Automated Malware Analysis IOC Report for

Details

Name:	00000003.00000003.434659677.0000000005248000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5248000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.426645252.00000000032C8000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	32C8000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.605746103.0000000002F4F000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	2F4F000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.380332209.0000000000C20000.00000040.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page execute and read and write
Base address:	C20000
Size:	90112

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.426187187.00000000032C8000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	32C8000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.434633677.0000000005248000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5248000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.568413240.0000000004FCD000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4FCD000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.434598624.0000000005248000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5248000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.426401481.00000000032C8000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	32C8000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.434758255.0000000005248000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5248000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.426747563.00000000032C8000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	32C8000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000002.777605528.0000000005248000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5248000
Size:	12288

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.434547635.0000000005248000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5248000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.523878810.00000000050CB000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	50CB000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000002.777329805.0000000004CA9000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4CA9000
Size:	57344

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.561320004.000000000304D000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	304D000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.426551340.00000000032C8000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	32C8000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.473179772.00000000032C8000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	32C8000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.434739154.0000000005248000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5248000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.434822537.0000000005248000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5248000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000006.00000003.377092498.0000000004850000.00000040.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	4850000
Size:	90112

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.516781037.000000000314B000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	314B000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000002.00000003.328484065.0000000000BA0000.00000040.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page execute and read and write
Base address:	BA0000
Size:	90112

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000002.776163743.0000000002ED0000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2ED0000
Size:	462848

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.479800380.0000000005248000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5248000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.328583384.0000000000A70000.00000040.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page execute and read and write
Base address:	A70000
Size:	90112

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000004.00000003.362174537.0000000000F40000.00000040.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	F40000
Size:	90112

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.426290453.00000000032C8000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	32C8000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.613160193.0000000004ECF000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4ECF000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000002.775848283.0000000002D59000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2D59000
Size:	57344

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.426156961.00000000032C8000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	32C8000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.434775608.0000000005248000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5248000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.426664412.00000000032C8000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	32C8000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000002.777454531.000000006EC28000.00000040.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute and read and write
Base address:	6EC28000
Size:	8192

Details

Name:	0000001E.00000002.774918180.00007FF52A793000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52A793000
Size:	12288

Details

Name:	00000021.00000002.718350110.000001BAEF0FC000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF0FC000
Size:	20480

Details

Name:	00000007.00000002.774984040.00007FF58EB48000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58EB48000
Size:	12288

Details

Name:	00000003.00000003.359291900.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000025.00000002.740442066.00007FF4FDAC5000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDAC5000
Size:	12288

Details

Name:	00000002.00000003.358420803.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000003.00000003.343818903.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000009.00000000.384063659.00007DF50B952000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50B952000
Size:	4096

Details

Name:	00000003.00000002.772591310.0000000000AD0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	AD0000
Size:	4096

Details

Name:	00000005.00000002.621892919.00007FF543365000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF543365000
Size:	8192

Details

Name:	00000007.00000002.773940413.00007FF58E6C1000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58E6C1000
Size:	4096

Details

Name:	00000003.00000003.568375650.0000000000CBE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CBE000
Size:	4096

Details

Name:	00000016.00000002.525168066.000000DD0047B000.00000004.00000010.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DD0047B000
Size:	20480

Details

Name:	00000004.00000002.404092879.0000000000FBF000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	FBF000
Size:	4096

Details

Name:	00000003.00000002.772539950.0000000000ABC000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	ABC000
Size:	4096

Details

Name:	00000006.00000003.386203487.0000000004A10000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A10000
Size:	4096

Details

Name:	00000003.00000002.777724351.00000000056D0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	56D0000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000009.00000002.772036782.00000025E5F7D000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	25E5F7D000
Size:	12288

Details

Name:	00000004.00000003.365119998.0000000000FC0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FC0000
Size:	4096

Details

Name:	00000000.00000003.385079961.0000000000BE0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000003.00000002.772127821.0000000000A05000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	A05000
Size:	12288

Details

Name:	00000000.00000003.516147617.0000000000D9B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D9B000
Size:	282624

Details

Name:	0000001E.00000002.773232915.0000017CFF535000.00000004.00000040.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	17CFF535000
Size:	12288

Details

Name:	00000005.00000002.619381500.000001F7935D0000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1F7935D0000
Size:	12288

Details

Name:	00000006.00000002.415602924.0000000002E0C000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E0C000
Size:	4096

Details

Name:	00000004.00000003.403465956.0000000004690000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4690000
Size:	4096

Details

Name:	00000006.00000002.414117956.0000000000FE0000.00000040.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	FE0000
Size:	4096

Details

Name:	00000021.00000002.719157114.00007FF5302D7000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5302D7000
Size:	4096

Details

Name:	00000013.00000000.479540114.0000020E580B0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	20E580B0000
Size:	102400

Details

Name:	00000021.00000003.698925257.000001BAEF988000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF988000
Size:	4096

Details

Name:	00000000.00000003.648927334.00000000040E1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	40E1000
Size:	462848

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.385483167.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	0000000B.00000002.416775035.000001C93E1E0000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C93E1E0000
Size:	4096

Details

Name:	00000009.00000002.775303091.00007DF50B970000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50B970000
Size:	12288

Details

Name:	00000002.00000003.353798730.0000000000C30000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C30000
Size:	4096

Details

Name:	00000002.00000003.393361532.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000009.00000002.775416856.00007FF4F5833000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5833000
Size:	8192

Details

Name:	00000003.00000002.776393331.0000000002D5A000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D5A000
Size:	36864

Details

Name:	00000006.00000002.414136191.0000000002BE3000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BE3000
Size:	4096

Details

Name:	00000005.00000002.620178403.000001F798EE2000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798EE2000
Size:	36864

Details

Name:	00000013.00000002.494580626.00007FF586C89000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586C89000
Size:	20480

Details

Name:	00000005.00000002.619303564.000000E3F4D79000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	E3F4D79000
Size:	28672

Details

Name:	00000005.00000002.621997655.00007FF5433FB000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5433FB000
Size:	8192

Details

Name:	00000003.00000003.360095031.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000003.00000002.773317264.0000000000C2C000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	C2C000
Size:	4096

Details

Name:	00000000.00000003.385650412.0000000000BE0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	0000000A.00000000.392075628.00007FF5CC92F000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC92F000
Size:	20480

Details

Name:	00000003.00000003.356076465.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000003.00000003.744634338.0000000000CAF000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CAF000
Size:	32768

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000010.00000002.434237186.00007DF4BE660000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4BE660000
Size:	20480

Details

Name:	00000000.00000003.516758728.0000000000E03000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E03000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000002.00000003.385011708.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000013.00000002.494614375.00007FF586D0F000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586D0F000
Size:	8192

Details

Name:	00000013.00000002.494134287.000000A5263FB000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A5263FB000
Size:	20480

Details

Name:	00000016.00000002.525530386.000002112F671000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2112F671000
Size:	49152

Details

Name:	00000021.00000003.681277685.000001BAEFE02000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEFE02000
Size:	114688

Details

Name:	00000002.00000003.347703928.0000000000C30000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C30000
Size:	4096

Details

Name:	00000007.00000002.773342638.000001E0F8A02000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E0F8A02000
Size:	4096

Details

Name:	00000003.00000003.761704387.0000000005758000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5758000
Size:	286720

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000002.620297255.00007DF558D40000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF558D40000
Size:	12288

Details

Name:	00000005.00000002.620441313.00007FF542FAA000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF542FAA000
Size:	20480

Details

Name:	00000023.00000002.688648587.00007DF5E0E50000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E0E50000
Size:	12288

Details

Name:	00000021.00000002.719241971.00007FF530320000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF530320000
Size:	4096

Details

Name:	00000007.00000002.775301409.00007FF58EB74000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58EB74000
Size:	4096

Details

Name:	00000000.00000003.385415631.0000000000BE0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000016.00000002.525246299.000002112F4A0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2112F4A0000
Size:	102400

Details

Name:	00000009.00000002.776623578.00007FF4F605D000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F605D000
Size:	4096

Details

Name:	00000000.00000003.383320758.0000000000BE0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000004.00000003.393688258.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000010.00000002.434058800.0000019870413000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	19870413000
Size:	86016

Details

Name:	00000007.00000002.772331516.000001E0F8140000.00000004.00000020.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1E0F8140000
Size:	8192

Details

Name:	00000010.00000002.434916476.00007FF5AAE66000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AAE66000
Size:	16384

Details

Name:	0000001E.00000002.774427530.00007FF52A044000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52A044000
Size:	4096

Details

Name:	00000006.00000002.415800651.0000000004A00000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4A00000
Size:	4096

Details

Name:	00000021.00000002.719258275.00007FF53036D000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53036D000
Size:	16384

Details

Name:	0000000A.00000002.773959462.00007DF4E00F0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4E00F0000
Size:	20480

Details

Name:	00000000.00000002.777016352.000000006EB90000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6EB90000
Size:	4096

Details

Name:	00000021.00000002.718881319.00007DF545EC2000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF545EC2000
Size:	4096

Details

Name:	00000021.00000002.717833673.000001BAEEFC0000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1BAEEFC0000
Size:	4096

Details

Name:	00000009.00000002.776380487.00007FF4F6018000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F6018000
Size:	12288

Details

Name:	00000005.00000002.620268196.00007DF558D22000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF558D22000
Size:	4096

Details

Name:	00000002.00000003.394071233.0000000000C97000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C97000
Size:	4096

Details

Name:	00000006.00000002.415862589.000000007F320000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F320000
Size:	4096

Details

Name:	00000013.00000002.494626332.00007FF586D1B000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586D1B000
Size:	8192

Details

Name:	00000005.00000002.620958191.00007FF5431FC000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5431FC000
Size:	20480

Details

Name:	0000000A.00000002.772849601.000001996AFD0000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1996AFD0000
Size:	4096

Details

Name:	0000000D.00000002.774785564.00007FF519639000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF519639000
Size:	20480

Details

Name:	00000009.00000002.775664597.00007FF4F5DF2000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5DF2000
Size:	12288

Details

Name:	00000010.00000002.433772343.0000000C2487F000.00000004.00000010.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	C2487F000
Size:	4096

Details

Name:	00000021.00000002.718601009.000001BAEF900000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF900000
Size:	106496

Details

Name:	0000000B.00000003.416530059.000001C93E256000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C93E256000
Size:	4096

Details

Name:	00000002.00000003.356813664.0000000000C30000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C30000
Size:	4096

Details

Name:	00000006.00000002.414287172.0000000002CFD000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CFD000
Size:	4096

Details

Name:	00000000.00000003.424397898.0000000000DA1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DA1000
Size:	233472

Details

Name:	00000013.00000002.494553050.00007FF586C68000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586C68000
Size:	49152

Details

Name:	00000002.00000003.361401081.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000003.00000002.776070144.0000000002C44000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C44000
Size:	20480

Details

Name:	00000000.00000002.772162786.0000000000C00000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	C00000
Size:	4096

Details

Name:	00000002.00000003.365152105.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000021.00000003.705966102.000001BAEF988000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF988000
Size:	12288

Details

Name:	0000001E.00000000.660378354.00007DF540160000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF540160000
Size:	12288

Details

Name:	00000006.00000002.415630962.0000000003230000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3230000
Size:	65536

Details

Name:	00000003.00000003.434347291.0000000000C56000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C56000
Size:	274432

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000009.00000002.775696069.00007FF4F5DFD000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5DFD000
Size:	16384

Details

Name:	00000021.00000002.718499162.000001BAEF770000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1BAEF770000
Size:	8192

Details

Name:	00000002.00000002.395176373.0000000002D71000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D71000
Size:	12288

Details

Name:	00000009.00000002.776639777.00007FF4F605F000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F605F000
Size:	20480

Details

Name:	00000005.00000003.618865563.000001F798D40000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798D40000
Size:	4096

Details

Name:	0000000B.00000003.416360538.000001C93E26A000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C93E26A000
Size:	40960

Details

Name:	00000025.00000002.739395117.000000A070077000.00000004.00000010.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A070077000
Size:	36864

Details

Name:	00000005.00000002.621451670.00007FF54331C000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54331C000
Size:	4096

Details

Name:	00000006.00000002.414263321.0000000002C42000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C42000
Size:	16384

Details

Name:	00000013.00000002.494128963.000000A5262FF000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A5262FF000
Size:	4096

Details

Name:	00000000.00000003.605689997.0000000002ED1000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	2ED1000
Size:	466944

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000002.404450054.0000000006530000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6530000
Size:	4096

Details

Name:	00000006.00000002.413315335.0000000000D50000.00000004.00000040.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	D50000
Size:	20480

Details

Name:	00000006.00000003.377936410.0000000004A00000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A00000
Size:	4096

Details

Name:	00000007.00000002.773536593.00007DF5A4492000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A4492000
Size:	4096

Details

Name:	00000005.00000003.261643719.000001F798C74000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798C74000
Size:	4096

Details

Name:	00000005.00000002.619255222.000000E3F457B000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	E3F457B000
Size:	20480

Details

Name:	00000025.00000002.739878594.00007DF513470000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF513470000
Size:	12288

Details

Name:	00000021.00000003.703751019.000001BAEF973000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF973000
Size:	77824

Details

Name:	00000004.00000002.404162755.0000000002D06000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D06000
Size:	4096

Details

Name:	00000016.00000000.513324538.00007FF50B0CF000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50B0CF000
Size:	20480

Details

Name:	00000006.00000001.286450659.000000006EB90000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	6EB90000
Size:	4096

Details

Name:	00000003.00000002.776822631.00000000031B0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	31B0000
Size:	4096

Details

Name:	00000002.00000003.389499410.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000002.00000003.389767396.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000005.00000002.619542285.000001F79368C000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F79368C000
Size:	4096

Details

Name:	00000016.00000002.525910515.00007FF50AF1F000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50AF1F000
Size:	20480

Details

Name:	00000003.00000002.776728501.0000000002E17000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E17000
Size:	16384

Details

Name:	00000006.00000002.413812565.0000000000D90000.00000004.00000020.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	D90000
Size:	32768

Details

Name:	0000000D.00000003.398044463.000002C79EBF0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C79EBF0000
Size:	4096

Details

Name:	00000005.00000000.260035197.000001F793580000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F793580000
Size:	102400

Details

Name:	00000021.00000002.718338962.000001BAEF0F9000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF0F9000
Size:	8192

Details

Name:	00000013.00000002.494451683.00007FF586828000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586828000
Size:	4096

Details

Name:	00000021.00000003.698852513.000001BAEF96F000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF96F000
Size:	90112

Details

Name:	00000021.00000003.679192565.000001BAEF988000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF988000
Size:	49152

Details

Name:	00000002.00000003.361668995.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000005.00000002.619424021.000001F793613000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F793613000
Size:	86016

Details

Name:	0000000A.00000002.774866570.00007FF5CC804000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC804000
Size:	4096

Details

Name:	00000009.00000002.772013455.00000025E5E7E000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	25E5E7E000
Size:	8192

Details

Name:	00000003.00000003.761326690.00000000056D1000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	56D1000
Size:	290816

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000003.618874745.000001F798D50000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798D50000
Size:	4096

Details

Name:	00000003.00000000.247190501.000000007FAB2000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FAB2000
Size:	4096

Details

Name:	00000005.00000000.260048784.00007DF558D20000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF558D20000
Size:	4096

Details

Name:	0000000A.00000002.773446144.000001996B077000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1996B077000
Size:	24576

Details

Name:	00000021.00000002.717574681.00000034B2DAB000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	34B2DAB000
Size:	20480

Details

Name:	00000025.00000002.740428077.00007FF4FDAAA000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDAAA000
Size:	16384

Details

Name:	00000016.00000002.525702085.00007DF5209E0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5209E0000
Size:	12288

Details

Name:	00000013.00000002.494520584.00007FF586C43000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586C43000
Size:	4096

Details

Name:	00000003.00000002.776123958.0000000002CF6000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CF6000
Size:	12288

Details

Name:	0000001E.00000002.772800097.0000017CFF371000.00000004.00000020.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	17CFF371000
Size:	339968

Details

Name:	0000001E.00000002.773015214.0000017CFF3C9000.00000004.00000020.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	17CFF3C9000
Size:	28672

Details

Name:	00000005.00000002.619752083.000001F793E15000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F793E15000
Size:	4096

Details

Name:	00000004.00000002.404363286.00000000044B4000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	44B4000
Size:	4096

Details

Name:	00000005.00000002.619604258.000001F7936AE000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F7936AE000
Size:	57344

Details

Name:	00000006.00000003.378618699.0000000004A10000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A10000
Size:	4096

Details

Name:	00000010.00000002.434029403.00000198703D0000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	198703D0000
Size:	4096

Details

Name:	00000003.00000000.247155119.0000000000830000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	830000
Size:	102400

Details

Name:	00000009.00000002.776541539.00007FF4F6044000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F6044000
Size:	4096

Details

Name:	00000009.00000002.776416949.00007FF4F6026000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F6026000
Size:	16384

Details

Name:	00000006.00000002.415483065.0000000002D8D000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D8D000
Size:	8192

Details

Name:	00000016.00000000.513266207.00007DF5209D2000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5209D2000
Size:	4096

Details

Name:	00000004.00000002.403847034.00000000005BB000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5BB000
Size:	20480

Details

Name:	00000003.00000003.358219873.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	0000000D.00000002.773377161.000002C79F250000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C79F250000
Size:	4096

Details

Name:	00000000.00000002.771877215.0000000000800000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	800000
Size:	102400

Details

Name:	00000009.00000002.776441195.00007FF4F602B000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F602B000
Size:	8192

Details

Name:	00000000.00000002.777002748.00000000040E7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	40E7000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000025.00000002.739732342.0000027D23108000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	27D23108000
Size:	24576

Details

Name:	0000000D.00000002.772922001.000002C79EC40000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C79EC40000
Size:	94208

Details

Name:	0000001E.00000003.675827084.0000017CFF4F0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	17CFF4F0000
Size:	4096

Details

Name:	00000006.00000002.415669624.000000000484E000.00000004.00000010.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	484E000
Size:	8192

Details

Name:	00000013.00000002.494332122.0000020E58400000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	20E58400000
Size:	4096

Details

Name:	0000000A.00000002.772889769.000001996B002000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1996B002000
Size:	65536

Details

Name:	00000023.00000002.688774773.00007FF5CB4A5000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CB4A5000
Size:	12288

Details

Name:	00000002.00000003.379567395.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000003.00000003.478553171.0000000000C56000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C56000
Size:	307200

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000021.00000003.687103090.000001BAEF988000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF988000
Size:	45056

Details

Name:	00000021.00000002.719411642.00007FF53041F000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53041F000
Size:	20480

Details

Name:	00000021.00000002.719377956.00007FF5303BE000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5303BE000
Size:	4096

Details

Name:	00000003.00000003.701238376.0000000000CB8000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CB8000
Size:	28672

Details

Name:	00000021.00000003.698353396.000001BAEF96E000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF96E000
Size:	94208

Details

Name:	00000006.00000002.413486998.0000000000D57000.00000004.00000040.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	D57000
Size:	12288

Details

Name:	00000004.00000003.385614965.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000002.00000003.349712714.0000000000C30000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C30000
Size:	4096

Details

Name:	00000006.00000002.415619172.0000000003030000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3030000
Size:	32768

Details

Name:	00000006.00000003.377479792.0000000000DDE000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DDE000
Size:	32768

Details

Name:	00000005.00000003.263210864.000001F798D90000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798D90000
Size:	4096

Details

Name:	00000000.00000002.776767966.0000000003A1F000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3A1F000
Size:	4096

Details

Name:	0000000B.00000002.416939104.000001C93E27A000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C93E27A000
Size:	4096

Details

Name:	00000002.00000002.394943301.0000000002C1D000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C1D000
Size:	8192

Details

Name:	00000021.00000003.700165647.000001BAEF9AD000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF9AD000
Size:	212992

Details

Name:	00000000.00000003.392481847.0000000000BE0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	0000000A.00000000.392046265.00007DF5E2230000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E2230000
Size:	4096

Details

Name:	00000004.00000003.387082358.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000004.00000002.404103895.0000000000FD0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FD0000
Size:	4096

Details

Name:	00000016.00000002.525416945.000002112F63C000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2112F63C000
Size:	57344

Details

Name:	00000013.00000002.494620079.00007FF586D16000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586D16000
Size:	16384

Details

Name:	00000003.00000002.777151062.0000000004770000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4770000
Size:	8192

Details

Name:	0000000B.00000002.417210247.00007FF5D4B94000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D4B94000
Size:	4096

Details

Name:	0000000A.00000002.774946377.00007FF5CC827000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC827000
Size:	4096

Details

Name:	00000002.00000003.353178423.0000000000C30000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C30000
Size:	4096

Details

Name:	00000002.00000003.354903855.0000000000C30000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C30000
Size:	4096

Details

Name:	00000003.00000002.773395105.0000000000C38000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	C38000
Size:	409600

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.386291122.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000003.00000002.777166515.00000000047BD000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	47BD000
Size:	12288

Details

Name:	00000009.00000002.775079248.00007DF409820000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF409820000
Size:	20480

Details

Name:	00000006.00000003.382701312.0000000004A10000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A10000
Size:	4096

Details

Name:	00000016.00000003.524919979.000002112F651000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2112F651000
Size:	126976

