:	4096

Details

Name:	0000000C.00000003.480066783.000000000310B000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	310B000
Size:	16384

Details

Name:	00000005.00000002.494365913.0000000002AFF000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AFF000
Size:	16384

Details

Name:	0000000C.00000003.493161304.0000000002F48000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F48000
Size:	4096

Details

Name:	00000012.00000003.545265727.0000020022052000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20022052000
Size:	118784

Details

Name:	0000000C.00000003.479774048.00000000030F3000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30F3000
Size:	4096

Details

Name:	0000000C.00000002.498347607.00000000029B8000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29B8000
Size:	16384

Details

Name:	0000001B.00000002.618391804.000001B9C7BB7000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B9C7BB7000
Size:	4096

Details

Name:	00000002.00000000.471931389.0000000000C80000.00000004.00000020.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	C80000
Size:	20480

Details

Name:	00000003.00000002.821446863.000000000586F000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	586F000
Size:	4096

Details

Name:	0000000C.00000003.478142212.000000000302C000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	302C000
Size:	12288

Details

Name:	00000004.00000002.521289853.0000000000F65000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	F65000
Size:	12288

Details

Name:	00000002.00000003.420990354.0000000000D70000.00000040.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page execute and read and write
Base address:	D70000
Size:	4096

Details

Name:	00000004.00000000.487178488.0000000002F00000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2F00000
Size:	4096

Details

Name:	00000005.00000003.462477742.0000000000930000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	930000
Size:	4096

Details

Name:	00000009.00000002.772620899.00007FF5732C1000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5732C1000
Size:	12288

Details

Name:	0000000F.00000003.502503721.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	0000000F.00000003.502952056.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000004.00000000.489630706.0000000002BBB000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BBB000
Size:	12288

Details

Name:	0000000C.00000003.485470190.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000004.00000002.522022993.00000000031F0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	31F0000
Size:	4096

Details

Name:	0000000F.00000003.503456439.0000000004617000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4617000
Size:	20480

Details

Name:	00000017.00000002.586901210.00007DF5CC450000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5CC450000
Size:	4096

Details

Name:	00000005.00000002.493516866.0000000000830000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	830000
Size:	12288

Details

Name:	00000004.00000000.487352050.000000000325A000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	heap private
Protect:	page read and write
Base address:	325A000
Size:	12288

Details

Name:	0000000C.00000003.483519749.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000000.00000002.818534978.0000000000E30000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	E30000
Size:	36864

Details

Name:	0000000C.00000003.492143313.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000010.00000002.507402554.000000F73857E000.00000004.00000010.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F73857E000
Size:	8192

Details

Name:	00000016.00000002.818793868.00007FF5495EE000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5495EE000
Size:	4096

Details

Name:	00000016.00000002.817529032.0000016F79D20000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	16F79D20000
Size:	12288

Details

Name:	0000000F.00000003.497524494.0000000004659000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4659000
Size:	36864

Details

Name:	0000000F.00000003.499732888.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000010.00000002.507466471.00000286D8D10000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	286D8D10000
Size:	12288

Details

Name:	0000000C.00000003.478853422.00000000050C5000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50C5000
Size:	73728

Details

Name:	0000000C.00000000.475705345.000000007F582000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F582000
Size:	4096

Details

Name:	0000000C.00000003.480155421.000000000308F000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	308F000
Size:	8192

Details

Name:	0000000F.00000003.517621922.0000000004621000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4621000
Size:	32768

Details

Name:	00000002.00000002.500928601.0000000002BD1000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BD1000
Size:	32768

Details

Name:	00000005.00000002.495335413.000000007EEE0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7EEE0000
Size:	20480

Details

Name:	0000000C.00000003.491810778.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000F.00000002.520655100.00000000047F0000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	47F0000
Size:	8192

Details

Name:	00000002.00000003.459428924.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	0000000C.00000003.491676505.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.482141155.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.479052541.000000000310A000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	310A000
Size:	20480

Details

Name:	00000003.00000002.818395629.0000000002B3F000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B3F000
Size:	24576

Details

Name:	0000000C.00000002.498836744.00000000033A0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	33A0000
Size:	4096

Details

Name:	00000017.00000002.586811878.0000023930CD0000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	23930CD0000
Size:	12288

Details

Name:	0000001A.00000003.614014687.000001DD8859D000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD8859D000
Size:	32768

Details

Name:	0000000C.00000003.493234675.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000C.00000003.491547346.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000000.00000003.502811691.0000000000DB8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DB8000
Size:	8192