Details

Name:	00000021.00000003.700096778.000001BAEFE02000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEFE02000
Size:	159744

Details

Name:	00000010.00000000.420680567.0000019870350000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	19870350000
Size:	102400

Details

Name:	00000007.00000002.773176852.000001E0F8313000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E0F8313000
Size:	20480

Details

Name:	00000021.00000002.717743318.00000034B39F8000.00000004.00000010.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	34B39F8000
Size:	32768

Details

Name:	00000006.00000002.413233642.0000000000D40000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	D40000
Size:	4096

Details

Name:	0000001E.00000002.774672696.00007FF52A687000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52A687000
Size:	12288

Details

Name:	00000002.00000003.358956491.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000006.00000003.382433717.0000000004A10000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A10000
Size:	4096

Details

Name:	00000003.00000003.358755906.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000021.00000003.702504972.000001BAEF99C000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF99C000
Size:	397312

Details

Name:	00000021.00000003.682155504.000001BAEF999000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF999000
Size:	4096

Details

Name:	00000005.00000002.620157981.000001F798EDB000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798EDB000
Size:	4096

Details

Name:	00000021.00000002.717727796.00000034B38FA000.00000004.00000010.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	34B38FA000
Size:	24576

Details

Name:	00000021.00000003.694287462.000001BAEF973000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF973000
Size:	61440

Details

Name:	00000013.00000002.494532209.00007FF586C57000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586C57000
Size:	8192

Details

Name:	00000002.00000003.366223776.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000009.00000002.775834607.00007FF4F5EDE000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5EDE000
Size:	8192

Details

Name:	00000003.00000003.478800834.0000000000CA1000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CA1000
Size:	4096

Details

Name:	00000003.00000003.385078960.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	0000000B.00000000.393967227.000001C93DFC0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1C93DFC0000
Size:	102400

Details

Name:	00000010.00000002.434908949.00007FF5AAE5F000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AAE5F000
Size:	8192

Details

Name:	00000000.00000003.424947179.0000000000DA1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DA1000
Size:	253952

Details

Name:	00000009.00000002.775730115.00007FF4F5E6D000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5E6D000
Size:	12288

Details

Name:	00000025.00000002.739538822.0000027D22F50000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	27D22F50000
Size:	4096

Details

Name:	00000013.00000002.494169936.0000020E580B0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	20E580B0000
Size:	102400

Details

Name:	00000002.00000003.362740760.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000003.00000002.776845687.00000000031C0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	31C0000
Size:	319488

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	0000000D.00000002.774875017.00007FF51964A000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51964A000
Size:	16384

Details

Name:	00000004.00000003.386118349.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	0000000B.00000002.416763081.000001C93E010000.00000004.00000020.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1C93E010000
Size:	8192

Details

Name:	00000021.00000003.689201822.000001BAEF96F000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF96F000
Size:	16384

Details

Name:	00000006.00000000.281063015.0000000002E17000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E17000
Size:	16384

Details

Name:	00000004.00000002.404495682.000000007FC70000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FC70000
Size:	4096

Details

Name:	00000002.00000003.347971528.0000000000C30000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C30000
Size:	4096

Details

Name:	00000005.00000003.615673621.000001F7990C0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F7990C0000
Size:	4096

Details

Name:	00000010.00000002.433625017.0000000C2447E000.00000004.00000010.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	C2447E000
Size:	8192

Details

Name:	00000021.00000002.718859055.00007DF443D90000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF443D90000
Size:	20480

Details

Name:	00000002.00000002.394894347.0000000000FCD000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	FCD000
Size:	12288

Details

Name:	00000016.00000002.525929559.00007FF50AF44000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50AF44000
Size:	16384

Details

Name:	00000002.00000002.395709119.000000007F590000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F590000
Size:	12288

Details

Name:	00000003.00000003.380390144.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000005.00000002.621935408.00007FF54337A000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54337A000
Size:	16384

Details

Name:	0000001E.00000002.772365924.0000017CFF210000.00000004.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	17CFF210000
Size:	4096

Details

Name:	00000003.00000002.777786190.00000000057D0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	57D0000
Size:	4096

Details

Name:	00000006.00000003.383772833.0000000004A10000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A10000
Size:	4096

Details

Name:	0000000B.00000002.416892329.000001C93E26F000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C93E26F000
Size:	20480

Details

Name:	00000003.00000003.478807763.0000000000CA4000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CA4000
Size:	16384

Details

Name:	00000007.00000002.773648096.00007FF58E3D4000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58E3D4000
Size:	8192

Details

Name:	00000003.00000000.247198648.000000007FAC0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FAC0000
Size:	12288

Details

Name:	00000002.00000003.365688107.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000005.00000003.617665219.000001F798C70000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798C70000
Size:	4096

Details

Name:	00000000.00000000.245292575.000000007F2D2000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F2D2000
Size:	4096

Details

Name:	00000006.00000002.414001144.0000000000DC8000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	DC8000
Size:	69632

Details

Name:	0000001E.00000002.774747712.00007FF52A75C000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52A75C000
Size:	12288

Details

Name:	00000009.00000002.776228507.00007FF4F5F8D000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5F8D000
Size:	28672

Details

Name:	00000006.00000002.415265185.0000000002D7C000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D7C000
Size:	32768

Details

Name:	00000000.00000003.424340991.0000000000D9C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D9C000
Size:	12288

Details

Name:	00000010.00000002.434875399.00007FF5AADE3000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AADE3000
Size:	12288

Details

Name:	00000021.00000003.696588130.000001BAEF973000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF973000
Size:	4096

Details

Name:	00000016.00000002.525323809.000002112F600000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2112F600000
Size:	4096

Details

Name:	00000007.00000002.773233765.000001E0F86D0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E0F86D0000
Size:	12288

Details

Name:	00000007.00000002.774721949.00007FF58EABD000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58EABD000
Size:	28672

Details

Name:	00000005.00000003.261498660.000001F798C30000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798C30000
Size:	28672

Details

Name:	00000003.00000003.387460246.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000013.00000002.494351473.0000020E58780000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	20E58780000
Size:	4096

Details

Name:	00000004.00000003.403642982.0000000000877000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	877000
Size:	4096

Details

Name:	0000000A.00000002.774786941.00007FF5CC6F6000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC6F6000
Size:	4096

Details

Name:	00000016.00000002.526150668.00007FF50B0BB000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50B0BB000
Size:	8192

Details

Name:	00000009.00000002.773697608.00000165BA2CC000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	165BA2CC000
Size:	102400

Details

Name:	00000010.00000002.433970288.0000019870370000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	19870370000
Size:	12288

Details

Name:	00000003.00000002.772346346.0000000000AB0000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	AB0000
Size:	4096

Details

Name:	00000016.00000002.525901756.00007FF50AEE3000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50AEE3000
Size:	4096

Details

Name:	00000003.00000002.777069475.00000000046CB000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	46CB000
Size:	20480

Details

Name:	00000003.00000003.745909030.00000000057D1000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57D1000
Size:	962560

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000003.398050168.000002C79EBF0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C79EBF0000
Size:	4096

Details

Name:	00000010.00000000.420705897.00007DF5C0792000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5C0792000
Size:	4096

Details

Name:	00000021.00000003.705744354.000001BAEF99E000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF99E000
Size:	53248

Details

Name:	00000003.00000003.342952299.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000003.00000003.356880475.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000021.00000003.693228929.000001BAEF9B0000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF9B0000
Size:	147456

Details

Name:	00000006.00000002.412789882.0000000000C5A000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C5A000
Size:	24576

Details

Name:	00000000.00000002.772696715.0000000000D1B000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	D1B000
Size:	49152

Details

Name:	00000003.00000003.377677841.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000000.00000001.290871266.000000006EB90000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	6EB90000
Size:	4096

Details

Name:	00000005.00000002.619681558.000001F793AD0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F793AD0000
Size:	12288

Details

Name:	00000023.00000003.688041799.000002AF48300000.00000004.00000001.sdmp
TargetID:	35
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AF48300000
Size:	57344

Details

Name:	00000013.00000002.494485193.00007FF586B3E000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586B3E000
Size:	4096

Details

Name:	00000023.00000002.688754568.00007FF5CB48A000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CB48A000
Size:	16384

Details

Name:	00000021.00000002.719779041.00007FF5305AD000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5305AD000
Size:	16384

Details

Name:	0000000A.00000002.774967730.00007FF5CC838000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC838000
Size:	4096

Details

Name:	00000009.00000002.772503447.00000165BA1D0000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	165BA1D0000
Size:	4096

Details

Name:	00000005.00000002.621395061.00007FF543312000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF543312000
Size:	16384

Details

Name:	00000006.00000003.377584801.0000000000DC9000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DC9000
Size:	16384

Details

Name:	00000003.00000003.523799914.0000000000CB4000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CB4000
Size:	45056

Details

Name:	00000009.00000002.773597419.00000165BA2C1000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	165BA2C1000
Size:	12288

Details

Name:	00000006.00000003.393757540.00000000049C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	49C0000
Size:	4096

Details

Name:	00000004.00000002.404191517.0000000002D21000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D21000
Size:	20480

Details

Name:	00000006.00000003.381364067.0000000004A10000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A10000
Size:	4096

Details

Name:	00000004.00000002.404269956.0000000002D79000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D79000
Size:	8192

Details

Name:	00000006.00000002.414106300.0000000000FDD000.00000004.00000010.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	FDD000
Size:	12288

Details

Name:	00000013.00000002.494467338.00007FF586AED000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586AED000
Size:	16384

Details

Name:	00000002.00000003.379160209.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000002.00000003.394075743.0000000000C7A000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C7A000
Size:	28672

Details

Name:	00000025.00000000.727557198.00007DF513470000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF513470000
Size:	12288

Details

Name:	00000003.00000003.656672113.0000000000CAF000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CAF000
Size:	57344

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000B.00000003.416416830.000001C93E260000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C93E260000
Size:	28672

Details

Name:	00000005.00000003.618921648.000001F798C50000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798C50000
Size:	4096

Details

Name:	00000021.00000000.674439010.00007DF545EC2000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF545EC2000
Size:	4096

Details

Name:	00000010.00000002.434858013.00007FF5AADD9000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AADD9000
Size:	20480

Details

Name:	00000004.00000003.387624998.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	0000001E.00000000.660458580.00007FF52A84F000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52A84F000
Size:	20480

Details

Name:	0000000B.00000002.417012920.000001C93E780000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1C93E780000
Size:	4096

Details

Name:	00000013.00000002.494473600.00007FF586B13000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586B13000
Size:	4096

Details

Name:	00000005.00000003.616235486.000001F798D20000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798D20000
Size:	4096

Details

Name:	0000000B.00000002.417142623.00007FF5D4AE5000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D4AE5000
Size:	8192

Details

Name:	00000005.00000002.619988316.000001F798E61000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798E61000
Size:	147456

Details

Name:	00000021.00000003.694400155.000001BAEF993000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF993000
Size:	16384

Details

Name:	0000000D.00000002.774537315.00007FF51960D000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51960D000
Size:	16384

Details

Name:	00000016.00000002.525291007.000002112F4F0000.00000004.00000020.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2112F4F0000
Size:	8192

Details

Name:	00000021.00000002.717668885.00000034B3577000.00000004.00000010.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	34B3577000
Size:	36864

Details

Name:	00000003.00000002.775778841.0000000002BE3000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BE3000
Size:	12288

Details

Name:	00000013.00000002.494478644.00007FF586B1E000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586B1E000
Size:	12288

Details

Name:	00000005.00000002.620581558.00007FF543123000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF543123000
Size:	4096

Details

Name:	00000004.00000002.404251589.0000000002D6B000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D6B000
Size:	8192

Details

Name:	00000013.00000003.493910325.0000020E5827E000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20E5827E000
Size:	36864

Details

Name:	00000007.00000002.775144001.00007FF58EB5B000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58EB5B000
Size:	4096

Details

Name:	00000004.00000003.385414202.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	0000000A.00000002.772191420.00000030D7DFF000.00000004.00000010.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	30D7DFF000
Size:	4096

Details

Name:	00000003.00000003.392828793.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	0000001E.00000002.771788879.0000005B61E7B000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5B61E7B000
Size:	20480

Details

Name:	00000003.00000003.383349962.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000003.00000002.777440005.0000000004E50000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4E50000
Size:	471040

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000016.00000002.525143227.000000DCFFF8E000.00000004.00000010.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DCFFF8E000
Size:	8192

Details

Name:	00000003.00000002.776512439.0000000002D79000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D79000
Size:	8192

Details

Name:	0000000B.00000003.416396273.000001C93E267000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C93E267000
Size:	12288

Details

Name:	00000013.00000002.494437299.00007FF586813000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586813000
Size:	20480

Details

Name:	00000003.00000002.778142964.000000006ECC6000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6ECC6000
Size:	20480

Details

Name:	00000005.00000003.262561795.000001F798D00000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798D00000
Size:	4096

Details

Name:	00000000.00000003.387458989.0000000000BE0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000007.00000002.775378247.00007FF58EB7E000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58EB7E000
Size:	16384

Details

Name:	00000004.00000002.404308068.0000000002DA4000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DA4000
Size:	4096

Details

Name:	00000002.00000003.358688892.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000016.00000002.525919062.00007FF50AF25000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50AF25000
Size:	24576

Details

Name:	00000000.00000002.776033763.0000000002DD8000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2DD8000
Size:	4096

Details

Name:	00000006.00000002.415793156.00000000049FE000.00000004.00000010.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	49FE000
Size:	8192

Details

Name:	0000001E.00000002.773205044.0000017CFF530000.00000004.00000040.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	17CFF530000
Size:	12288

Details

Name:	00000007.00000002.771808648.000000CCBC9CF000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	CCBC9CF000
Size:	4096

Details

Name:	00000003.00000002.776541024.0000000002D7C000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D7C000
Size:	32768

Details

Name:	0000000D.00000002.773077145.000002C79EC5C000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C79EC5C000
Size:	36864

Details

Name:	00000025.00000002.740610461.00007FF4FDB5F000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDB5F000
Size:	20480

Details

Name:	00000000.00000003.424868823.0000000000D9C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D9C000
Size:	16384

Details

Name:	00000002.00000002.395142451.0000000002D50000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D50000
Size:	32768

Details

Name:	0000001E.00000002.773066510.0000017CFF4E0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17CFF4E0000
Size:	4096

Details

Name:	00000009.00000002.775645314.00007FF4F5D38000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5D38000
Size:	4096

Details

Name:	00000003.00000003.390138186.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000009.00000002.771809908.00000025E57FC000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	25E57FC000
Size:	16384

Details

Name:	00000000.00000002.777090123.000000006EB96000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6EB96000
Size:	40960

Details

Name:	00000021.00000003.677609960.000001BAEF0AA000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF0AA000
Size:	16384

Details

Name:	00000009.00000002.775788598.00007FF4F5E82000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5E82000
Size:	4096

Details

Name:	0000000D.00000002.774748634.00007FF519635000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF519635000
Size:	8192

Details

Name:	00000006.00000003.394709200.00000000049C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	49C0000
Size:	4096

Details

Name:	00000004.00000002.404167372.0000000002D08000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D08000
Size:	12288

Details

Name:	00000002.00000003.352626725.0000000000C30000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C30000
Size:	4096

Details

Name:	00000000.00000002.771750665.00000000005F0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	5F0000
Size:	16384

Details

Name:	00000004.00000003.389876827.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000025.00000002.739817128.00007DF513450000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF513450000
Size:	4096

Details

Name:	00000002.00000003.355741774.0000000000C30000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C30000
Size:	4096

Details

Name:	00000009.00000002.772800760.00000165BA225000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	165BA225000
Size:	12288

Details

Name:	00000013.00000000.479597465.00007DF59C660000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF59C660000
Size:	12288

Details

Name:	00000004.00000003.400754557.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000004.00000003.382945510.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000006.00000002.415393231.0000000002D85000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D85000
Size:	12288

Details

Name:	00000000.00000003.424444940.0000000000DD9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DD9000
Size:	4096

Details

Name:	0000000A.00000002.775159801.00007FF5CC873000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC873000
Size:	12288

Details

Name:	00000005.00000002.619275493.000000E3F477F000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	E3F477F000
Size:	4096

Details

Name:	0000001E.00000002.774247907.00007FF529F98000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF529F98000
Size:	16384

Details

Name:	00000000.00000003.424436287.0000000000DDB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DDB000
Size:	12288

Details

Name:	00000021.00000003.679744218.000001BAEF962000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF962000
Size:	4096

Details

Name:	0000000D.00000002.775207061.00007FF5196EB000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5196EB000
Size:	8192

Details

Name:	00000006.00000003.377556373.0000000000DCD000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DCD000
Size:	69632

Details

Name:	0000000A.00000002.772720062.000001996AE00000.00000004.00000020.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1996AE00000
Size:	8192

Details

Name:	00000002.00000003.361133267.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000010.00000002.434971057.00007FF5AAE9F000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AAE9F000
Size:	20480

Details

Name:	00000021.00000002.719502392.00007FF530490000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF530490000
Size:	8192

Details

Name:	00000005.00000002.621480719.00007FF543323000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF543323000
Size:	4096

Details

Name:	00000005.00000003.261637299.000001F798C70000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798C70000
Size:	4096

Details

Name:	00000006.00000002.415876900.000000007F330000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F330000
Size:	4096

Details

Name:	00000000.00000003.383607699.0000000000BE0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000021.00000003.700256434.000001BAEFE6A000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEFE6A000
Size:	425984

Details

Name:	00000006.00000002.415829366.0000000006714000.00000004.00000040.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	6714000
Size:	4096

Details

Name:	00000007.00000002.772905915.000001E0F8240000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E0F8240000
Size:	86016

Details

Name:	0000000A.00000002.775180195.00007FF5CC87A000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC87A000
Size:	16384

Details

Name:	00000006.00000003.381900633.0000000004A10000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A10000
Size:	4096

Details

Name:	00000006.00000003.410629328.0000000004890000.00000004.00000040.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4890000
Size:	8192

Details

Name:	00000005.00000002.619325356.000001F793560000.00000004.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1F793560000
Size:	4096

Details

Name:	0000000A.00000002.775050736.00007FF5CC848000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC848000
Size:	49152

Details

Name:	00000023.00000002.688502118.000002AF482E6000.00000004.00000020.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2AF482E6000
Size:	65536

Details

Name:	0000000D.00000002.773696057.00007DF52F002000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF52F002000
Size:	4096

Details

Name:	00000004.00000003.392381813.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000004.00000003.374028643.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000021.00000002.718988969.00007FF52FDD6000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52FDD6000
Size:	16384

Details

Name:	00000006.00000002.415807533.0000000004E7E000.00000004.00000010.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4E7E000
Size:	8192

Details

Name:	00000025.00000002.739954859.00007FF4FD366000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FD366000
Size:	16384

Details

Name:	00000004.00000002.404208222.0000000002D39000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D39000
Size:	8192

Details

Name:	00000007.00000002.774481316.00007FF58EA87000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58EA87000
Size:	4096

Details

Name:	00000005.00000002.620488773.00007FF542FD3000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF542FD3000
Size:	8192

Details

Name:	00000003.00000002.772397063.0000000000AB1000.00000020.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	AB1000
Size:	45056

Details

Name:	00000003.00000003.393292695.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000002.00000003.383203474.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000000.00000002.777432054.000000006EC25000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6EC25000
Size:	8192

Details

Name:	00000010.00000000.420774429.00007FF5AAE9F000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AAE9F000
Size:	20480

Details

Name:	00000002.00000000.246703244.000000007F570000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F570000
Size:	4096

Details

Name:	00000021.00000002.718464583.000001BAEF650000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1BAEF650000
Size:	4096

Details

Name:	00000003.00000002.777903684.000000006EBA0000.00000020.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	6EBA0000
Size:	331776

Details

Name:	0000001E.00000002.775216966.00007FF52A84F000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52A84F000
Size:	20480

Details

Name:	00000002.00000003.394052250.0000000000C8B000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C8B000
Size:	45056

Details

Name:	00000000.00000002.772266037.0000000000C0C000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	C0C000
Size:	4096

Details

Name:	00000009.00000002.772307309.00000165BA0A0000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	165BA0A0000
Size:	12288

Details

Name:	00000003.00000003.760857405.00000000057D1000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57D1000
Size:	339968

Details

Name:	0000000B.00000002.416728009.000001C93DFB0000.00000004.00000040.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1C93DFB0000
Size:	4096

Details

Name:	00000021.00000003.679168919.000001BAEF994000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF994000
Size:	45056

Details

Name:	00000021.00000002.719435210.00007FF530425000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF530425000
Size:	24576

Details

Name:	00000005.00000002.619263969.000000E3F467A000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	E3F467A000
Size:	24576

Details

Name:	00000006.00000002.415869213.000000007F322000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F322000
Size:	4096

Details

Name:	00000025.00000003.739167649.0000027D2304F000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	27D2304F000
Size:	114688

Details

Name:	00000000.00000002.771859166.00000000007D1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7D1000
Size:	4096

Details

Name:	00000006.00000003.379240402.0000000004A10000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A10000
Size:	4096

Details

Name:	00000004.00000003.394358893.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000006.00000002.414127031.0000000000FF0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000009.00000002.775452138.00007FF4F58A4000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F58A4000
Size:	8192

Details

Name:	0000000B.00000002.416833616.000001C93E23C000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C93E23C000
Size:	16384

Details

Name:	00000009.00000000.384038488.00007DF50B950000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50B950000
Size:	4096

Details

Name:	00000006.00000003.385997103.0000000000DC4000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DC4000
Size:	86016

Details

Name:	00000010.00000002.434958784.00007FF5AAE8E000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AAE8E000
Size:	16384

Details

Name:	00000005.00000002.620058427.000001F798E98000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798E98000
Size:	4096

Details

Name:	00000010.00000002.434226613.0000019870A50000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	19870A50000
Size:	4096

Details

Name:	00000021.00000002.718770406.000001BAEF971000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF971000
Size:	86016

Details

Name:	0000000A.00000002.772233211.00000030D7EFE000.00000004.00000010.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	30D7EFE000
Size:	8192

Details

Name:	00000002.00000003.392152662.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000003.00000003.388458273.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000006.00000000.282499187.000000007F330000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F330000
Size:	4096

Details

Name:	00000016.00000002.525151501.000000DD0027E000.00000004.00000010.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DD0027E000
Size:	8192

Details

Name:	00000021.00000003.701362531.000001BAEF99E000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF99E000
Size:	4096

Details

Name:	00000007.00000002.774174936.00007FF58E907000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58E907000
Size:	4096

Details

Name:	00000010.00000002.434524102.00007FF5AAC6E000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AAC6E000
Size:	12288

Details

Name:	00000025.00000002.739806234.00007DF411320000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF411320000
Size:	20480

Details

Name:	00000000.00000002.772350976.0000000000C10000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	C10000
Size:	16384

Details

Name:	00000005.00000002.620068379.000001F798E9A000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798E9A000
Size:	61440

Details

Name:	00000002.00000002.395069066.0000000002D31000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D31000
Size:	4096

Details

Name:	00000021.00000002.717639506.00000034B3378000.00000004.00000010.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	34B3378000
Size:	32768

Details

Name:	00000004.00000002.404145163.0000000002C42000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C42000
Size:	16384

Details

Name:	00000004.00000003.372955916.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000002.00000002.394699028.0000000000BB0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	BB0000
Size:	12288

Details

Name:	00000009.00000002.772145373.00000165BA070000.00000004.00000040.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	165BA070000
Size:	4096

Details

Name:	0000000B.00000002.417038835.00007DF5EA4B0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EA4B0000
Size:	4096

Details

Name:	00000016.00000002.525597993.000002112F800000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2112F800000
Size:	4096

Details

Name:	00000002.00000000.246706807.000000007F572000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F572000
Size:	4096

Details

Name:	00000002.00000002.394919606.0000000002BE8000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BE8000
Size:	8192

Details

Name:	00000000.00000002.777123696.000000006EBA0000.00000020.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	6EBA0000
Size:	331776

Details

Name:	00000005.00000003.283766809.000001F798F02000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798F02000
Size:	8192

Details

Name:	00000023.00000002.688437461.000002AF48200000.00000004.00000001.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2AF48200000
Size:	8192

Details

Name:	00000002.00000003.387557004.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000023.00000003.688002378.000002AF48300000.00000004.00000001.sdmp
TargetID:	35
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AF48300000
Size:	57344

Details

Name:	00000003.00000002.772249799.0000000000A60000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A60000
Size:	4096

Details

Name:	0000000B.00000002.416768522.000001C93E0F0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1C93E0F0000
Size:	16384

Details

Name:	00000000.00000000.245266605.0000000000800000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	800000
Size:	102400

Details

Name:	00000003.00000002.775992075.0000000002C2C000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C2C000
Size:	12288

Details

Name:	00000003.00000002.777673198.0000000005640000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	5640000
Size:	65536

Details

Name:	00000021.00000003.696799708.000001BAEF9BC000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF9BC000
Size:	73728

Details

Name:	00000021.00000002.718394854.000001BAEF113000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF113000
Size:	8192

Details

Name:	0000001E.00000002.774443022.00007FF52A049000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52A049000
Size:	4096

Details

Name:	00000021.00000003.702818060.000001BAEFF63000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEFF63000
Size:	397312

Details

Name:	00000002.00000003.360061564.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000021.00000002.717919702.000001BAEF029000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF029000
Size:	65536

Details

Name:	00000016.00000002.525225433.000002112F480000.00000004.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2112F480000
Size:	4096

Details

Name:	00000002.00000002.394384183.0000000000A20000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A20000
Size:	4096

Details

Name:	00000004.00000003.395468692.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000021.00000003.689242179.000001BAEF98A000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF98A000
Size:	12288

Details

Name:	00000005.00000002.620530579.00007FF5430EF000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5430EF000
Size:	16384

Details

Name:	00000007.00000003.409427503.000001E0F826C000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E0F826C000
Size:	32768

Details

Name:	00000013.00000002.494317436.0000020E58308000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20E58308000
Size:	24576

Details

Name:	00000004.00000002.403938872.000000000086C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	86C000
Size:	40960

Details

Name:	0000000B.00000002.417114047.00007FF5D4ABC000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D4ABC000
Size:	45056

Details

Name:	00000004.00000002.403811618.0000000000510000.00000004.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	510000
Size:	4096

Details

Name:	00000003.00000003.523788696.0000000000CAF000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CAF000
Size:	8192

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000002.772671113.0000000000B60000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	B60000
Size:	20480

Details

Name:	00000006.00000003.380557718.0000000004A10000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A10000
Size:	4096

Details

Name:	00000021.00000002.719703696.00007FF530588000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF530588000
Size:	12288

Details

Name:	00000009.00000002.776287376.00007FF4F5F99000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5F99000
Size:	20480

Details

Name:	00000005.00000002.619282866.000000E3F487B000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	E3F487B000
Size:	20480

Details

Name:	00000021.00000002.717771362.000001BAEEF70000.00000004.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1BAEEF70000
Size:	4096

Details

Name:	00000021.00000002.718259683.000001BAEF0CD000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF0CD000
Size:	40960

Details

Name:	00000002.00000002.395371763.0000000002E17000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E17000
Size:	16384

Details

Name:	00000007.00000002.774462852.00007FF58EA7C000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58EA7C000
Size:	4096

Details

Name:	00000004.00000002.403871127.0000000000789000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	789000
Size:	12288

Details

Name:	00000000.00000003.393051617.0000000000BE0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000021.00000003.690994375.000001BAEF99D000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF99D000
Size:	32768

Details

Name:	00000002.00000003.382399726.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000002.00000002.395364901.0000000002E0C000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E0C000
Size:	4096

Details

Name:	00000002.00000002.394798504.0000000000C5A000.00000004.00000020.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	C5A000
Size:	118784

Details

Name:	00000002.00000003.386485725.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000010.00000002.434201301.00000198706D0000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	198706D0000
Size:	4096

Details

Name:	00000004.00000000.259992920.0000000000520000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	520000
Size:	102400

Details

Name:	00000003.00000002.777830489.000000006EB91000.00000020.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	6EB91000
Size:	8192

Details

Name:	00000005.00000003.616625186.000001F798D00000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798D00000
Size:	4096

Details

Name:	00000000.00000000.245285107.000000007F2D0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F2D0000
Size:	4096

Details

Name:	00000021.00000003.700144451.000001BAEF99C000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF99C000
Size:	61440

Details

Name:	0000001E.00000002.772415056.0000017CFF220000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17CFF220000
Size:	4096

Details

Name:	0000001E.00000000.660328215.00007DF540142000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF540142000
Size:	4096

Details

Name:	00000004.00000003.386558665.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000002.00000003.354636012.0000000000C30000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C30000
Size:	4096

Details

Name:	00000005.00000003.618089694.000001F798B20000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798B20000
Size:	4096

Details

Name:	00000004.00000003.385314140.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	0000001E.00000002.774227573.00007FF51E4FE000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51E4FE000
Size:	8192

Details

Name:	00000025.00000000.727541607.00007DF513460000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF513460000
Size:	4096

Details

Name:	00000003.00000002.778076614.000000006EC25000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6EC25000
Size:	8192

Details

Name:	00000000.00000002.776103361.0000000002EAE000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2EAE000
Size:	8192

Details

Name:	00000003.00000003.701193785.0000000000CAF000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CAF000
Size:	28672

Details

Name:	00000016.00000002.526135573.00007FF50B0AD000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50B0AD000
Size:	16384

Details

Name:	00000021.00000003.700049806.000001BAEF9AD000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF9AD000
Size:	176128

Details

Name:	00000002.00000002.395294570.0000000002D8D000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D8D000
Size:	8192

Details

Name:	00000010.00000002.434660739.00007FF5AADA7000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AADA7000
Size:	8192

Details

Name:	00000004.00000003.401158548.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000010.00000002.434209498.00000198708D0000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	198708D0000
Size:	12288

Details

Name:	00000002.00000003.385246140.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000021.00000000.674457440.00007DF545ED0000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF545ED0000
Size:	4096

Details

Name:	00000006.00000003.385481093.0000000004A10000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A10000
Size:	4096

Details

Name:	00000006.00000003.410828131.0000000000DBA000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DBA000
Size:	28672

Details

Name:	0000000D.00000002.771876636.000000EAF0AFC000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	EAF0AFC000
Size:	16384

Details

Name:	00000025.00000002.739974206.00007FF4FD36C000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FD36C000
Size:	4096

Details

Name:	00000003.00000003.433190530.0000000000C5D000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C5D000
Size:	245760

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000021.00000003.681501589.000001BAEFE03000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEFE03000
Size:	225280

Details

Name:	0000000B.00000002.417044047.00007DF5EA4B2000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EA4B2000
Size:	4096

Details

Name:	00000007.00000002.774900590.00007FF58EADA000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58EADA000
Size:	16384

Details

Name:	00000021.00000002.719145882.00007FF5302CD000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5302CD000
Size:	8192

Details

Name:	00000021.00000002.718736153.000001BAEF957000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF957000
Size:	102400

Details

Name:	0000000A.00000002.773516404.000001996B102000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1996B102000
Size:	32768

Details

Name:	0000001E.00000002.774786629.00007FF52A77D000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52A77D000
Size:	28672

Details

Name:	00000023.00000002.688874300.00007FF5CB52B000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CB52B000
Size:	8192

Details

Name:	00000023.00000002.688189519.000000DD1391E000.00000004.00000010.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DD1391E000
Size:	8192

Details

Name:	00000025.00000000.727595873.00007FF4FDB5F000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDB5F000
Size:	20480

Details

Name:	0000000D.00000000.397301110.00007DF52EFF0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF52EFF0000
Size:	4096

Details

Name:	0000000A.00000002.773475973.000001996B07E000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1996B07E000
Size:	4096

Details

Name:	00000021.00000003.687131969.000001BAEF9B5000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF9B5000
Size:	65536

Details

Name:	0000000A.00000002.772091174.00000030D7BFD000.00000004.00000010.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	30D7BFD000
Size:	12288

Details

Name:	0000001E.00000000.660231913.0000017CFF230000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	17CFF230000
Size:	102400

Details

Name:	00000003.00000003.360362925.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000010.00000002.434365306.00007FF5AA969000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AA969000
Size:	32768

Details

Name:	00000002.00000002.394957682.0000000002CF7000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CF7000
Size:	8192

Details

Name:	00000013.00000002.494574768.00007FF586C85000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586C85000
Size:	8192

Details

Name:	00000007.00000002.771993849.000001E0F80D0000.00000004.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1E0F80D0000
Size:	4096

Details

Name:	00000006.00000002.414837381.0000000002D5A000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D5A000
Size:	36864

Details

Name:	00000003.00000003.387082766.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000006.00000002.415099384.0000000002D75000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D75000
Size:	8192

Details

Name:	00000000.00000002.772295285.0000000000C0D000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	C0D000
Size:	8192

Details

Name:	00000025.00000002.740262652.00007FF4FDA53000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDA53000
Size:	4096

Details

Name:	00000003.00000003.379017633.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	0000000D.00000002.772013953.000000EAF0FFE000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	EAF0FFE000
Size:	8192

Details

Name:	00000023.00000000.676438104.00007DF5E0E30000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E0E30000
Size:	4096

Details

Name:	00000004.00000002.404130469.0000000002C11000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C11000
Size:	32768

Details

Name:	00000002.00000002.395699082.000000007F582000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F582000
Size:	4096

Details

Name:	00000002.00000003.347435677.0000000000C30000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C30000
Size:	4096

Details

Name:	00000021.00000002.719641639.00007FF530509000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF530509000
Size:	20480

Details

Name:	00000013.00000002.494587967.00007FF586C93000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586C93000
Size:	12288

Details

Name:	00000013.00000002.494141308.000000A5264F7000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A5264F7000
Size:	36864

Details

Name:	00000002.00000002.394390987.0000000000A40000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	A40000
Size:	16384

Details

Name:	00000021.00000002.717759679.00000034B3AFE000.00000004.00000010.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	34B3AFE000
Size:	8192

Details

Name:	00000005.00000002.619588737.000001F7936A1000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F7936A1000
Size:	40960

Details

Name:	00000003.00000002.776452297.0000000002D6B000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D6B000
Size:	8192

Details

Name:	0000000A.00000002.774907943.00007FF5CC81C000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC81C000
Size:	4096

Details

Name:	00000003.00000002.777860517.000000006EB95000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6EB95000
Size:	4096

Details

Name:	00000007.00000002.771734812.000000CCBC94B000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	CCBC94B000
Size:	20480

Details

Name:	0000000A.00000002.775461320.00007FF5CC90D000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC90D000
Size:	16384

Details

Name:	00000004.00000003.403289429.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000009.00000000.384095938.00007DF50B970000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50B970000
Size:	12288

Details

Name:	00000007.00000000.280338486.00007DF5A4480000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A4480000
Size:	4096

Details

Name:	00000002.00000003.393056487.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000009.00000002.771922800.00000025E5BFC000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	25E5BFC000
Size:	16384

Details

Name:	00000025.00000002.739547627.0000027D23000000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	27D23000000
Size:	73728

Details

Name:	00000005.00000003.619006442.000001F793F04000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F793F04000
Size:	16384

Details

Name:	00000005.00000002.620245944.00007DF456BF0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF456BF0000
Size:	20480

Details

Name:	00000000.00000002.776971090.0000000004060000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4060000
Size:	4096

Details

Name:	00000009.00000002.776048209.00007FF4F5F53000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5F53000
Size:	4096

Details

Name:	00000004.00000002.404016503.0000000000B20000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	B20000
Size:	20480

Details

Name:	00000004.00000002.404262710.0000000002D75000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D75000
Size:	8192

Details

Name:	0000001E.00000002.772217647.0000017C80000000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C80000000
Size:	49152

Details

Name:	00000005.00000000.260068584.00007DF558D40000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF558D40000
Size:	12288

Details

Name:	0000000D.00000002.773525604.00007DF42CEC0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF42CEC0000
Size:	20480

Details

Name:	00000000.00000002.777487730.000000006ECC6000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6ECC6000
Size:	20480

Details

Name:	0000000A.00000002.773418258.000001996B075000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1996B075000
Size:	4096

Details

Name:	00000013.00000002.494357133.0000020E58860000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20E58860000
Size:	4096

Details

Name:	00000005.00000002.619571950.000001F793696000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F793696000
Size:	40960

Details

Name:	00000000.00000002.776984161.00000000040E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	40E0000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000003.261508904.000001F798C38000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798C38000
Size:	16384

Details

Name:	00000013.00000002.494326119.0000020E58313000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20E58313000
Size:	12288

Details

Name:	00000004.00000003.397314681.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000006.00000002.415686591.00000000048DE000.00000004.00000010.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	48DE000
Size:	8192

Details

Name:	00000010.00000002.433789497.0000000C248FF000.00000004.00000010.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	C248FF000
Size:	4096

Details

Name:	00000010.00000002.434898489.00007FF5AAE58000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AAE58000
Size:	12288

Details

Name:	00000005.00000002.620358808.00007FF542AF6000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF542AF6000
Size:	24576

Details

Name:	0000001E.00000002.774151826.00007DF540160000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF540160000
Size:	12288

Details

Name:	00000006.00000002.414396684.0000000002D1D000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D1D000
Size:	8192

Details

Name:	00000004.00000003.396576601.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	0000001E.00000002.773985782.00007DF540142000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF540142000
Size:	4096

Details

Name:	00000002.00000002.394242806.0000000000710000.00000004.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	710000
Size:	4096

Details

Name:	00000000.00000002.772069775.0000000000BB0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	BB0000
Size:	8192

Details

Name:	00000003.00000003.613042070.0000000005862000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5862000
Size:	462848

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000021.00000002.718086141.000001BAEF08C000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF08C000
Size:	196608

Details

Name:	00000021.00000000.674426073.00007DF545EC0000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF545EC0000
Size:	4096

Details

Name:	00000005.00000003.263192159.000001F798D90000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798D90000
Size:	4096

Details

Name:	0000001E.00000002.774722636.00007FF52A754000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52A754000
Size:	4096

Details

Name:	00000021.00000002.719087329.00007FF530254000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF530254000
Size:	12288

Details

Name:	0000000B.00000000.393987243.00007DF5EA4B0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EA4B0000
Size:	4096

Details

Name:	00000000.00000002.775685712.0000000002920000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2920000
Size:	8192

Details

Name:	00000003.00000002.771721901.000000000067D000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	67D000
Size:	8192

Details

Name:	00000003.00000002.776474730.0000000002D71000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D71000
Size:	12288

Details

Name:	00000021.00000002.717869515.000001BAEF000000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF000000
Size:	73728

Details

Name:	00000003.00000003.365018100.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000005.00000002.620379310.00007FF542BD9000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF542BD9000
Size:	12288

Details

Name:	00000003.00000002.772698524.0000000000B67000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	B67000
Size:	12288

Details

Name:	00000006.00000002.415496953.0000000002D9D000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D9D000
Size:	8192

Details

Name:	00000003.00000002.776714879.0000000002E0C000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E0C000
Size:	20480

Details

Name:	0000000D.00000002.775043044.00007FF5196CB000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5196CB000
Size:	4096

Details

Name:	00000003.00000002.778036583.000000006EC1D000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6EC1D000
Size:	4096

Details

Name:	00000005.00000002.621971279.00007FF5433EF000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5433EF000
Size:	20480

Details

Name:	00000003.00000002.772200447.0000000000A30000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	A30000
Size:	16384

Details

Name:	00000004.00000002.404157909.0000000002CFD000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CFD000
Size:	4096

Details

Name:	00000002.00000003.390403755.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000000.00000003.392705141.0000000000BE0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000003.00000002.777100795.00000000046E0000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	46E0000
Size:	4096

Details

Name:	00000013.00000002.494193862.0000020E58100000.00000004.00000020.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	20E58100000
Size:	8192

Details

Name:	00000023.00000002.688302950.000002AF480D0000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AF480D0000
Size:	102400

Details

Name:	00000002.00000003.381596160.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	0000001E.00000002.774493535.00007FF52A5DA000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52A5DA000
Size:	8192

Details

Name:	00000003.00000002.772069852.0000000000A00000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	A00000
Size:	16384

Details

Name:	00000002.00000002.395314600.0000000002DAD000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DAD000
Size:	73728

Details

Name:	00000000.00000003.422643822.00000000029D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	29D0000
Size:	4096

Details

Name:	00000002.00000003.344522088.0000000000C20000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C20000
Size:	4096

Details

Name:	00000010.00000002.434250881.00007DF5C0792000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5C0792000
Size:	4096

Details

Name:	00000006.00000002.415849527.000000007F220000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F220000
Size:	20480

Details

Name:	00000007.00000002.775453366.00007FF58EB8D000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58EB8D000
Size:	4096

Details

Name:	00000025.00000002.740108585.00007FF4FD92E000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FD92E000
Size:	12288

Details

Name:	0000000B.00000002.417223704.00007FF5D4B9E000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D4B9E000
Size:	16384

Details

Name:	0000000A.00000003.393127677.000001996B06F000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1996B06F000
Size:	20480

Details

Name:	0000000B.00000000.394018941.00007FF5D4BAF000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D4BAF000
Size:	20480

Details

Name:	00000000.00000002.774813261.00000000012A0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	12A0000
Size:	319488

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	00000005.00000002.619563320.000001F793692000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F793692000
Size:	4096

Details

Name:	0000001E.00000002.775027844.00007FF52A816000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52A816000
Size:	12288

Details

Name:	00000002.00000002.395429036.000000000468E000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	468E000
Size:	8192

Details

Name:	00000021.00000003.691007405.000001BAEF9AE000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF9AE000
Size:	49152

Details

Name:	00000023.00000002.688833507.00007FF5CB510000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CB510000
Size:	36864

Details

Name:	0000000B.00000003.416428137.000001C93E247000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C93E247000
Size:	53248

Details

Name:	00000003.00000002.776650757.0000000002DAD000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DAD000
Size:	73728

Details

Name:	00000003.00000003.380122414.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	0000000A.00000002.774844799.00007FF5CC7AE000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC7AE000
Size:	8192

Details

Name:	00000025.00000002.740240354.00007FF4FD9D4000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FD9D4000
Size:	16384

Details

Name:	00000006.00000002.415836191.0000000006A60000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6A60000
Size:	4096

Details

Name:	0000000D.00000002.772259234.000002C79EB60000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C79EB60000
Size:	12288

Details

Name:	00000002.00000003.380257090.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000016.00000002.525961672.00007FF50AFD7000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50AFD7000
Size:	8192