Details

Name:	0000000C.00000003.479504716.00000000050BC000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50BC000
Size:	12288

Details

Name:	0000000F.00000003.514165165.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000002.00000003.438196523.0000000002F30000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F30000
Size:	4096

Details

Name:	00000000.00000003.500993781.0000000003B10000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3B10000
Size:	4096

Details

Name:	00000004.00000000.489889820.0000000002BF3000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BF3000
Size:	4096

Details

Name:	0000001A.00000003.611854608.000001DD88A02000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1DD88A02000
Size:	4096

Details

Name:	0000000F.00000003.497075135.0000000000733000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	733000
Size:	4096

Details

Name:	0000000C.00000003.492302621.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000017.00000002.587559872.00007FF5BE7D1000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BE7D1000
Size:	32768

Details

Name:	00000002.00000000.472396494.00000000030CF000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	30CF000
Size:	4096

Details

Name:	0000000C.00000003.483642297.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000004.00000001.311602180.000000006E9C0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E9C0000
Size:	4096

Details

Name:	0000000C.00000003.479404001.00000000030FE000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30FE000
Size:	8192

Details

Name:	0000000C.00000003.482682011.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	0000000C.00000003.486632928.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000004.00000000.488660046.000000006EA3F000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	6EA3F000
Size:	16384

Details

Name:	0000000C.00000003.486428195.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	0000000F.00000002.520444785.0000000002788000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2788000
Size:	16384

Details

Name:	00000016.00000002.819099521.00007FF549C83000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF549C83000
Size:	12288

Details

Name:	00000002.00000000.472185158.0000000002BDB000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BDB000
Size:	36864

Details

Name:	00000004.00000000.492245368.000000006E9C1000.00000020.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page execute read
Base address:	6E9C1000
Size:	8192

Details

Name:	0000000C.00000003.492897955.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000000.00000003.596282962.0000000002E7C000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	2E7C000
Size:	471040

Details

Name:	0000000F.00000000.494725657.000000007FEE0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FEE0000
Size:	4096

Details

Name:	00000017.00000002.586988971.00007FF5BDF89000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BDF89000
Size:	16384

Details

Name:	00000002.00000002.500024405.00000000029F1000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29F1000
Size:	36864

Details

Name:	00000010.00000003.507063065.00000286D8E64000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	286D8E64000
Size:	45056

Details

Name:	00000004.00000003.460034567.0000000005120000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5120000
Size:	4096

Details

Name:	0000000C.00000003.483343494.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000004.00000002.521887300.0000000002EF0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2EF0000
Size:	16384

Details

Name:	0000000C.00000002.498064365.00000000028F5000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28F5000
Size:	16384

Details

Name:	00000000.00000003.640725733.0000000000E25000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E25000
Size:	4096

Details

Name:	0000000C.00000003.483468176.0000000002F4E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F4E000
Size:	4096

Details

Name:	00000009.00000002.771266285.000002389A5A0000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2389A5A0000
Size:	102400

Details

Name:	00000003.00000002.818269095.0000000002AFF000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AFF000
Size:	16384

Details

Name:	0000000F.00000003.502822232.0000000000457000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	457000
Size:	4096

Details

Name:	00000000.00000003.501008347.0000000003B10000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3B10000
Size:	4096

Details

Name:	0000000F.00000003.499904166.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000003.00000003.436856435.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Details

Name:	00000005.00000000.319668639.00000000003D0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	3D0000
Size:	102400

Details

Name:	0000000C.00000003.483748061.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000016.00000003.564037952.0000016F79F6C000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16F79F6C000
Size:	8192

Details

Name:	00000002.00000003.462879022.0000000000DC0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DC0000
Size:	4096

Details

Name:	0000000C.00000003.479620196.00000000030FF000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30FF000
Size:	4096

Details

Name:	00000000.00000003.640684881.0000000000E0B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E0B000
Size:	77824

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000C.00000003.491739874.0000000002F47000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2F47000
Size:	4096

Details

Name:	00000005.00000002.494782341.0000000002B70000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B70000
Size:	73728

Details

Name:	0000000C.00000002.499054444.0000000005052000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5052000
Size:	12288

Details

Name:	0000000F.00000003.501985536.000000000045E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	45E000
Size:	4096

Details

Name:	00000003.00000003.441545524.0000000000D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D50000
Size:	4096

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

IOC Report

Files

Processes

URLs

Domains

IPs

Registry

Memdumps