Details

Name:	00000021.00000003.717358222.000001BAEF04B000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF04B000
Size:	8192

Details

Name:	00000021.00000003.705976363.000001BAEF98C000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF98C000
Size:	4096

Details

Name:	00000005.00000002.620454075.00007FF542FB0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF542FB0000
Size:	16384

Details

Name:	00000021.00000002.719752814.00007FF5305A0000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5305A0000
Size:	36864

Details

Name:	00000002.00000002.395152615.0000000002D5A000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D5A000
Size:	36864

Details

Name:	00000003.00000003.364482256.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000003.00000001.247579889.000000006EB90000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	6EB90000
Size:	4096

Details

Name:	00000003.00000003.359023847.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000021.00000002.717964160.000001BAEF04E000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF04E000
Size:	4096

Details

Name:	00000009.00000002.774437505.00000165BA790000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	165BA790000
Size:	16384

Details

Name:	0000000B.00000002.417170148.00007FF5D4B15000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D4B15000
Size:	12288

Details

Name:	0000001E.00000003.661330526.0000017CFF3AD000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	17CFF3AD000
Size:	8192

Details

Name:	0000000B.00000003.416449051.000001C93E25D000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C93E25D000
Size:	12288

Details

Name:	00000010.00000003.433286854.000001987047E000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1987047E000
Size:	40960

Details

Name:	00000002.00000003.355473242.0000000000C30000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C30000
Size:	4096

Details

Name:	00000003.00000002.778279738.000000007FAC0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FAC0000
Size:	12288

Details

Name:	0000001E.00000002.773149189.0000017CFF520000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17CFF520000
Size:	65536

Details

Name:	00000002.00000003.342595120.0000000000C20000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C20000
Size:	4096

Details

Name:	00000021.00000003.717249401.000001BAEF062000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF062000
Size:	53248

Details

Name:	00000006.00000003.390700217.00000000049C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	49C0000
Size:	4096

Details

Name:	00000006.00000002.415558016.0000000002DAD000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DAD000
Size:	73728

Details

Name:	00000023.00000002.688565957.000002AF485D0000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AF485D0000
Size:	65536

Details

Name:	00000021.00000003.702252592.000001BAEFE02000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEFE02000
Size:	159744

Details

Name:	00000007.00000002.774834193.00007FF58EAC9000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58EAC9000
Size:	20480

Details

Name:	00000007.00000002.774204316.00007FF58E95E000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58E95E000
Size:	4096

Details

Name:	00000025.00000002.740596367.00007FF4FDB5B000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDB5B000
Size:	4096

Details

Name:	00000023.00000002.688292892.000002AF480B0000.00000004.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2AF480B0000
Size:	4096

Details

Name:	00000016.00000002.525159063.000000DD0037B000.00000004.00000010.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DD0037B000
Size:	20480

Details

Name:	00000009.00000002.776332988.00007FF4F5FAA000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5FAA000
Size:	16384

Details

Name:	00000003.00000002.776154793.0000000002D06000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D06000
Size:	4096

Details

Name:	00000002.00000003.364884251.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000021.00000003.701259435.000001BAEF9A3000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF9A3000
Size:	16384

Details

Name:	00000004.00000002.404219285.0000000002D44000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D44000
Size:	40960

Details

Name:	00000004.00000002.403905022.000000000083A000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	83A000
Size:	114688

Details

Name:	00000003.00000003.478622782.0000000000C38000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C38000
Size:	114688

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000A.00000002.775526706.00007FF5CC91B000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC91B000
Size:	8192

Details

Name:	00000002.00000003.350516940.0000000000C30000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C30000
Size:	4096

Details

Name:	00000003.00000003.357683990.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000004.00000002.404487937.000000007FC62000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FC62000
Size:	4096

Details

Name:	00000013.00000002.494270560.0000020E58256000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20E58256000
Size:	106496

Details

Name:	00000025.00000002.739429833.0000027D22DE0000.00000004.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	27D22DE0000
Size:	4096

Details

Name:	00000021.00000003.698896680.000001BAEF973000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF973000
Size:	73728

Details

Name:	00000005.00000002.620216156.000001F798EFD000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798EFD000
Size:	4096

Details

Name:	0000000D.00000002.772515326.000002C79EC02000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C79EC02000
Size:	65536

Details

Name:	00000000.00000002.772532602.0000000000C65000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	C65000
Size:	16384

Details

Name:	00000003.00000000.247178091.000000007FAA0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FAA0000
Size:	4096

Details

Name:	00000023.00000000.676509900.00007FF5CB53F000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CB53F000
Size:	20480

Details

Name:	00000023.00000002.688848868.00007FF5CB51D000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CB51D000
Size:	16384

Details

Name:	00000013.00000002.494217882.0000020E58213000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20E58213000
Size:	90112

Details

Name:	00000010.00000002.434625319.00007FF5AAD14000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AAD14000
Size:	16384

Details

Name:	0000000D.00000002.773455794.000002C79F402000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C79F402000
Size:	4096

Details

Name:	0000000B.00000000.393990541.00007DF5EA4B2000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EA4B2000
Size:	4096

Details

Name:	00000003.00000003.364214256.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000013.00000002.494661554.00007FF586D3B000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586D3B000
Size:	8192

Details

Name:	00000021.00000002.719324651.00007FF530388000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF530388000
Size:	4096

Details

Name:	00000010.00000002.434141452.0000019870464000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	19870464000
Size:	106496

Details

Name:	00000005.00000003.618845586.000001F794610000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F794610000
Size:	4096

Details

Name:	0000000D.00000002.771977594.000000EAF0D7F000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	EAF0D7F000
Size:	4096

Details

Name:	00000016.00000002.525217643.000000DD007FE000.00000004.00000010.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DD007FE000
Size:	8192

Details

Name:	00000003.00000003.568348279.0000000000C99000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C99000
Size:	8192

Details

Name:	00000004.00000000.262415379.000000007FC60000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FC60000
Size:	4096

Details

Name:	00000003.00000003.567496020.0000000000CB9000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CB9000
Size:	4096

Details

Name:	00000021.00000003.700325705.000001BAEFE02000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEFE02000
Size:	425984

Details

Name:	00000005.00000002.621958738.00007FF5433E8000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5433E8000
Size:	12288

Details

Name:	00000003.00000002.777419444.0000000004E3A000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4E3A000
Size:	24576

Details

Name:	00000021.00000002.719135675.00007FF5302C3000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5302C3000
Size:	4096

Details

Name:	00000003.00000003.331294211.0000000000A80000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A80000
Size:	4096

Details

Name:	00000003.00000002.776012233.0000000002C30000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C30000
Size:	8192

Details

Name:	00000005.00000003.261537707.000001F798C54000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798C54000
Size:	4096

Details

Name:	00000004.00000002.404333049.0000000002E01000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E01000
Size:	8192

Details

Name:	0000000B.00000002.416998264.000001C93E600000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1C93E600000
Size:	12288

Details

Name:	00000021.00000002.718241952.000001BAEF0C7000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF0C7000
Size:	12288

Details

Name:	00000021.00000003.698391726.000001BAEF9A9000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF9A9000
Size:	65536

Details

Name:	00000002.00000002.395211341.0000000002D7C000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D7C000
Size:	32768

Details

Name:	00000002.00000003.381060383.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000005.00000002.619362986.000001F7935A0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F7935A0000
Size:	12288

Details

Name:	0000000A.00000000.392050652.00007DF5E2232000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E2232000
Size:	4096

Details

Name:	00000025.00000002.739333958.000000A06FC7C000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A06FC7C000
Size:	16384

Details

Name:	00000006.00000002.415611042.0000000002E17000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E17000
Size:	16384

Details

Name:	00000005.00000003.619029260.000001F793F13000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F793F13000
Size:	20480

Details

Name:	00000003.00000003.387828472.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000004.00000002.404284228.0000000002D85000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D85000
Size:	12288

Details

Name:	00000005.00000002.620286887.00007DF558D32000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF558D32000
Size:	4096

Details

Name:	00000003.00000003.362573370.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000006.00000002.415784468.00000000049B0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	49B0000
Size:	4096

Details

Name:	00000021.00000002.718319334.000001BAEF0E9000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF0E9000
Size:	61440

Details

Name:	00000003.00000002.777048187.000000000468C000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	468C000
Size:	16384

Details

Name:	00000016.00000002.525843706.00007FF50AD83000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50AD83000
Size:	4096

Details

Name:	00000002.00000003.347167796.0000000000C30000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C30000
Size:	4096

Details

Name:	00000025.00000002.740518071.00007FF4FDB30000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDB30000
Size:	36864

Details

Name:	00000003.00000003.433221923.0000000000C9A000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C9A000
Size:	4096

Details

Name:	00000003.00000002.772555763.0000000000ABD000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	ABD000
Size:	8192

Details

Name:	00000000.00000002.777549942.000000007F2D2000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F2D2000
Size:	4096

Details

Name:	00000010.00000002.434726920.00007FF5AADAC000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AADAC000
Size:	45056

Details

Name:	00000023.00000002.688221356.000000DD13CF9000.00000004.00000010.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DD13CF9000
Size:	28672

Details

Name:	00000000.00000003.386290314.0000000000BE0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	0000000B.00000002.416683580.00000032F70FE000.00000004.00000010.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	32F70FE000
Size:	8192

Details

Name:	00000016.00000002.525209918.000000DD006FF000.00000004.00000010.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DD006FF000
Size:	4096

Details

Name:	0000000B.00000002.416862568.000001C93E25C000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C93E25C000
Size:	4096

Details

Name:	00000006.00000002.413159207.0000000000D20000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	D20000
Size:	16384

Details

Name:	00000025.00000000.727549368.00007DF513462000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF513462000
Size:	4096

Details

Name:	00000003.00000003.433180524.0000000000C59000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C59000
Size:	8192

Details

Name:	00000000.00000003.470824870.0000000000D9C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D9C000
Size:	274432

Details

Name:	00000004.00000002.404120506.0000000002BE8000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BE8000
Size:	8192

Details

Name:	00000021.00000003.703781910.000001BAEF988000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF988000
Size:	49152

Details

Name:	00000000.00000003.424844983.0000000000DDF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DDF000
Size:	4096

Details

Name:	00000016.00000003.524891311.000002112F67D000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2112F67D000
Size:	40960

Details

Name:	00000003.00000002.772171838.0000000000A10000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A10000
Size:	8192

Details

Name:	00000025.00000002.740413676.00007FF4FDAA3000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDAA3000
Size:	12288

Details

Name:	00000003.00000003.612941699.00000000057D1000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57D1000
Size:	901120

Details

Name:	0000001E.00000000.660369968.00007DF540152000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF540152000
Size:	4096

Details

Name:	00000002.00000003.357617099.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000005.00000002.620686738.00007FF5431CD000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5431CD000
Size:	16384

Details

Name:	00000002.00000003.331170359.0000000000C7F000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C7F000
Size:	8192

Details

Name:	00000003.00000003.613096552.0000000004E51000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4E51000
Size:	458752

Details

Name:	00000002.00000003.357885599.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000004.00000002.404338888.0000000002E05000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E05000
Size:	24576

Details

Name:	00000003.00000003.478607192.0000000000C33000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C33000
Size:	12288

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000016.00000002.526024157.00007FF50B005000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50B005000
Size:	8192

Details

Name:	0000000B.00000002.417070308.00007FF5D4383000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D4383000
Size:	4096

Details

Name:	00000016.00000002.526157863.00007FF50B0BE000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50B0BE000
Size:	16384

Details

Name:	00000003.00000003.362271673.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000009.00000000.383913085.00000165BA080000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	165BA080000
Size:	102400

Details

Name:	0000000B.00000002.416756695.000001C93DFF0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1C93DFF0000
Size:	4096

Details

Name:	0000000B.00000002.417164079.00007FF5D4AFA000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D4AFA000
Size:	16384

Details

Name:	00000013.00000000.479563966.00007DF59C640000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF59C640000
Size:	4096

Details

Name:	0000000D.00000002.774076799.00007FF518ECF000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF518ECF000
Size:	12288

Details

Name:	00000021.00000002.719491178.00007FF530487000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF530487000
Size:	4096

Details

Name:	0000000A.00000002.775663763.00007FF5CC92D000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC92D000
Size:	4096

Details

Name:	00000006.00000003.378361410.0000000004A10000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A10000
Size:	4096

Details

Name:	0000001E.00000000.660335183.00007DF540150000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF540150000
Size:	4096

Details

Name:	00000013.00000002.494149704.000000A5265FF000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A5265FF000
Size:	4096

Details

Name:	00000002.00000002.395036486.0000000002D1D000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D1D000
Size:	8192

Details

Name:	00000021.00000002.718376734.000001BAEF108000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF108000
Size:	32768

Details

Name:	00000003.00000003.379821651.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	0000000A.00000002.773264517.000001996B041000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1996B041000
Size:	98304

Details

Name:	00000000.00000002.777028816.000000006EB91000.00000020.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	6EB91000
Size:	8192

Details

Name:	0000000D.00000002.772089833.000002C79EB40000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C79EB40000
Size:	102400

Details

Name:	00000005.00000002.620103846.000001F798EAE000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798EAE000
Size:	81920

Details

Name:	00000013.00000003.493975660.0000020E58249000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20E58249000
Size:	8192

Details

Name:	00000004.00000003.397873931.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000021.00000002.719112389.00007FF530283000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF530283000
Size:	4096

Details

Name:	00000003.00000002.777402700.0000000004DFD000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4DFD000
Size:	12288

Details

Name:	00000006.00000003.393361930.00000000049C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	49C0000
Size:	4096

Details

Name:	00000007.00000003.668269549.000001E0F8271000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E0F8271000
Size:	36864

Details

Name:	00000006.00000003.387626715.00000000049C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	49C0000
Size:	4096

Details

Name:	0000001E.00000002.774537015.00007FF52A65D000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52A65D000
Size:	12288

Details

Name:	00000021.00000002.718890772.00007DF545ED0000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF545ED0000
Size:	4096

Details

Name:	00000000.00000003.561276571.0000000000DEF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DEF000
Size:	20480

Details

Name:	00000021.00000002.718058864.000001BAEF070000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF070000
Size:	110592

Details

Name:	00000016.00000002.525888564.00007FF50AEBE000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50AEBE000
Size:	4096

Details

Name:	0000000D.00000002.773297450.000002C79EED0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C79EED0000
Size:	4096

Details

Name:	00000000.00000002.775728252.000000000296E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	296E000
Size:	8192

Details

Name:	00000010.00000000.420718293.00007DF5C07A2000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5C07A2000
Size:	4096

Details

Name:	00000000.00000002.777579996.000000007F2F0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F2F0000
Size:	12288

Details

Name:	00000013.00000002.494160457.0000020E58090000.00000004.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	20E58090000
Size:	4096

Details

Name:	00000021.00000003.698961122.000001BAEF98A000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF98A000
Size:	12288

Details

Name:	00000005.00000002.619660638.000001F793714000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F793714000
Size:	8192

Details

Name:	00000025.00000002.739368906.000000A06FE7C000.00000004.00000010.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A06FE7C000
Size:	16384

Details

Name:	00000010.00000002.434833378.00007FF5AADCD000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AADCD000
Size:	28672

Details

Name:	00000005.00000002.620236045.000001F798F02000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798F02000
Size:	20480

Details

Name:	00000003.00000002.772013024.00000000008D0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	8D0000
Size:	16384

Details

Name:	00000000.00000002.776936383.0000000003F5D000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3F5D000
Size:	12288

Details

Name:	00000003.00000003.478582894.0000000000C17000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C17000
Size:	49152

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000002.00000003.363544499.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000021.00000003.694345593.000001BAEF988000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF988000
Size:	20480

Details

Name:	00000006.00000002.412688298.0000000000A91000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A91000
Size:	4096

Details

Name:	00000003.00000002.778050511.000000006EC1E000.00000008.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page write copy
Base address:	6EC1E000
Size:	28672

Details

Name:	00000021.00000002.718788384.000001BAEF988000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF988000
Size:	12288

Details

Name:	00000003.00000002.772052007.00000000008E0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	8E0000
Size:	4096

Details

Name:	00000013.00000002.494306386.0000020E58300000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20E58300000
Size:	4096

Details

Name:	00000002.00000002.394967893.0000000002CFD000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CFD000
Size:	4096

Details

Name:	00000004.00000003.372684789.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000021.00000002.719477625.00007FF530480000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF530480000
Size:	20480

Details

Name:	00000021.00000002.717856023.000001BAEEFF0000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1BAEEFF0000
Size:	16384

Details

Name:	00000021.00000000.674357032.000001BAEEF90000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1BAEEF90000
Size:	102400

Details

Name:	00000004.00000003.373760476.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000004.00000002.404003162.0000000000AF0000.00000040.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	AF0000
Size:	4096

Details

Name:	0000000A.00000002.774460718.00007FF5CC62D000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC62D000
Size:	8192

Details

Name:	00000006.00000003.411829400.0000000000DC2000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DC2000
Size:	8192

Details

Name:	00000002.00000003.356277184.0000000000C30000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C30000
Size:	4096

Details

Name:	00000005.00000002.619293494.000000E3F497B000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	E3F497B000
Size:	20480

Details

Name:	00000021.00000002.717781743.000001BAEEF80000.00000004.00000040.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1BAEEF80000
Size:	4096

Details

Name:	00000005.00000002.621105454.00007FF5432DD000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5432DD000
Size:	8192

Details

Name:	00000003.00000003.382997142.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	0000000B.00000002.416855856.000001C93E255000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C93E255000
Size:	4096

Details

Name:	00000006.00000003.377547298.0000000000DC2000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DC2000
Size:	4096

Details

Name:	00000004.00000000.262607423.000000007FC62000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FC62000
Size:	4096

Details

Name:	00000021.00000003.693029563.000001BAEF99D000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF99D000
Size:	147456

Details

Name:	00000006.00000000.278444994.0000000000C00000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	C00000
Size:	102400

Details

Name:	00000000.00000002.776123965.0000000002EB0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2EB0000
Size:	65536

Details

Name:	00000000.00000002.776488024.00000000032C8000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	32C8000
Size:	16384

Details

Name:	00000002.00000002.394842907.0000000000C8D000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C8D000
Size:	36864

Details

Name:	00000023.00000002.688208837.000000DD13C7E000.00000004.00000010.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DD13C7E000
Size:	8192

Details

Name:	00000021.00000003.701249539.000001BAEF99C000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF99C000
Size:	4096

Details

Name:	00000021.00000002.718813034.000001BAEF998000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF998000
Size:	8192

Details

Name:	00000005.00000002.620626996.00007FF543151000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF543151000
Size:	4096

Details

Name:	0000000A.00000002.773674301.000001996B580000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1996B580000
Size:	4096

Details

Name:	00000021.00000002.718832962.000001BAEFE00000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEFE00000
Size:	8192

Details

Name:	0000000D.00000002.775310987.00007FF5196FD000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5196FD000
Size:	4096

Details

Name:	00000009.00000002.772528287.00000165BA200000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	165BA200000
Size:	73728

Details

Name:	00000000.00000003.424999158.0000000000DDA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DDA000
Size:	20480

Details

Name:	0000000B.00000002.416920332.000001C93E275000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C93E275000
Size:	8192

Details

Name:	00000004.00000000.263228902.000000007FC72000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FC72000
Size:	4096

Details

Name:	00000009.00000002.775578867.00007FF4F5BC5000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5BC5000
Size:	4096

Details

Name:	00000004.00000003.392887021.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000005.00000002.619508482.000001F79366C000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F79366C000
Size:	4096

Details

Name:	00000005.00000002.619706590.000001F793C50000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F793C50000
Size:	4096

Details

Name:	00000000.00000002.777570811.000000007F2E2000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F2E2000
Size:	4096

Details

Name:	00000002.00000003.386853969.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000000.00000003.387627354.0000000000BE0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000010.00000002.433647173.0000000C2467B000.00000004.00000010.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	C2467B000
Size:	20480

Details

Name:	00000003.00000003.392153188.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000009.00000002.772068591.00000025E607E000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	25E607E000
Size:	8192

Details

Name:	00000016.00000003.524964645.000002112F64A000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2112F64A000
Size:	8192

Details

Name:	00000006.00000002.412847035.0000000000C9B000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C9B000
Size:	20480

Details

Name:	00000021.00000002.718016610.000001BAEF05C000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF05C000
Size:	24576

Details

Name:	0000001E.00000002.774281811.00007FF529F9F000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF529F9F000
Size:	4096

Details

Name:	00000013.00000002.494456346.00007FF5868F6000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5868F6000
Size:	4096

Details

Name:	00000006.00000002.413006980.0000000000D00000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	D00000
Size:	4096

Details

Name:	00000000.00000003.385315067.0000000000BE0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000003.00000003.393721992.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000002.00000001.247083118.000000006EB90000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	6EB90000
Size:	4096

Details

Name:	00000005.00000002.620092113.000001F798EAA000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798EAA000
Size:	12288

Details

Name:	0000000D.00000000.397312873.00007DF52F000000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF52F000000
Size:	4096

Details

Name:	00000002.00000002.394324539.00000000007C0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7C0000
Size:	16384

Details

Name:	0000000D.00000002.772337564.000002C79EB90000.00000004.00000020.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2C79EB90000
Size:	8192

Details

Name:	0000001E.00000003.661283992.0000017CFF3AD000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	17CFF3AD000
Size:	8192

Details

Name:	00000021.00000003.687074247.000001BAEF9AB000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF9AB000
Size:	90112

Details

Name:	00000006.00000000.282974994.000000007F332000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F332000
Size:	4096

Details

Name:	00000006.00000003.410565880.0000000004A30000.00000004.00000040.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4A30000
Size:	4096

Details

Name:	0000000A.00000002.772758684.000001996AEE0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1996AEE0000
Size:	16384

Details

Name:	00000006.00000002.415586042.0000000002E01000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E01000
Size:	8192

Details

Name:	0000000D.00000002.774176854.00007FF5193B6000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5193B6000
Size:	8192

Details

Name:	00000007.00000002.774309347.00007FF58EA40000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58EA40000
Size:	20480

Details

Name:	00000021.00000003.717343405.000001BAEF04D000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF04D000
Size:	8192

Details

Name:	00000000.00000002.774438095.0000000000F10000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	F10000
Size:	32768

Details

Name:	00000005.00000002.620608946.00007FF543137000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF543137000
Size:	20480

Details

Name:	00000004.00000002.403989422.0000000000ACF000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	ACF000
Size:	4096

Details

Name:	0000001E.00000002.773039957.0000017CFF460000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17CFF460000
Size:	8192

Details

Name:	00000006.00000003.389674273.00000000049C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	49C0000
Size:	4096

Details

Name:	00000005.00000002.619731047.000001F793E00000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F793E00000
Size:	4096

Details

Name:	00000004.00000002.404275645.0000000002D7C000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D7C000
Size:	32768

Details

Name:	00000006.00000003.411731631.0000000000DBA000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DBA000
Size:	28672

Details

Name:	00000004.00000002.404125802.0000000002BF2000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BF2000
Size:	4096

Details

Name:	00000021.00000003.689186431.000001BAEF969000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF969000
Size:	40960

Details

Name:	00000007.00000002.772407189.000001E0F8170000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E0F8170000
Size:	4096

Details

Name:	00000002.00000002.394827793.0000000000C82000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C82000
Size:	32768

Details

Name:	00000003.00000002.776298081.0000000002D39000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D39000
Size:	16384

Details

Name:	00000002.00000003.364080237.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000009.00000002.776603480.00007FF4F605B000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F605B000
Size:	4096

Details

Name:	00000003.00000003.523855242.000000000524B000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	524B000
Size:	8192

Details

Name:	0000000A.00000002.774716255.00007FF5CC6CD000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC6CD000
Size:	16384

Details

Name:	0000000A.00000002.775216928.00007FF5CC895000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC895000
Size:	12288

Details

Name:	0000000D.00000002.774939306.00007FF5196B8000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5196B8000
Size:	12288

Details

Name:	00000004.00000003.401563059.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000002.00000002.395024779.0000000002D11000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D11000
Size:	4096

Details

Name:	00000000.00000002.775611397.00000000028B0000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	28B0000
Size:	4096

Details

Name:	00000003.00000002.776702372.0000000002E05000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E05000
Size:	24576

Details

Name:	0000000D.00000002.774247200.00007FF51949D000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51949D000
Size:	16384

Details

Name:	0000000D.00000002.771947195.000000EAF0CFD000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	EAF0CFD000
Size:	12288

Details

Name:	00000025.00000002.739828232.00007DF513452000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF513452000
Size:	4096

Details

Name:	00000000.00000003.561285622.0000000000E03000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E03000
Size:	4096

Details

Name:	00000009.00000002.771736948.00000025E53AB000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	25E53AB000
Size:	20480

Details

Name:	00000003.00000002.776258129.0000000002D31000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D31000
Size:	4096

Details

Name:	0000000D.00000002.773319971.000002C79F0D0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C79F0D0000
Size:	12288

Details

Name:	00000003.00000003.362841262.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000023.00000002.688480058.000002AF48275000.00000004.00000040.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2AF48275000
Size:	8192

Details

Name:	00000021.00000002.718214968.000001BAEF0BF000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF0BF000
Size:	28672

Details

Name:	00000005.00000002.620466454.00007FF542FB7000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF542FB7000
Size:	4096

Details

Name:	00000016.00000002.525778351.00007FF50A8C3000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50A8C3000
Size:	16384

Details

Name:	00000002.00000002.395670087.000000007F572000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F572000
Size:	4096

Details

Name:	0000000D.00000002.772489937.000002C79EC00000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C79EC00000
Size:	4096

Details

Name:	0000001E.00000002.773527413.0000017CFFF60000.00000002.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	17CFFF60000
Size:	4096

Details

Name:	00000004.00000002.404480684.000000007FC60000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FC60000
Size:	4096

Details

Name:	00000000.00000002.775798863.00000000029E0000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	29E0000
Size:	4096

Details

Name:	00000006.00000002.414682652.0000000002D44000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D44000
Size:	40960

Details

Name:	00000010.00000002.434136049.0000019870460000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	19870460000
Size:	8192

Details

Name:	00000006.00000002.415678011.000000000488D000.00000004.00000010.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	488D000
Size:	12288

Details

Name:	00000021.00000002.719687517.00007FF530535000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF530535000
Size:	12288

Details

Name:	00000025.00000002.740360043.00007FF4FDA8D000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDA8D000
Size:	28672

Details

Name:	00000013.00000002.494204602.0000020E58200000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20E58200000
Size:	73728

Details

Name:	0000000B.00000003.416384227.000001C93E27B000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C93E27B000
Size:	28672

Details

Name:	00000003.00000003.612805896.00000000056D1000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	56D1000
Size:	831488

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000021.00000000.674466865.00007DF545ED2000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF545ED2000
Size:	4096

Details

Name:	00000009.00000002.772341893.00000165BA0B0000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	165BA0B0000
Size:	4096

Details

Name:	00000010.00000002.433616265.0000000C241EE000.00000004.00000010.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	C241EE000
Size:	8192

Details

Name:	00000010.00000002.434274923.00007DF5C07B0000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5C07B0000
Size:	12288

Details

Name:	0000001E.00000002.774324606.00007FF52A011000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52A011000
Size:	8192

Details

Name:	00000003.00000002.772603543.0000000000AE0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	AE0000
Size:	4096

Details

Name:	00000003.00000002.778235078.000000007FAB0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FAB0000
Size:	4096

Details

Name:	00000000.00000002.777411389.000000006EC1E000.00000008.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page write copy
Base address:	6EC1E000
Size:	28672

Details

Name:	00000004.00000003.403689810.000000000086A000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	86A000
Size:	4096

Details

Name:	00000003.00000003.611978525.0000000000CBE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CBE000
Size:	4096

Details

Name:	00000002.00000002.394906793.000000000115C000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	115C000
Size:	12288

Details

Name:	00000000.00000002.776512658.0000000003620000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3620000
Size:	458752

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000002.772572273.0000000000ABF000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	ABF000
Size:	4096

Details

Name:	0000000B.00000002.417049744.00007DF5EA4C0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EA4C0000
Size:	12288

Details

Name:	00000021.00000002.719167607.00007FF5302E0000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5302E0000
Size:	8192

Details

Name:	00000013.00000002.494297465.0000020E58288000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20E58288000
Size:	40960

Details

Name:	00000002.00000000.246710250.000000007F580000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F580000
Size:	4096

Details

Name:	0000000D.00000002.773585354.00007DF52EFF0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF52EFF0000
Size:	4096

Details

Name:	00000009.00000002.773526561.00000165BA2BB000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	165BA2BB000
Size:	4096

Details

Name:	00000009.00000002.772400022.00000165BA1B0000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	165BA1B0000
Size:	16384

Details

Name:	00000002.00000003.345325670.0000000000C30000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C30000
Size:	4096

Details

Name:	00000003.00000002.778216362.000000007FAA2000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FAA2000
Size:	4096

Details

Name:	00000003.00000003.567476625.0000000000CAF000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CAF000
Size:	8192

Details

Name:	00000025.00000002.739449857.0000027D22E00000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27D22E00000
Size:	102400

Details

Name:	00000021.00000003.679208222.000001BAEF9A9000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF9A9000
Size:	49152

Details

Name:	00000005.00000002.621161786.00007FF5432F0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5432F0000
Size:	8192

Details

Name:	00000021.00000002.717821856.000001BAEEFB0000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1BAEEFB0000
Size:	12288

Details

Name:	00000007.00000000.280350471.00007DF5A4482000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A4482000
Size:	4096

Details

Name:	00000016.00000002.525263919.000002112F4C0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2112F4C0000
Size:	12288

Details

Name:	00000003.00000003.701174540.0000000000C9C000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C9C000
Size:	4096

Details

Name:	00000002.00000003.357091715.0000000000C30000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C30000
Size:	4096

Details

Name:	00000003.00000003.363110223.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000006.00000003.378888773.0000000004A10000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A10000
Size:	4096

Details

Name:	0000000D.00000002.774843611.00007FF519643000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF519643000
Size:	12288

Details

Name:	00000004.00000003.365059216.000000000085E000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	85E000
Size:	16384

Details

Name:	00000021.00000003.698307795.000001BAEF9B9000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF9B9000
Size:	65536

Details

Name:	00000000.00000000.245296290.000000007F2E0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F2E0000
Size:	4096

Details

Name:	00000021.00000003.704699818.000001BAEF99B000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF99B000
Size:	16384

Details

Name:	00000005.00000002.621128046.00007FF5432E0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5432E0000
Size:	20480

Details

Name:	00000002.00000003.345593706.0000000000C30000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C30000
Size:	4096

Details

Name:	00000016.00000002.525689585.00007DF5209D0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5209D0000
Size:	4096

Details

Name:	00000002.00000003.381863672.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000002.00000003.357349078.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000021.00000003.691450970.000001BAEF96A000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF96A000
Size:	24576

Details

Name:	00000025.00000002.740280226.00007FF4FDA57000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDA57000
Size:	4096

Details

Name:	00000023.00000000.676480418.00007DF5E0E50000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E0E50000
Size:	12288

Details

Name:	00000016.00000002.525121937.000000DCFFF0B000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	DCFFF0B000
Size:	20480

Details

Name:	00000003.00000003.568366085.0000000000CB8000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CB8000
Size:	4096

Details

Name:	00000021.00000002.719001030.00007FF52FDDC000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52FDDC000
Size:	4096

Details

Name:	00000002.00000002.394867736.0000000000C9E000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C9E000
Size:	4096

Details

Name:	00000025.00000002.740567853.00007FF4FDB4B000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDB4B000
Size:	8192

Details

Name:	0000001E.00000002.774338112.00007FF52A021000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52A021000
Size:	12288

Details

Name:	00000003.00000003.744657676.0000000000CBE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CBE000
Size:	4096

Details

Name:	00000007.00000002.772962171.000001E0F8256000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E0F8256000
Size:	69632

Details

Name:	00000021.00000003.696872798.000001BAEF998000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF998000
Size:	61440

Details

Name:	00000002.00000002.394523982.0000000000AA0000.00000040.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	AA0000
Size:	4096

Details

Name:	00000004.00000002.404326376.0000000002DFB000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DFB000
Size:	16384

Details

Name:	00000002.00000002.394666436.0000000000AB0000.00000004.00000020.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	AB0000
Size:	20480

Details

Name:	00000004.00000003.365051844.0000000000862000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	862000
Size:	28672

Details

Name:	00000003.00000003.363376918.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000002.00000000.246682328.0000000000720000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	720000
Size:	102400

Details

Name:	00000002.00000003.346129605.0000000000C30000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C30000
Size:	4096

Details

Name:	0000000D.00000002.773499179.000002C79F600000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C79F600000
Size:	4096

Details

Name:	00000021.00000003.681982268.000001BAEF988000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF988000
Size:	57344

Details

Name:	00000021.00000002.717945468.000001BAEF03C000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF03C000
Size:	53248

Details

Name:	00000004.00000003.385080621.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000000.00000003.737102656.0000000004154000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4154000
Size:	4096

Details

Name:	00000004.00000002.404507984.000000007FC80000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FC80000
Size:	12288

Details

Name:	00000002.00000003.385748541.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000016.00000000.513230656.00007DF5209C0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5209C0000
Size:	4096

Details

Name:	00000021.00000002.719011302.00007FF53007F000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53007F000
Size:	8192

Details

Name:	00000007.00000002.772626813.000001E0F8213000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E0F8213000
Size:	81920

Details

Name:	00000025.00000002.739748313.0000027D23113000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	27D23113000
Size:	16384

Details

Name:	00000006.00000002.413928949.0000000000D9A000.00000004.00000020.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	D9A000
Size:	118784

Details

Name:	00000003.00000002.777772249.000000000579D000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	579D000
Size:	4096

Details

Name:	0000000A.00000002.775697016.00007FF5CC92F000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC92F000
Size:	20480

Details

Name:	00000007.00000002.772301534.000001E0F8120000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E0F8120000
Size:	4096

Details

Name:	00000002.00000002.394901207.000000000106E000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	106E000
Size:	4096

Details

Name:	0000001E.00000002.773091255.0000017CFF500000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17CFF500000
Size:	4096

Details

Name:	00000013.00000002.494668023.00007FF586D3E000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586D3E000
Size:	16384

Details

Name:	00000003.00000003.701185218.0000000000C9E000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C9E000
Size:	8192

Details

Name:	00000004.00000002.403886871.0000000000820000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	0000000A.00000002.774589097.00007FF5CC6C2000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC6C2000
Size:	12288

Details

Name:	00000002.00000002.394993671.0000000002D06000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D06000
Size:	4096

Details

Name:	00000021.00000003.693169176.000001BAEFE02000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEFE02000
Size:	147456

Details

Name:	00000000.00000003.390701990.0000000000BE0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000006.00000003.395470280.00000000049C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	49C0000
Size:	4096

Details

Name:	00000003.00000002.778125724.000000006ECC4000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6ECC4000
Size:	8192

Details

Name:	00000002.00000002.395203882.0000000002D79000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D79000
Size:	8192

Details

Name:	00000002.00000002.395061533.0000000002D21000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D21000
Size:	20480

Details

Name:	00000009.00000002.776022182.00007FF4F5F4C000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5F4C000
Size:	4096

Details

Name:	00000002.00000003.387724547.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000021.00000002.719076379.00007FF530174000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF530174000
Size:	4096

Details

Name:	00000004.00000002.404302381.0000000002D9D000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D9D000
Size:	8192

Details

Name:	00000005.00000003.265923078.000001F798C30000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798C30000
Size:	4096

Details

Name:	00000000.00000003.422652082.00000000029D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	29D0000
Size:	4096

Details

Name:	00000021.00000003.704777676.000001BAEF9A1000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF9A1000
Size:	32768

Details

Name:	00000005.00000002.622106576.00007FF54342F000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54342F000
Size:	20480

Details

Name:	00000006.00000002.412886958.0000000000CA0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	CA0000
Size:	16384

Details

Name:	00000003.00000003.393520034.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000013.00000000.479591265.00007DF59C652000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF59C652000
Size:	4096

Details

Name:	00000004.00000003.395830645.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000021.00000002.718820751.000001BAEFD50000.00000004.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1BAEFD50000
Size:	8192

Details

Name:	00000002.00000003.394081797.0000000000C82000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C82000
Size:	32768

Details

Name:	00000005.00000002.619441727.000001F793629000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F793629000
Size:	90112

Details

Name:	00000003.00000002.776343701.0000000002D44000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D44000
Size:	40960

Details

Name:	00000000.00000003.426763244.00000000032CB000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	32CB000
Size:	4096

Details

Name:	00000003.00000003.378214208.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000003.00000003.761799843.0000000000CBE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CBE000
Size:	4096

Details

Name:	00000006.00000002.415576471.0000000002DFB000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DFB000
Size:	16384

Details

Name:	00000002.00000002.395603407.00000000062F0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	62F0000
Size:	4096

Details

Name:	0000000D.00000002.772363905.000002C79EBA0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C79EBA0000
Size:	16384

Details

Name:	00000025.00000002.740475516.00007FF4FDB26000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDB26000
Size:	16384

Details

Name:	00000025.00000000.727524542.00007DF513450000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF513450000
Size:	4096

Details

Name:	00000004.00000002.404151167.0000000002CF7000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CF7000
Size:	8192

Details

Name:	00000003.00000002.777381786.0000000004DBF000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4DBF000
Size:	4096

Details

Name:	00000021.00000002.719616244.00007FF5304FD000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5304FD000
Size:	28672

Details

Name:	00000021.00000002.718476547.000001BAEF740000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF740000
Size:	4096

Details

Name:	00000003.00000003.427603908.00000000055B0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	55B0000
Size:	4096

Details

Name:	00000021.00000003.717276462.000001BAEF05B000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF05B000
Size:	28672

Details

Name:	00000002.00000003.380792197.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000002.00000003.343551455.0000000000C20000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C20000
Size:	4096

Details

Name:	00000009.00000002.776086471.00007FF4F5F57000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5F57000
Size:	4096

Details

Name:	0000000B.00000002.417029784.00007DF5EA4A0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EA4A0000
Size:	4096

Details

Name:	00000003.00000002.777759872.0000000005757000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5757000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000006.00000003.392490397.00000000049C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	49C0000
Size:	4096

Details

Name:	00000004.00000003.397707777.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000021.00000003.681947723.000001BAEF97E000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF97E000
Size:	16384

Details

Name:	0000000B.00000003.416548124.000001C93E246000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C93E246000
Size:	4096

Details

Name:	00000025.00000002.739839230.00007DF513460000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF513460000
Size:	4096

Details

Name:	00000023.00000002.688743169.00007FF5CB483000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CB483000
Size:	12288

Details

Name:	0000000D.00000000.397350011.00007FF5196FF000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5196FF000
Size:	20480

Details

Name:	00000021.00000002.719513640.00007FF5304A8000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5304A8000
Size:	8192

Details

Name:	00000003.00000002.776241972.0000000002D21000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D21000
Size:	20480

Details

Name:	00000004.00000002.403818584.0000000000520000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	520000
Size:	102400

Details

Name:	0000000B.00000002.416697889.00000032F72FE000.00000004.00000010.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	32F72FE000
Size:	8192

Details

Name:	00000006.00000002.413650873.0000000000D80000.00000004.00000020.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	D80000
Size:	20480

Details

Name:	00000007.00000002.771955413.000000CCBD17E000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	CCBD17E000
Size:	8192

Details

Name:	00000003.00000003.744649443.0000000000CB9000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CB9000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000013.00000002.494121893.000000A52627B000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A52627B000
Size:	20480

Details

Name:	00000004.00000003.383913980.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	0000000A.00000002.774993466.00007FF5CC83C000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC83C000
Size:	45056

Details

Name:	00000000.00000003.394190194.0000000000BE0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000010.00000002.434195598.0000019870513000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	19870513000
Size:	12288

Details

Name:	00000000.00000002.774539128.0000000001110000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1110000
Size:	65536

Details

Name:	00000006.00000002.414977845.0000000002D65000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D65000
Size:	16384

Details

Name:	00000004.00000002.404087240.0000000000F7E000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F7E000
Size:	8192

Details

Name:	00000016.00000002.525677561.00007DF5209C0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5209C0000
Size:	4096

Details

Name:	00000021.00000002.718511540.000001BAEF790000.00000008.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page write copy
Base address:	1BAEF790000
Size:	266240

Details

Name:	00000009.00000002.772170959.00000165BA080000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	165BA080000
Size:	102400

Details

Name:	00000005.00000000.260053378.00007DF558D22000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF558D22000
Size:	4096

Details

Name:	00000004.00000002.403837698.000000000057A000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	57A000
Size:	24576

Details

Name:	0000000D.00000000.397328652.00007DF52F010000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF52F010000
Size:	12288

Details

Name:	00000004.00000003.398478295.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	0000000B.00000002.417103350.00007FF5D494D000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D494D000
Size:	16384

Details

Name:	00000021.00000003.693003445.000001BAEF98C000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF98C000
Size:	61440

Details

Name:	00000002.00000003.382935385.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	0000000A.00000002.772302765.00000030D80FF000.00000004.00000010.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	30D80FF000
Size:	4096

Details

Name:	00000002.00000000.246717226.000000007F590000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F590000
Size:	12288

Details

Name:	00000000.00000003.422635773.00000000029D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	29D0000
Size:	4096

Details

Name:	00000021.00000003.705993353.000001BAEF99A000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF99A000
Size:	8192

Details

Name:	0000000D.00000002.774703189.00007FF51962D000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51962D000
Size:	28672

Details

Name:	00000005.00000002.620500149.00007FF5430BA000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5430BA000
Size:	4096

Details

Name:	00000007.00000002.772088837.000001E0F80F0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E0F80F0000
Size:	102400

Details

Name:	00000013.00000002.494373760.00007DF59C640000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF59C640000
Size:	4096

Details

Name:	00000002.00000003.388092859.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000021.00000000.674483625.00007DF545EE0000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF545EE0000
Size:	12288

Details

Name:	00000006.00000002.414301753.0000000002D06000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D06000
Size:	4096

Details

Name:	00000010.00000002.434762756.00007FF5AADB8000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AADB8000
Size:	49152

Details

Name:	00000005.00000003.282316533.000001F793F59000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F793F59000
Size:	4096

Details

Name:	00000002.00000003.331148516.0000000000C83000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C83000
Size:	114688

Details

Name:	00000021.00000002.719733079.00007FF53059B000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53059B000
Size:	8192

Details

Name:	00000003.00000002.776188966.0000000002D11000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D11000
Size:	4096

Details

Name:	00000005.00000002.619633146.000001F7936FF000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F7936FF000
Size:	8192

Details

Name:	00000023.00000002.688258367.000000DD13D7F000.00000004.00000010.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DD13D7F000
Size:	4096

Details

Name:	00000007.00000002.773050911.000001E0F8300000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E0F8300000
Size:	4096

Details

Name:	00000009.00000002.774275228.00000165BA400000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	165BA400000
Size:	4096

Details

Name:	00000000.00000002.775763029.00000000029AE000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	29AE000
Size:	8192

Details

Name:	00000004.00000002.404025286.0000000000B27000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	B27000
Size:	12288

Details

Name:	0000000A.00000002.771936290.00000030D77FF000.00000004.00000010.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	30D77FF000
Size:	4096

Details

Name:	00000025.00000002.739626196.0000027D2303C000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	27D2303C000
Size:	77824

Details

Name:	00000006.00000002.414278994.0000000002CF7000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CF7000
Size:	8192

Details

Name:	00000003.00000003.383608567.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000004.00000003.394434665.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000003.00000002.774417812.0000000000CAF000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	CAF000
Size:	32768

Details

Name:	00000003.00000002.776201859.0000000002D13000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D13000
Size:	4096

Details

Name:	00000000.00000003.395116145.0000000000BE0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000005.00000003.619018117.000001F793F00000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F793F00000
Size:	4096

Details

Name:	00000023.00000002.688722823.00007FF5CB475000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CB475000
Size:	8192

Details

Name:	00000013.00000000.479577872.00007DF59C642000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF59C642000
Size:	4096

Details

Name:	00000002.00000003.346866313.0000000000C30000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C30000
Size:	4096

Details

Name:	00000003.00000003.343250163.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000021.00000002.718804656.000001BAEF990000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF990000
Size:	16384

Details

Name:	00000006.00000002.414313903.0000000002D08000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D08000
Size:	12288

Details

Name:	0000001E.00000002.774938203.00007FF52A7B5000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52A7B5000
Size:	12288

Details

Name:	0000000D.00000002.771919245.000000EAF0BFF000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	EAF0BFF000
Size:	4096

Details

Name:	0000001E.00000002.773051119.0000017CFF480000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17CFF480000
Size:	4096

Details

Name:	00000009.00000002.775534110.00007FF4F5BBA000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5BBA000
Size:	12288

Details

Name:	00000004.00000003.373223966.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	0000000A.00000002.774188403.00007DF5E2230000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E2230000
Size:	4096

Details

Name:	00000003.00000002.776214862.0000000002D16000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D16000
Size:	8192

Details

Name:	00000000.00000003.561269007.0000000000DED000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DED000
Size:	4096

Details

Name:	00000004.00000003.394961877.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000003.00000002.777234365.0000000004880000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4880000
Size:	4096

Details

Name:	00000002.00000003.344790032.0000000000C20000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C20000
Size:	4096

Details

Name:	0000000B.00000002.416810068.000001C93E229000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C93E229000
Size:	40960

Details

Name:	00000003.00000002.776277588.0000000002D36000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D36000
Size:	4096

Details

Name:	0000000B.00000002.416842094.000001C93E242000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C93E242000
Size:	16384

Details

Name:	00000021.00000002.718419346.000001BAEF2D0000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1BAEF2D0000
Size:	4096

Details

Name:	00000021.00000003.717296807.000001BAEF056000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF056000
Size:	20480

Details

Name:	00000025.00000002.740388318.00007FF4FDA99000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDA99000
Size:	20480

Details

Name:	00000005.00000003.618771718.000001F798B10000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798B10000
Size:	4096

Details

Name:	00000005.00000002.621247783.00007FF543304000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF543304000
Size:	4096

Details

Name:	00000004.00000002.404313453.0000000002DAD000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DAD000
Size:	73728

Details

Name:	0000000B.00000002.417175263.00007FF5D4B68000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D4B68000
Size:	12288

Details

Name:	00000025.00000002.740008548.00007FF4FD629000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FD629000
Size:	32768

Details

Name:	0000001E.00000002.774967615.00007FF52A808000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52A808000
Size:	12288

Details

Name:	00000005.00000002.621031834.00007FF5432A4000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5432A4000
Size:	16384

Details

Name:	00000006.00000002.415822051.0000000006710000.00000004.00000040.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	6710000
Size:	8192

Details

Name:	00000021.00000002.719049161.00007FF5300A8000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5300A8000
Size:	4096

Details

Name:	00000005.00000002.620706623.00007FF5431E3000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5431E3000
Size:	16384

Details

Name:	0000001E.00000002.774388196.00007FF52A042000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52A042000
Size:	4096

Details

Name:	00000023.00000003.687983704.000002AF482E1000.00000004.00000001.sdmp
TargetID:	35
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AF482E1000
Size:	122880

Details

Name:	00000005.00000002.622097218.00007FF54342D000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54342D000
Size:	4096

Details

Name:	00000003.00000003.522699693.0000000000C99000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C99000
Size:	155648

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.774391050.0000000000F0E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F0E000
Size:	8192

Details

Name:	00000021.00000003.696850635.000001BAEF9AA000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF9AA000
Size:	73728

Details

Name:	00000025.00000002.740211001.00007FF4FD9B5000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FD9B5000
Size:	24576

Details

Name:	0000000D.00000002.774325816.00007FF5195D0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5195D0000
Size:	12288

Details

Name:	0000000B.00000002.416819294.000001C93E234000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C93E234000
Size:	20480

Details

Name:	00000021.00000002.718583626.000001BAEF802000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF802000
Size:	4096

Details

Name:	00000005.00000002.620992154.00007FF543267000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF543267000
Size:	12288

Details

Name:	00000005.00000003.616643520.000001F798D00000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798D00000
Size:	4096

Details

Name:	00000002.00000002.394706814.0000000000BD0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	BD0000
Size:	4096

Details

Name:	0000000B.00000002.417018297.000001C93E802000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C93E802000
Size:	4096

Details

Name:	00000000.00000002.772012330.0000000000860000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	860000
Size:	4096

Details

Name:	00000006.00000003.384844626.0000000004A10000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A10000
Size:	4096

Details

Name:	0000000D.00000002.773407206.000002C79F260000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C79F260000
Size:	16384

Details

Name:	00000021.00000002.719839135.00007FF5305CD000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5305CD000
Size:	4096

Details

Name:	00000025.00000002.739440051.0000027D22DF0000.00000004.00000040.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	27D22DF0000
Size:	4096

Details

Name:	00000002.00000000.246713382.000000007F582000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F582000
Size:	4096

Details

Name:	00000004.00000002.404295538.0000000002D8D000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D8D000
Size:	8192

Details

Name:	00000002.00000003.394059709.0000000000C97000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C97000
Size:	4096

Details

Name:	00000002.00000002.395637759.0000000006730000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6730000
Size:	4096

Details

Name:	00000003.00000003.433232492.0000000000C9A000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C9A000
Size:	4096

Details

Name:	00000003.00000002.772231865.0000000000A50000.00000040.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page execute and read and write
Base address:	A50000
Size:	4096

Details

Name:	00000005.00000002.620196681.000001F798EF3000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798EF3000
Size:	28672

Details

Name:	00000006.00000002.415885909.000000007F332000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F332000
Size:	4096

Details

Name:	00000003.00000003.744672735.0000000000CB9000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CB9000
Size:	16384

Details

Name:	00000004.00000002.403973194.0000000000970000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	970000
Size:	20480

Details

Name:	0000000A.00000002.775363843.00007FF5CC900000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC900000
Size:	36864

Details

Name:	00000003.00000002.778176075.000000007F9A0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F9A0000
Size:	20480

Details

Name:	00000003.00000002.777646298.00000000055EE000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	55EE000
Size:	8192

Details

Name:	00000013.00000002.494602434.00007FF586CB5000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586CB5000
Size:	12288

Details

Name:	00000005.00000002.619869687.000001F798E30000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798E30000
Size:	49152

Details

Name:	00000000.00000003.395863745.0000000000BE0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000016.00000002.526079118.00007FF50B035000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50B035000
Size:	12288

Details

Name:	00000003.00000003.478536976.0000000000CA1000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CA1000
Size:	4096

Details

Name:	00000000.00000002.775646606.00000000028FE000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	28FE000
Size:	8192

Details

Name:	00000007.00000000.280399174.00007DF5A44A0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A44A0000
Size:	12288

Details

Name:	00000006.00000003.390987778.00000000049C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	49C0000
Size:	4096

Details

Name:	0000000B.00000003.416506677.000001C93E257000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C93E257000
Size:	4096

Details

Name:	00000002.00000002.394368268.0000000000940000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	940000
Size:	12288

Details

Name:	0000000A.00000002.774767794.00007FF5CC6EC000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC6EC000
Size:	4096

Details

Name:	00000021.00000002.719629255.00007FF530505000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF530505000
Size:	8192

Details

Name:	00000013.00000002.494115770.000000A52617E000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A52617E000
Size:	8192

Details

Name:	00000006.00000002.414214070.0000000002C11000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C11000
Size:	32768

Details

Name:	00000010.00000002.434946705.00007FF5AAE84000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AAE84000
Size:	4096

Details

Name:	00000016.00000002.525454114.000002112F64E000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2112F64E000
Size:	12288

Details

Name:	00000003.00000003.376807248.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000003.00000003.355540291.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000005.00000002.619650924.000001F793707000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F793707000
Size:	24576

Details

Name:	00000025.00000002.739563448.0000027D23013000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	27D23013000
Size:	86016

Details

Name:	00000000.00000003.389601158.0000000000BE0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000023.00000002.688705585.00007FF5CB46D000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CB46D000
Size:	28672

Details

Name:	00000000.00000002.776085900.0000000002E6E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2E6E000
Size:	8192

Details

Name:	00000004.00000003.390989421.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000005.00000002.619773845.000001F798E00000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798E00000
Size:	73728

Details

Name:	00000025.00000002.739673984.0000027D2306C000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	27D2306C000
Size:	61440

Details

Name:	00000010.00000002.434176192.0000019870500000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	19870500000
Size:	4096

Details

Name:	0000000B.00000002.417238411.00007FF5D4BAF000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D4BAF000
Size:	20480

Details

Name:	00000021.00000002.718039378.000001BAEF063000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF063000
Size:	49152

Details

Name:	00000025.00000002.739380848.000000A06FF7B000.00000004.00000010.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A06FF7B000
Size:	20480

Details

Name:	00000005.00000002.620637102.00007FF543153000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF543153000
Size:	4096

Details

Name:	00000000.00000003.516767351.00000000032CB000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	32CB000
Size:	8192

Details

Name:	00000004.00000002.404203098.0000000002D36000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D36000
Size:	4096

Details

Name:	00000002.00000003.343249624.0000000000C20000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C20000
Size:	4096

Details

Name:	00000003.00000002.776616910.0000000002D9D000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D9D000
Size:	8192

Details

Name:	00000006.00000003.410604689.0000000004E28000.00000004.00000040.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4E28000
Size:	4096

Details

Name:	00000004.00000003.387829121.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000004.00000003.383358951.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000004.00000003.385681945.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000007.00000002.775027359.00007FF58EB4F000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58EB4F000
Size:	20480

Details

Name:	0000001E.00000002.773355471.0000017CFF750000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	17CFF750000
Size:	4096

Details

Name:	00000003.00000002.776743163.0000000003030000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3030000
Size:	65536

Details

Name:	00000000.00000003.393293516.0000000000BE0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000007.00000002.772363218.000001E0F8150000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E0F8150000
Size:	16384

Details

Name:	00000004.00000003.403507027.00000000045F0000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	45F0000
Size:	8192

Details

Name:	00000006.00000003.377573994.0000000000DC3000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DC3000
Size:	12288

Details

Name:	00000004.00000002.404081954.0000000000F3F000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F3F000
Size:	4096

Details

Name:	00000005.00000002.619958885.000001F798E54000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798E54000
Size:	49152

Details

Name:	00000006.00000002.414608282.0000000002D40000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D40000
Size:	12288

Details

Name:	00000003.00000002.771953996.000000000088C000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	88C000
Size:	16384

Details

Name:	00000013.00000002.494431310.00007FF586549000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586549000
Size:	4096

Details

Name:	0000000B.00000002.416721736.000001C93DFA0000.00000004.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1C93DFA0000
Size:	4096

Details

Name:	00000005.00000002.622041199.00007FF543414000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF543414000
Size:	4096

Details

Name:	00000002.00000002.395420803.000000000464E000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	464E000
Size:	8192

Details

Name:	00000005.00000002.619317644.000000E3F4F7E000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	E3F4F7E000
Size:	8192

Details

Name:	00000002.00000002.395169766.0000000002D6B000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D6B000
Size:	8192

Details

Name:	00000004.00000002.403931094.000000000086A000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	86A000
Size:	4096

Details

Name:	00000007.00000002.774399639.00007FF58EA47000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58EA47000
Size:	4096

Details

Name:	00000004.00000002.404227033.0000000002D50000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D50000
Size:	32768

Details

Name:	00000005.00000002.619389952.000001F7935E0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F7935E0000
Size:	16384

Details

Name:	00000002.00000002.395114415.0000000002D40000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D40000
Size:	12288

Details

Name:	00000003.00000003.568383665.0000000000CB8000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CB8000
Size:	4096

Details

Name:	0000000D.00000002.774217002.00007FF5193F8000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5193F8000
Size:	8192

Details

Name:	00000002.00000002.394357672.00000000007D0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7D0000
Size:	4096

Details

Name:	00000021.00000003.681170648.000001BAEF9AA000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF9AA000
Size:	114688

Details

Name:	00000000.00000002.773174863.0000000000D82000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	D82000
Size:	532480

Details

Name:	00000002.00000003.367295664.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000009.00000000.384091830.00007DF50B962000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50B962000
Size:	4096

Details

Name:	00000023.00000002.688673437.00007FF5CAD16000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CAD16000
Size:	8192

Details

Name:	00000003.00000003.700529013.0000000000C9A000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C9A000
Size:	4096

Details

Name:	00000006.00000003.395866612.00000000049C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	49C0000
Size:	4096

Details

Name:	00000005.00000002.620594879.00007FF54312D000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54312D000
Size:	8192

Details

Name:	00000004.00000002.404357813.00000000044B0000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	44B0000
Size:	8192

Details

Name:	00000005.00000003.261530698.000001F798C51000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798C51000
Size:	4096

Details

Name:	0000000A.00000002.775496663.00007FF5CC914000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC914000
Size:	4096

Details

Name:	00000013.00000002.494423144.00007FF586543000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586543000
Size:	16384

Details

Name:	00000003.00000002.776145363.0000000002CFD000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CFD000
Size:	4096

Details

Name:	00000003.00000002.777281283.0000000004930000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4930000
Size:	4096

Details

Name:	00000000.00000002.771810098.00000000007CD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7CD000
Size:	8192

Details

Name:	00000007.00000002.773456977.00007DF5A4482000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A4482000
Size:	4096

Details

Name:	0000000D.00000000.397307106.00007DF52EFF2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF52EFF2000
Size:	4096

Details

Name:	00000005.00000002.621670761.00007FF54333C000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54333C000
Size:	45056

Details

Name:	00000005.00000002.619804786.000001F798E13000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798E13000
Size:	53248

Details

Name:	00000006.00000003.411405979.0000000000DC8000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DC8000
Size:	69632

Details

Name:	00000005.00000002.620028305.000001F798E86000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798E86000
Size:	69632

Details

Name:	00000025.00000002.739507604.0000027D22E50000.00000004.00000020.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	27D22E50000
Size:	8192

Details

Name:	00000003.00000002.776675924.0000000002DFB000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DFB000
Size:	16384

Details

Name:	00000000.00000002.777292362.000000006EBF1000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6EBF1000
Size:	180224

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	0000000B.00000002.417216868.00007FF5D4B9B000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D4B9B000
Size:	8192

Details

Name:	00000003.00000003.434314086.0000000000C99000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C99000
Size:	4096

Details

Name:	00000005.00000002.619398215.000001F793600000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F793600000
Size:	73728

Details

Name:	00000006.00000002.415045632.0000000002D6B000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D6B000
Size:	8192

Details

Name:	00000025.00000002.739595085.0000027D23029000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	27D23029000
Size:	73728

Details

Name:	00000004.00000003.383609344.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000003.00000003.522788268.0000000000CB1000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CB1000
Size:	57344

Details

Name:	00000003.00000002.772320291.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000021.00000003.696601092.000001BAEF988000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF988000
Size:	20480

Details

Name:	00000004.00000002.404032569.0000000000B2B000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	B2B000
Size:	12288

Details

Name:	00000016.00000002.525187826.000000DD005F7000.00000004.00000010.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DD005F7000
Size:	36864

Details

Name:	00000000.00000002.772572260.0000000000CBB000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	CBB000
Size:	20480

Details

Name:	00000016.00000002.525850265.00007FF50AE6D000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50AE6D000
Size:	16384

Details

Name:	0000001E.00000000.660285726.00007DF540140000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF540140000
Size:	4096

Details

Name:	00000004.00000003.403650280.000000000086B000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	86B000
Size:	45056

Details

Name:	00000021.00000003.677838577.000001BAEFD40000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEFD40000
Size:	4096

Details

Name:	00000002.00000003.328039072.0000000000B90000.00000040.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page execute and read and write
Base address:	B90000
Size:	4096

Details

Name:	00000003.00000003.427580713.00000000055B0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	55B0000
Size:	4096

Details

Name:	0000000B.00000002.417193822.00007FF5D4B7B000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D4B7B000
Size:	8192

Details

Name:	0000000A.00000002.772964335.000001996B013000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1996B013000
Size:	86016

Details

Name:	00000021.00000003.703735344.000001BAEF9A1000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF9A1000
Size:	16384

Details

Name:	0000000B.00000003.416404445.000001C93E26D000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C93E26D000
Size:	28672

Details

Name:	0000000B.00000003.394368590.000001C93E231000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C93E231000
Size:	40960

Details

Name:	00000010.00000002.434231790.0000019870C02000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	19870C02000
Size:	4096

Details

Name:	00000010.00000002.433988616.0000019870380000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	19870380000
Size:	4096

Details

Name:	00000002.00000002.395663780.000000007F570000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F570000
Size:	4096

Details

Name:	00000003.00000003.567507234.0000000000C56000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C56000
Size:	274432

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000021.00000002.719178217.00007FF5302E3000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5302E3000
Size:	4096

Details

Name:	0000000B.00000000.393994547.00007DF5EA4C0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EA4C0000
Size:	12288

Details

Name:	00000021.00000002.718841250.000001BAEFF00000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEFF00000
Size:	8192

Details

Name:	00000021.00000002.718643638.000001BAEF91E000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF91E000
Size:	28672

Details

Name:	00000013.00000002.494165370.0000020E580A0000.00000004.00000040.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	20E580A0000
Size:	4096

Details

Name:	00000002.00000003.393555010.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000002.00000003.362472836.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000003.00000003.611964452.0000000000CAF000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CAF000
Size:	16384

Details

Name:	00000021.00000002.717653208.00000034B3477000.00000004.00000010.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	34B3477000
Size:	36864

Details

Name:	00000021.00000002.718960955.00007FF52FDA6000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52FDA6000
Size:	8192

Details

Name:	00000021.00000003.717371138.000001BAEF04A000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF04A000
Size:	4096

Details

Name:	00000016.00000002.526123429.00007FF50B0A0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50B0A0000
Size:	36864

Details

Name:	00000002.00000003.366491666.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	0000000A.00000000.392055973.00007DF5E2240000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E2240000
Size:	12288

Details

Name:	00000002.00000002.395437300.00000000046CE000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	46CE000
Size:	8192

Details

Name:	00000002.00000003.348239348.0000000000C30000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C30000
Size:	4096

Details

Name:	00000016.00000000.513272676.00007DF5209E0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5209E0000
Size:	12288

Details

Name:	00000021.00000003.687182039.000001BAEFE21000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEFE21000
Size:	118784

Details

Name:	00000025.00000002.739796161.0000027D23802000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	27D23802000
Size:	4096

Details

Name:	00000000.00000003.393756698.0000000000BE0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000021.00000003.702630251.000001BAEFF02000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEFF02000
Size:	794624

Details

Name:	00000004.00000003.396091208.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000013.00000002.494337643.0000020E58600000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	20E58600000
Size:	12288

Details

Name:	00000002.00000002.395182469.0000000002D75000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D75000
Size:	8192

Details

Name:	00000002.00000002.394861687.0000000000C97000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C97000
Size:	4096

Details

Name:	00000023.00000000.676462107.00007DF5E0E40000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E0E40000
Size:	4096

Details

Name:	00000003.00000003.377110654.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000009.00000002.773476513.00000165BA288000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	165BA288000
Size:	12288

Details

Name:	00000021.00000003.696900756.000001BAEF9CD000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF9CD000
Size:	81920

Details

Name:	00000002.00000003.346598458.0000000000C30000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C30000
Size:	4096

Details

Name:	0000001E.00000002.774462994.00007FF52A0E9000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52A0E9000
Size:	12288

Details

Name:	00000004.00000003.403670172.0000000000859000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	859000
Size:	65536

Details

Name:	00000000.00000002.776903141.0000000003E1F000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3E1F000
Size:	4096

Details

Name:	00000004.00000002.404115484.0000000002BE3000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BE3000
Size:	4096

Details

Name:	0000000A.00000002.774378316.00007FF5CC173000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC173000
Size:	4096

Details

Name:	00000007.00000002.773027482.000001E0F827D000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E0F827D000
Size:	8192

Details

Name:	00000005.00000002.619623458.000001F7936BD000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F7936BD000
Size:	4096

Details

Name:	0000001E.00000002.773561103.0000017CFFF70000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17CFFF70000
Size:	4096

Details

Name:	00000002.00000002.394285842.000000000077A000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	77A000
Size:	24576

Details

Name:	00000003.00000002.776565885.0000000002D85000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D85000
Size:	12288

Details

Name:	00000007.00000002.775494259.00007FF58EB8F000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58EB8F000
Size:	20480

Details

Name:	00000021.00000003.696890766.000001BAEF9A9000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF9A9000
Size:	4096

Details

Name:	00000000.00000002.776754849.000000000391F000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	391F000
Size:	4096

Details

Name:	00000016.00000002.526054158.00007FF50B009000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50B009000
Size:	20480

Details

Name:	00000002.00000003.362204772.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000021.00000002.719352022.00007FF530393000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF530393000
Size:	4096

Details

Name:	0000000D.00000002.774968435.00007FF5196BF000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5196BF000
Size:	20480

Details

Name:	00000021.00000003.681912154.000001BAEF97B000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF97B000
Size:	4096

Details

Name:	00000003.00000003.392514413.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000021.00000002.718797004.000001BAEF98C000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF98C000
Size:	8192

Details

Name:	00000003.00000003.611950653.0000000000C99000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C99000
Size:	8192

Details

Name:	00000021.00000003.689261233.000001BAEF98F000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF98F000
Size:	32768

Details

Name:	00000025.00000000.727532955.00007DF513452000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF513452000
Size:	4096

Details

Name:	00000000.00000002.772602467.0000000000CF0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	CF0000
Size:	4096

Details

Name:	00000000.00000003.390138994.0000000000BE0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000009.00000000.384070807.00007DF50B960000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50B960000
Size:	4096

Details

Name:	00000021.00000002.719860990.00007FF5305CF000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5305CF000
Size:	20480

Details

Name:	00000003.00000003.433797173.0000000000C9C000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C9C000
Size:	12288

Details

Name:	00000005.00000002.620566142.00007FF543121000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF543121000
Size:	4096

Details

Name:	00000000.00000003.392151581.0000000000BE0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000023.00000002.688457740.000002AF48240000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AF48240000
Size:	16384

Details

Name:	00000006.00000002.414534225.0000000002D39000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D39000
Size:	8192

Details

Name:	00000007.00000002.774874451.00007FF58EAD3000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58EAD3000
Size:	12288

Details

Name:	00000002.00000002.394949749.0000000002C42000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C42000
Size:	16384

Details

Name:	0000000A.00000002.772827399.000001996AEF0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1996AEF0000
Size:	12288

Details

Name:	00000007.00000002.773304364.000001E0F8860000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E0F8860000
Size:	20480

Details

Name:	00000000.00000003.738206904.00000000040E8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	40E8000
Size:	897024

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000006.00000002.412400947.00000000009F0000.00000004.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	9F0000
Size:	4096

Details

Name:	0000001E.00000002.773318203.0000017CFF540000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17CFF540000
Size:	4096

Details

Name:	00000003.00000003.357952041.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000007.00000002.774437451.00007FF58EA72000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58EA72000
Size:	8192

Details

Name:	00000004.00000002.404175610.0000000002D11000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D11000
Size:	4096

Details

Name:	00000004.00000002.404245618.0000000002D65000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D65000
Size:	16384

Details

Name:	00000016.00000002.525683477.00007DF5209C2000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5209C2000
Size:	4096

Details

Name:	00000016.00000002.526166671.00007FF50B0CB000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50B0CB000
Size:	4096

Details

Name:	00000005.00000002.620429414.00007FF542FA4000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF542FA4000
Size:	8192

Details

Name:	00000013.00000002.494265362.0000020E58253000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20E58253000
Size:	8192

Details

Name:	0000001E.00000002.771920268.0000005B61FF9000.00000004.00000010.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5B61FF9000
Size:	28672

Details

Name:	00000004.00000003.373491930.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000000.00000000.245299985.000000007F2E2000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F2E2000
Size:	4096

Details

Name:	0000000A.00000002.774152790.00007DF5E2222000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E2222000
Size:	4096

Details

Name:	00000000.00000002.772320915.0000000000C0F000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	C0F000
Size:	4096

Details

Name:	00000002.00000003.365955808.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000003.00000002.776689954.0000000002E01000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E01000
Size:	8192

Details

Name:	00000002.00000003.352057517.0000000000C30000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C30000
Size:	4096

Details

Name:	00000002.00000002.395030519.0000000002D16000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D16000
Size:	8192

Details

Name:	00000004.00000002.404444322.0000000004600000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4600000
Size:	4096

Details

Name:	00000025.00000000.727503775.0000027D22E00000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	27D22E00000
Size:	102400

Details

Name:	00000021.00000003.702422305.000001BAEF99C000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF99C000
Size:	397312

Details

Name:	00000021.00000003.705774025.000001BAEF9C0000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF9C0000
Size:	122880

Details

Name:	00000002.00000002.394874055.0000000000D50000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	D50000
Size:	32768

Details

Name:	00000025.00000002.740309074.00007FF4FDA6C000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDA6C000
Size:	45056

Details

Name:	0000000A.00000002.775238030.00007FF5CC8E8000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC8E8000
Size:	12288

Details

Name:	00000005.00000002.620656935.00007FF543180000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF543180000
Size:	4096

Details

Name:	00000005.00000002.621987895.00007FF5433F6000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5433F6000
Size:	16384

Details

Name:	00000013.00000003.493954379.0000020E58251000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20E58251000
Size:	16384

Details

Name:	00000009.00000002.775970872.00007FF4F5F34000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5F34000
Size:	4096

Details

Name:	00000000.00000002.775528898.000000000287E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	287E000
Size:	8192

Details

Name:	00000006.00000003.382968976.0000000004A10000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A10000
Size:	4096

Details

Name:	0000000A.00000003.393073023.000001996B065000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1996B065000
Size:	61440

Details

Name:	00000002.00000003.359492175.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000016.00000000.513206587.000002112F4A0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2112F4A0000
Size:	102400

Details

Name:	00000005.00000002.621909042.00007FF543369000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF543369000
Size:	20480

Details

Name:	00000009.00000000.384149832.00007FF4F605F000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F605F000
Size:	20480

Details

Name:	00000023.00000003.688030274.000002AF482F6000.00000004.00000001.sdmp
TargetID:	35
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AF482F6000
Size:	36864

Details

Name:	0000001E.00000002.774078521.00007DF540150000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF540150000
Size:	4096

Details

Name:	0000001E.00000002.772696712.0000017CFF350000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	17CFF350000
Size:	16384

Details

Name:	00000005.00000002.620390466.00007FF542BED000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF542BED000
Size:	8192

Details

Name:	00000010.00000002.434498374.00007FF5AAB53000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AAB53000
Size:	4096

Details

Name:	00000021.00000002.719061869.00007FF530101000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF530101000
Size:	4096

Details

Name:	00000013.00000002.494608437.00007FF586D08000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586D08000
Size:	12288

Details

Name:	00000000.00000003.380323617.0000000000BE0000.00000040.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page execute and read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000003.00000003.434841484.000000000524B000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	524B000
Size:	4096

Details

Name:	00000000.00000003.516113565.0000000000DE0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DE0000
Size:	147456

Details

Name:	00000003.00000002.777181216.00000000047FA000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	47FA000
Size:	24576

Details

Name:	00000021.00000003.693057115.000001BAEF98C000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF98C000
Size:	147456

Details

Name:	00000003.00000003.567484008.0000000000CB8000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CB8000
Size:	8192

Details

Name:	00000021.00000002.717699175.00000034B36FE000.00000004.00000010.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	34B36FE000
Size:	8192

Details

Name:	00000005.00000003.283275122.000001F798EFF000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798EFF000
Size:	8192

Details

Name:	00000006.00000002.414358193.0000000002D16000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D16000
Size:	8192

Details

Name:	00000023.00000002.688589736.000002AF48750000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AF48750000
Size:	4096

Details

Name:	0000001E.00000002.773397029.0000017CFF950000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	17CFF950000
Size:	12288

Details

Name:	00000021.00000002.719448947.00007FF530444000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF530444000
Size:	16384

Details

Name:	00000010.00000002.433871553.0000019870330000.00000004.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	19870330000
Size:	4096

Details

Name:	0000000B.00000002.416966056.000001C93E284000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C93E284000
Size:	32768

Details

Name:	00000016.00000002.525696170.00007DF5209D2000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5209D2000
Size:	4096

Details

Name:	00000003.00000003.359827046.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000006.00000002.415661707.000000000480E000.00000004.00000010.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	480E000
Size:	8192

Details

Name:	0000000D.00000002.772051448.000002C79EB20000.00000004.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2C79EB20000
Size:	4096

Details

Name:	0000001E.00000002.774131381.00007DF540152000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF540152000
Size:	4096

Details

Name:	00000002.00000003.389968370.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000007.00000002.772258235.000001E0F8110000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E0F8110000
Size:	12288

Details

Name:	00000007.00000002.772052955.000001E0F80E0000.00000004.00000040.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1E0F80E0000
Size:	4096

Details

Name:	00000007.00000002.774529578.00007FF58EA94000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58EA94000
Size:	8192

Details

Name:	00000004.00000003.399115251.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000023.00000002.688765170.00007FF5CB4A3000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CB4A3000
Size:	4096

Details

Name:	00000003.00000003.385315949.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000010.00000002.434188361.0000019870508000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	19870508000
Size:	24576

Details

Name:	00000000.00000003.424451552.0000000000DDB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DDB000
Size:	12288

Details

Name:	00000005.00000002.619228086.000000E3F427C000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E3F427C000
Size:	16384

Details

Name:	00000005.00000002.619528215.000001F793674000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F793674000
Size:	36864

Details

Name:	0000000B.00000002.417074977.00007FF5D43A1000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D43A1000
Size:	8192

Details

Name:	00000023.00000002.688620475.00007DF5E0E32000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E0E32000
Size:	4096

Details

Name:	0000000A.00000002.773367891.000001996B05A000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1996B05A000
Size:	57344

Details

Name:	00000021.00000003.691505334.000001BAEF98A000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF98A000
Size:	4096

Details

Name:	00000010.00000002.433835757.0000000C249FD000.00000004.00000010.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	C249FD000
Size:	12288

Details

Name:	00000004.00000002.403947949.0000000000877000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	877000
Size:	4096

Details

Name:	00000003.00000003.701221905.0000000000CB5000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CB5000
Size:	4096

Details

Name:	00000013.00000002.494387282.00007DF59C652000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF59C652000
Size:	4096

Details

Name:	00000013.00000002.494497296.00007FF586B9F000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586B9F000
Size:	20480

Details

Name:	00000025.00000002.740167608.00007FF4FD973000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FD973000
Size:	4096

Details

Name:	00000006.00000003.387827794.00000000049C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	49C0000
Size:	4096

Details

Name:	00000005.00000000.260112796.00007FF54342F000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54342F000
Size:	20480

Details

Name:	00000021.00000003.698408444.000001BAEF9CA000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF9CA000
Size:	65536

Details

Name:	00000016.00000002.525569179.000002112F700000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2112F700000
Size:	4096

Details

Name:	00000006.00000003.384309126.0000000004A10000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A10000
Size:	4096

Details

Name:	00000003.00000002.774530780.0000000000CC0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	CC0000
Size:	32768

Details

Name:	00000004.00000003.399719755.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000003.00000003.656373414.00000000056D1000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	56D1000
Size:	290816

Details

Name:	00000004.00000003.365018685.0000000000869000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	869000
Size:	86016

Details

Name:	00000023.00000000.676448510.00007DF5E0E32000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E0E32000
Size:	4096

Details

Name:	00000016.00000002.525662449.000002112FE02000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2112FE02000
Size:	4096

Details

Name:	00000021.00000003.687257492.000001BAEF988000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF988000
Size:	122880

Details

Name:	00000021.00000002.718363594.000001BAEF102000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF102000
Size:	16384

Details

Name:	00000009.00000002.775813286.00007FF4F5ED4000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5ED4000
Size:	16384

Details

Name:	00000025.00000002.740507029.00007FF4FDB2B000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDB2B000
Size:	8192

Details

Name:	00000003.00000003.761819677.0000000000CBE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CBE000
Size:	4096

Details

Name:	00000007.00000002.775096662.00007FF58EB56000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58EB56000
Size:	16384

Details

Name:	00000003.00000003.522804723.0000000000C54000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C54000
Size:	282624

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000016.00000002.525640724.000002112FB80000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2112FB80000
Size:	4096

Details

Name:	00000003.00000003.433171234.0000000000C51000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C51000
Size:	4096

Details

Name:	00000021.00000002.719713706.00007FF53058F000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53058F000
Size:	8192

Details

Name:	00000003.00000002.777799992.0000000005823000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5823000
Size:	4096

Details

Name:	0000000B.00000002.417092458.00007FF5D4851000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D4851000
Size:	4096

Details

Name:	00000021.00000000.674550269.00007FF5305CF000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5305CF000
Size:	20480

Details

Name:	00000016.00000002.525385564.000002112F62A000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2112F62A000
Size:	69632

Details

Name:	00000004.00000003.403630310.000000000086A000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	86A000
Size:	49152

Details

Name:	00000013.00000002.494651632.00007FF586D34000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586D34000
Size:	4096

Details

Name:	00000002.00000003.360597340.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000025.00000002.740073487.00007FF4FD8FD000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FD8FD000
Size:	16384

Details

Name:	00000002.00000003.392826692.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000005.00000002.620226506.000001F798F00000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798F00000
Size:	4096

Details

Name:	00000016.00000002.525857791.00007FF50AE93000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50AE93000
Size:	4096

Details

Name:	00000003.00000003.395118687.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000003.00000003.427689423.00000000055B0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	55B0000
Size:	4096

Details

Name:	00000009.00000002.776003326.00007FF4F5F42000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5F42000
Size:	8192

Details

Name:	00000004.00000002.403996321.0000000000AD0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	AD0000
Size:	4096

Details

Name:	00000005.00000003.618912595.000001F798D70000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798D70000
Size:	4096

Details

Name:	00000021.00000003.689231209.000001BAEF988000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF988000
Size:	4096

Details

Name:	00000010.00000002.434965222.00007FF5AAE9B000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AAE9B000
Size:	4096

Details

Name:	00000010.00000002.434011095.00000198703B0000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	198703B0000
Size:	16384

Details

Name:	0000000A.00000002.773160990.000001996B029000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1996B029000
Size:	81920

Details

Name:	00000013.00000002.494109955.000000A5260FE000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A5260FE000
Size:	8192

Details

Name:	0000000B.00000002.416704902.00000032F73FE000.00000004.00000010.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	32F73FE000
Size:	8192

Details

Name:	00000000.00000002.771985413.000000000085C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	85C000
Size:	16384

Details

Name:	00000002.00000003.354200890.0000000000C30000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C30000
Size:	4096

Details

Name:	00000021.00000002.717624948.00000034B327E000.00000004.00000010.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	34B327E000
Size:	8192

Details

Name:	0000000D.00000002.775160644.00007FF5196E4000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5196E4000
Size:	4096

Details

Name:	00000000.00000003.385482485.0000000000BE0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000000.00000003.387083188.0000000000BE0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000021.00000003.717380425.000001BAEF049000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF049000
Size:	4096

Details

Name:	00000009.00000002.776557567.00007FF4F604B000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F604B000
Size:	8192

Details

Name:	00000005.00000002.619641374.000001F793702000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F793702000
Size:	16384

Details

Name:	00000003.00000002.773343733.0000000000C33000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	C33000
Size:	12288

Details

Name:	00000007.00000002.771843485.000000CCBCE7B000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	CCBCE7B000
Size:	20480

Details

Name:	00000002.00000003.380524236.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000021.00000002.719672318.00007FF53051A000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53051A000
Size:	16384

Details

Name:	00000013.00000002.494251911.0000020E5823C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20E5823C000
Size:	53248

Details

Name:	00000000.00000002.772769063.0000000000D28000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	D28000
Size:	360448

Details

Name:	0000000A.00000002.772154796.00000030D7CFE000.00000004.00000010.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	30D7CFE000
Size:	8192

Details

Name:	00000003.00000003.378482049.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000013.00000002.494182997.0000020E580D0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	20E580D0000
Size:	12288

Details

Name:	00000007.00000002.771919315.000000CCBD07F000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	CCBD07F000
Size:	4096

Details

Name:	00000021.00000003.691057499.000001BAEF98C000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF98C000
Size:	94208

Details

Name:	0000000A.00000002.772874954.000001996B000000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1996B000000
Size:	4096

Details

Name:	00000003.00000003.395467793.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000006.00000003.387459635.00000000049C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	49C0000
Size:	4096

Details

Name:	00000002.00000002.395618729.00000000063E0000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	63E0000
Size:	8192

Details

Name:	00000000.00000003.424853582.0000000000D95000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D95000
Size:	4096

Details

Name:	00000006.00000003.385749209.0000000004A10000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A10000
Size:	4096

Details

Name:	00000010.00000002.434491659.00007FF5AAA46000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AAA46000
Size:	4096

Details

Name:	00000009.00000002.776259300.00007FF4F5F95000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5F95000
Size:	8192

Details

Name:	00000002.00000002.394377983.0000000000944000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	944000
Size:	4096

Details

Name:	00000003.00000002.777366145.0000000004D7E000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4D7E000
Size:	8192

Details

Name:	0000000B.00000003.416475167.000001C93E258000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C93E258000
Size:	8192

Details

Name:	00000025.00000002.740535303.00007FF4FDB3D000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDB3D000
Size:	16384

Details

Name:	0000001E.00000003.661175103.0000017CFF3AD000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	17CFF3AD000
Size:	8192

Details

Name:	0000000D.00000002.772427762.000002C79EBC0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C79EBC0000
Size:	4096

Details

Name:	00000005.00000002.620556727.00007FF54311C000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54311C000
Size:	4096

Details

Name:	00000004.00000003.403617257.0000000000859000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	859000
Size:	65536

Details

Name:	00000003.00000003.611990745.0000000000CBE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CBE000
Size:	4096

Details

Name:	00000005.00000002.619341850.000001F793580000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F793580000
Size:	102400

Details

Name:	00000021.00000003.691467402.000001BAEF96D000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF96D000
Size:	12288

Details

Name:	00000003.00000003.355272547.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000003.00000003.700555497.0000000000CBB000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CBB000
Size:	16384

Details

Name:	00000003.00000003.361467924.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000021.00000002.718436216.000001BAEF4D0000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1BAEF4D0000
Size:	12288

Details

Name:	00000003.00000002.776589281.0000000002D89000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D89000
Size:	12288

Details

Name:	00000000.00000003.473120528.0000000003249000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3249000
Size:	466944

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000010.00000002.434891370.00007FF5AAE05000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AAE05000
Size:	12288

Details

Name:	00000021.00000003.696612755.000001BAEF98E000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF98E000
Size:	4096

Details

Name:	00000004.00000003.389601882.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000021.00000002.719033138.00007FF530099000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF530099000
Size:	32768

Details

Name:	0000000B.00000002.417122375.00007FF5D4AC8000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D4AC8000
Size:	49152

Details

Name:	00000009.00000002.775760820.00007FF4F5E76000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5E76000
Size:	24576

Details

Name:	0000000B.00000002.416849298.000001C93E251000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C93E251000
Size:	12288

Details

Name:	00000010.00000002.434939616.00007FF5AAE7D000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AAE7D000
Size:	16384

Details

Name:	00000004.00000002.403879644.000000000078D000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	78D000
Size:	4096

Details

Name:	00000006.00000003.392828031.00000000049C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	49C0000
Size:	4096

Details

Name:	00000021.00000002.717975617.000001BAEF050000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF050000
Size:	8192

Details

Name:	00000021.00000003.693103366.000001BAEF98C000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF98C000
Size:	294912

Details

Name:	00000005.00000003.616184543.000001F799080000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F799080000
Size:	4096

Details

Name:	00000000.00000003.389877468.0000000000BE0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	0000000B.00000002.417181607.00007FF5D4B6F000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D4B6F000
Size:	8192

Details

Name:	00000006.00000003.382165827.0000000004A10000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A10000
Size:	4096

Details

Name:	00000002.00000003.359224780.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000007.00000002.774588374.00007FF58EA9C000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58EA9C000
Size:	20480

Details

Name:	00000023.00000002.688599674.00007DF4DED00000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4DED00000
Size:	20480

Details

Name:	00000003.00000002.776602862.0000000002D8D000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D8D000
Size:	8192

Details

Name:	00000009.00000002.776103821.00007FF4F5F67000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5F67000
Size:	8192

Details

Name:	00000004.00000002.404139745.0000000002C1D000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C1D000
Size:	8192

Details

Name:	00000016.00000002.526095318.00007FF50B08F000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50B08F000
Size:	8192

Details

Name:	00000006.00000003.380029082.0000000004A10000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A10000
Size:	4096

Details

Name:	00000004.00000002.404256855.0000000002D71000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D71000
Size:	12288

Details

Name:	0000000A.00000002.772037990.00000030D7AFF000.00000004.00000010.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	30D7AFF000
Size:	4096

Details

Name:	00000006.00000002.415063778.0000000002D71000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D71000
Size:	12288

Details

Name:	00000004.00000002.403959559.0000000000940000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	940000
Size:	16384

Details

Name:	00000009.00000002.775237210.00007DF50B960000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50B960000
Size:	4096

Details

Name:	00000003.00000002.775797215.0000000002BE7000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BE7000
Size:	12288

Details

Name:	00000002.00000002.395347205.0000000002E01000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E01000
Size:	8192

Details

Name:	00000006.00000003.377494135.0000000000DC3000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DC3000
Size:	110592

Details

Name:	00000003.00000002.777113733.000000000472D000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	472D000
Size:	12288

Details

Name:	00000002.00000002.394450916.0000000000A8B000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	A8B000
Size:	12288

Details

Name:	00000025.00000002.739760455.0000027D23200000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27D23200000
Size:	4096

Details

Name:	00000009.00000002.772095187.00000165BA060000.00000004.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	165BA060000
Size:	4096

Details

Name:	00000004.00000003.387458212.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000013.00000002.494642437.00007FF586D2D000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586D2D000
Size:	16384

Details

Name:	00000002.00000003.366759634.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000005.00000002.619939736.000001F798E4D000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798E4D000
Size:	12288

Details

Name:	0000000A.00000002.774507005.00007FF5CC637000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC637000
Size:	20480

Details

Name:	00000009.00000002.775496732.00007FF4F5B0F000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5B0F000
Size:	8192

Details

Name:	00000016.00000002.526108140.00007FF50B096000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50B096000
Size:	16384

Details

Name:	00000010.00000002.434096522.000001987043C000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1987043C000
Size:	94208

Details

Name:	00000002.00000002.395406961.00000000031B0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	31B0000
Size:	4096

Details

Name:	00000021.00000003.679144568.000001BAEF994000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF994000
Size:	45056

Details

Name:	00000005.00000002.620478102.00007FF542FBF000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF542FBF000
Size:	4096

Details

Name:	00000013.00000002.494286328.0000020E58271000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20E58271000
Size:	49152

Details

Name:	00000005.00000002.620259979.00007DF558D20000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF558D20000
Size:	4096

Details

Name:	00000021.00000003.687114622.000001BAEF999000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF999000
Size:	32768

Details

Name:	00000023.00000002.688472696.000002AF48270000.00000004.00000040.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2AF48270000
Size:	12288

Details

Name:	0000000B.00000000.393979610.00007DF5EA4A0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EA4A0000
Size:	4096

Details

Name:	0000000D.00000002.773624264.00007DF52EFF2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF52EFF2000
Size:	4096

Details

Name:	00000003.00000003.656691553.0000000000CBE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CBE000
Size:	4096

Details

Name:	00000000.00000003.390989016.0000000000BE0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000005.00000002.620419556.00007FF542F61000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF542F61000
Size:	4096

Details

Name:	00000025.00000002.740338575.00007FF4FDA78000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDA78000
Size:	49152

Details

Name:	00000002.00000003.392491712.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	0000000A.00000003.393121513.000001996B064000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1996B064000
Size:	4096

Details

Name:	00000007.00000002.775180916.00007FF58EB5E000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58EB5E000
Size:	45056

Details

Name:	00000002.00000002.394414580.0000000000A80000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	A80000
Size:	20480

Details

Name:	00000016.00000002.525180182.000000DD004FE000.00000004.00000010.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DD004FE000
Size:	8192

Details

Name:	00000006.00000000.281772820.000000007F320000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F320000
Size:	4096

Details

Name:	00000003.00000003.701203348.0000000000CB8000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CB8000
Size:	28672

Details

Name:	0000000D.00000003.398036996.000002C79EBF0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C79EBF0000
Size:	4096

Details

Name:	00000000.00000003.424332359.0000000000D95000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D95000
Size:	4096

Details

Name:	0000000A.00000002.775627192.00007FF5CC92B000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC92B000
Size:	4096

Details

Name:	00000005.00000002.622087509.00007FF54342B000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54342B000
Size:	4096

Details

Name:	00000006.00000003.389876133.00000000049C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	49C0000
Size:	4096

Details

Name:	00000003.00000003.384479414.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	0000000A.00000002.772672211.000001996ADE0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1996ADE0000
Size:	4096

Details

Name:	00000003.00000003.364750182.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000021.00000002.719566466.00007FF5304C3000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5304C3000
Size:	4096

Details

Name:	00000005.00000003.261565795.000001F798D80000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798D80000
Size:	4096

Details

Name:	00000016.00000002.525332768.000002112F602000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2112F602000
Size:	65536

Details

Name:	0000000A.00000002.774925528.00007FF5CC823000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC823000
Size:	4096

Details

Name:	00000010.00000002.434423120.00007FF5AA978000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AA978000
Size:	4096

Details

Name:	00000023.00000002.688520904.000002AF482F8000.00000004.00000001.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2AF482F8000
Size:	28672

Details

Name:	00000010.00000002.434256189.00007DF5C07A0000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5C07A0000
Size:	4096

Details

Name:	00000016.00000002.525278989.000002112F4D0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2112F4D0000
Size:	4096

Details

Name:	00000021.00000003.706004571.000001BAEF99D000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF99D000
Size:	4096

Details

Name:	00000021.00000002.718403439.000001BAEF116000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF116000
Size:	8192

Details

Name:	00000021.00000003.698332517.000001BAEF9B9000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF9B9000
Size:	65536

Details

Name:	0000000A.00000002.771749746.00000030D72EB000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	30D72EB000
Size:	20480

Details

Name:	00000023.00000002.688639272.00007DF5E0E42000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E0E42000
Size:	4096

Details

Name:	0000000B.00000002.417098052.00007FF5D4863000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D4863000
Size:	4096

Details

Name:	00000021.00000003.696624977.000001BAEF98C000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF98C000
Size:	4096

Details

Name:	00000004.00000002.403862628.00000000005D0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	5D0000
Size:	4096

Details

Name:	0000001E.00000002.774855470.00007FF52A785000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52A785000
Size:	8192

Details

Name:	00000016.00000002.525316502.000002112F5F0000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2112F5F0000
Size:	4096

Details

Name:	00000003.00000002.777987465.000000006EBF1000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6EBF1000
Size:	180224

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000002.00000002.395380521.0000000003030000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3030000
Size:	65536

Details

Name:	00000009.00000002.774499527.00000165BA870000.00000008.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page write copy
Base address:	165BA870000
Size:	266240

Details

Name:	00000005.00000002.622027186.00007FF54340D000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54340D000
Size:	16384

Details

Name:	00000005.00000002.619740672.000001F793E02000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F793E02000
Size:	4096

Details

Name:	00000006.00000003.387081899.00000000049C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	49C0000
Size:	4096

Details

Name:	00000005.00000002.620516538.00007FF5430E9000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5430E9000
Size:	4096

Details

Name:	00000013.00000002.494382965.00007DF59C650000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF59C650000
Size:	4096

Details

Name:	00000002.00000002.395279428.0000000002D85000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D85000
Size:	12288

Details

Name:	00000025.00000002.739419816.000000A07027F000.00000004.00000010.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A07027F000
Size:	4096

Details

Name:	0000001E.00000002.775180646.00007FF52A83E000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52A83E000
Size:	16384

Details

Name:	00000013.00000002.494527029.00007FF586C47000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586C47000
Size:	4096

Details

Name:	00000004.00000000.263609914.000000007FC80000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FC80000
Size:	12288

Details

Name:	00000009.00000002.771877142.00000025E5A7E000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	25E5A7E000
Size:	8192

Details

Name:	00000021.00000002.717588688.00000034B307E000.00000004.00000010.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	34B307E000
Size:	8192

Details

Name:	0000001E.00000002.775077665.00007FF52A820000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52A820000
Size:	36864

Details

Name:	00000013.00000002.494378266.00007DF59C642000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF59C642000
Size:	4096

Details

Name:	00000003.00000002.777622574.000000000524D000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	524D000
Size:	8192

Details

Name:	00000023.00000002.688424083.000002AF481E0000.00000004.00000001.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2AF481E0000
Size:	4096

Details

Name:	00000023.00000002.688611449.00007DF5E0E30000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E0E30000
Size:	4096

Details

Name:	00000021.00000002.719551228.00007FF5304BC000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5304BC000
Size:	4096

Details

Name:	00000002.00000003.349980660.0000000000C30000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C30000
Size:	4096

Details

Name:	00000004.00000002.403854871.00000000005C0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	5C0000
Size:	16384

Details

Name:	00000003.00000000.247171727.0000000002E17000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E17000
Size:	16384

Details

Name:	00000009.00000002.775041792.00000165BAB00000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	165BAB00000
Size:	4096

Details

Name:	00000006.00000002.415694607.00000000048E0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	48E0000
Size:	733184

Details

Name:	00000003.00000003.378749897.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000003.00000002.776170098.0000000002D08000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D08000
Size:	12288

Details

Name:	0000000B.00000002.417133098.00007FF5D4ADD000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D4ADD000
Size:	28672

Details

Name:	00000004.00000003.393256266.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000006.00000002.414459942.0000000002D31000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D31000
Size:	4096

Details

Name:	00000002.00000003.360329487.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	0000001E.00000000.660427804.00007FF51E4FE000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51E4FE000
Size:	8192

Details

Name:	00000021.00000003.717321789.000001BAEF052000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF052000
Size:	4096

Details

Name:	00000003.00000003.394960245.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000021.00000002.719390304.00007FF5303DD000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5303DD000
Size:	12288

Details

Name:	00000003.00000003.363678426.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000021.00000002.719796789.00007FF5305BB000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5305BB000
Size:	8192

Details

Name:	00000000.00000003.737116546.0000000000DE4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DE4000
Size:	131072

Details

Name:	00000005.00000002.621195953.00007FF543300000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF543300000
Size:	12288

Details

Name:	00000000.00000002.772036218.0000000000ADB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	ADB000
Size:	20480

Details

Name:	0000000A.00000002.774229120.00007DF5E2232000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E2232000
Size:	4096

Details

Name:	00000004.00000002.404069193.0000000000EB0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	EB0000
Size:	4096

Details

Name:	00000006.00000002.415776405.00000000049A0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	49A0000
Size:	12288

Details

Name:	00000023.00000002.688270442.000000DD13DFC000.00000004.00000010.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DD13DFC000
Size:	16384

Details

Name:	00000002.00000002.394819546.0000000000C7E000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C7E000
Size:	12288

Details

Name:	00000021.00000002.717844639.000001BAEEFE0000.00000004.00000020.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1BAEEFE0000
Size:	12288

Details

Name:	00000002.00000002.395611471.00000000063AF000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	63AF000
Size:	4096

Details

Name:	00000013.00000002.494155285.000000A5266FE000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A5266FE000
Size:	8192

Details

Name:	00000016.00000002.525668756.00007DF41E890000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF41E890000
Size:	20480

Details

Name:	00000013.00000002.494239377.0000020E5822A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20E5822A000
Size:	69632

Details

Name:	0000000A.00000002.775567877.00007FF5CC91E000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC91E000
Size:	16384

Details

Name:	0000000A.00000002.775331110.00007FF5CC8FB000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC8FB000
Size:	8192

Details

Name:	00000003.00000003.342595716.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000003.00000003.360898985.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000003.00000003.365286032.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000021.00000003.705796483.000001BAEF99E000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF99E000
Size:	61440

Details

Name:	00000006.00000003.377524976.0000000000DBF000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DBF000
Size:	8192

Details

Name:	00000002.00000003.348842170.0000000000C30000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C30000
Size:	4096

Details

Name:	00000023.00000002.688629215.00007DF5E0E40000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E0E40000
Size:	4096

Details

Name:	00000003.00000003.376539660.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000025.00000002.739987777.00007FF4FD623000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FD623000
Size:	20480

Details

Name:	00000025.00000002.739647176.0000027D23055000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	27D23055000
Size:	90112

Details

Name:	00000016.00000002.526071482.00007FF50B01A000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50B01A000
Size:	16384

Details

Name:	00000004.00000002.404047354.0000000000D30000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	D30000
Size:	65536

Details

Name:	0000000B.00000000.393983388.00007DF5EA4A2000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EA4A2000
Size:	4096

Details

Name:	00000004.00000003.385483851.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000006.00000002.413958909.0000000000DBE000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	DBE000
Size:	12288

Details

Name:	0000001E.00000002.775142233.00007FF52A834000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52A834000
Size:	4096

Details

Name:	00000003.00000002.777841622.000000006EB93000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6EB93000
Size:	4096

Details

Name:	00000007.00000002.773272209.000001E0F8850000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E0F8850000
Size:	4096

Details

Name:	0000000B.00000003.416555819.000001C93E24D000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C93E24D000
Size:	28672

Details

Name:	00000006.00000003.376971353.0000000000FF0000.00000040.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000003.00000003.390988140.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000025.00000002.739488243.0000027D22E30000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27D22E30000
Size:	4096

Details

Name:	00000005.00000002.621862727.00007FF54335D000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54335D000
Size:	28672

Details

Name:	00000016.00000002.525575500.000002112F702000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2112F702000
Size:	12288

Details

Name:	00000003.00000003.376238081.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000003.00000002.776320745.0000000002D40000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D40000
Size:	12288

Details

Name:	00000009.00000002.771989971.00000025E5D7F000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	25E5D7F000
Size:	4096

Details

Name:	00000003.00000003.387625825.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000000.00000003.382949144.0000000000BE0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000021.00000003.691031080.000001BAEFE02000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEFE02000
Size:	184320

Details

Name:	0000000B.00000003.416538234.000001C93E240000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C93E240000
Size:	28672

Details

Name:	00000006.00000003.390140281.00000000049C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	49C0000
Size:	4096

Details

Name:	0000000B.00000002.417087475.00007FF5D4756000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D4756000
Size:	4096

Details

Name:	00000005.00000000.260065021.00007DF558D32000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF558D32000
Size:	4096

Details

Name:	00000009.00000002.775272337.00007DF50B962000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50B962000
Size:	4096

Details

Name:	00000023.00000002.688409005.000002AF480F0000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AF480F0000
Size:	12288

Details

Name:	00000025.00000002.739345189.000000A06FCFE000.00000004.00000010.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A06FCFE000
Size:	8192

Details

Name:	00000013.00000002.494361960.0000020E58A02000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20E58A02000
Size:	4096

Details

Name:	00000004.00000002.404180785.0000000002D16000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D16000
Size:	8192

Details

Name:	00000003.00000002.771774896.0000000000681000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	681000
Size:	4096

Details

Name:	0000001E.00000002.772670846.0000017CFF260000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	17CFF260000
Size:	4096

Details

Name:	0000000A.00000002.774308192.00007FF5CC16D000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC16D000
Size:	16384

Details

Name:	00000025.00000002.740581147.00007FF4FDB4E000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDB4E000
Size:	16384

Details

Name:	00000003.00000003.567489863.0000000000CBD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CBD000
Size:	8192

Details

Name:	00000021.00000002.719207043.00007FF5302F1000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5302F1000
Size:	4096

Details

Name:	00000003.00000002.771984287.00000000008CB000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8CB000
Size:	20480

Details

Name:	00000002.00000003.351119653.0000000000C30000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C30000
Size:	4096

Details

Name:	00000013.00000002.494632228.00007FF586D20000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586D20000
Size:	36864

Details

Name:	00000003.00000002.778264412.000000007FAB2000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FAB2000
Size:	4096

Details

Name:	0000000B.00000002.416780320.000001C93E200000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C93E200000
Size:	73728

Details

Name:	00000003.00000003.358487913.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000003.00000003.478821243.0000000000C54000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C54000
Size:	315392

Details

Name:	0000000D.00000002.772800545.000002C79EC2A000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C79EC2A000
Size:	45056

Details

Name:	0000000D.00000002.772619534.000002C79EC13000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C79EC13000
Size:	90112

Details

Name:	00000021.00000002.717682497.00000034B367F000.00000004.00000010.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	34B367F000
Size:	4096

Details

Name:	00000003.00000002.777738203.0000000005717000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5717000
Size:	4096

Details

Name:	0000001E.00000002.775159162.00007FF52A83B000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52A83B000
Size:	8192

Details

Name:	00000004.00000002.404097724.0000000000FC0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FC0000
Size:	12288

Details

Name:	00000002.00000003.356545500.0000000000C30000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C30000
Size:	4096

Details

Name:	0000000D.00000002.773205837.000002C79ED02000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C79ED02000
Size:	28672

Details

Name:	00000003.00000002.776226614.0000000002D1D000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D1D000
Size:	8192

Details

Name:	00000003.00000003.434339662.0000000000C54000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C54000
Size:	4096

Details

Name:	00000016.00000002.525362368.000002112F613000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2112F613000
Size:	90112

Details

Name:	00000002.00000003.364348105.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000009.00000002.775554582.00007FF4F5BBE000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5BBE000
Size:	4096

Details

Name:	00000002.00000003.358153046.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000021.00000003.700450766.000001BAEFF02000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEFF02000
Size:	425984

Details

Name:	00000016.00000002.525582546.000002112F708000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2112F708000
Size:	24576

Details

Name:	00000003.00000003.357148641.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	0000001E.00000003.724955471.0000017CFF3D0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	17CFF3D0000
Size:	8192

Details

Name:	00000000.00000003.516742214.0000000000DE0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000004.00000002.403953252.000000000087D000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	87D000
Size:	4096

Details

Name:	00000006.00000003.395115137.00000000049C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	49C0000
Size:	4096

Details

Name:	00000009.00000002.776464239.00007FF4F602E000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F602E000
Size:	45056

Details

Name:	00000021.00000003.698375134.000001BAEF998000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF998000
Size:	61440

Details

Name:	00000023.00000000.676472321.00007DF5E0E42000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E0E42000
Size:	4096

Details

Name:	0000000D.00000002.773784405.00007DF52F010000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF52F010000
Size:	12288

Details

Name:	00000002.00000002.394673805.0000000000B90000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	B90000
Size:	4096

Details

Name:	0000000B.00000003.416457091.000001C93E25A000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C93E25A000
Size:	12288

Details

Name:	00000006.00000003.388456939.00000000049C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	49C0000
Size:	4096

Details

Name:	00000002.00000002.395625435.00000000063E3000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	63E3000
Size:	8192

Details

Name:	00000004.00000002.404236465.0000000002D5A000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D5A000
Size:	36864

Details

Name:	00000002.00000002.395354553.0000000002E05000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E05000
Size:	24576

Details

Name:	00000002.00000003.363276546.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000003.00000002.771843828.0000000000830000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	830000
Size:	102400

Details

Name:	00000000.00000002.777560623.000000007F2E0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F2E0000
Size:	4096

Details

Name:	00000021.00000002.719587742.00007FF5304D7000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5304D7000
Size:	8192

Details

Name:	00000003.00000003.360630901.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	0000000A.00000002.772267519.00000030D7FFF000.00000004.00000010.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	30D7FFF000
Size:	4096

Details

Name:	00000005.00000002.619900415.000001F798E40000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798E40000
Size:	49152

Details

Name:	00000000.00000002.775419051.00000000027F0000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	27F0000
Size:	16384

Details

Name:	00000000.00000002.774777367.0000000001290000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1290000
Size:	4096

Details

Name:	00000002.00000003.394037907.0000000000C7A000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C7A000
Size:	28672

Details

Name:	00000007.00000002.772488391.000001E0F8200000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E0F8200000
Size:	4096

Details

Name:	00000010.00000002.434575447.00007FF5AACEF000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AACEF000
Size:	20480

Details

Name:	0000001E.00000002.773588469.0000017CFFF80000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17CFFF80000
Size:	4096

Details

Name:	00000016.00000002.525793786.00007FF50AB93000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50AB93000
Size:	20480

Details

Name:	00000003.00000003.394359847.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000003.00000002.772285591.0000000000A80000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	A80000
Size:	12288

Details

Name:	0000001E.00000002.772730186.0000017CFF360000.00000004.00000020.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	17CFF360000
Size:	65536

Details

Name:	00000002.00000003.352894760.0000000000C30000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C30000
Size:	4096

Details

Name:	00000005.00000002.621924465.00007FF543373000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF543373000
Size:	12288

Details

Name:	00000003.00000002.775747101.0000000002BD6000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BD6000
Size:	28672

Details

Name:	00000000.00000003.424381122.0000000000DDB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DDB000
Size:	12288

Details

Name:	00000007.00000002.774568060.00007FF58EA97000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58EA97000
Size:	8192

Details

Name:	00000003.00000002.775715201.0000000002B0D000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B0D000
Size:	12288

Details

Name:	00000025.00000002.739526212.0000027D22F30000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27D22F30000
Size:	16384

Details

Name:	00000021.00000003.682165677.000001BAEF9AA000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF9AA000
Size:	114688

Details

Name:	00000000.00000003.393553792.0000000000BE0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000003.00000003.656721397.0000000000CBE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CBE000
Size:	4096

Details

Name:	00000010.00000002.434952469.00007FF5AAE8B000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AAE8B000
Size:	8192

Details

Name:	00000002.00000003.382131579.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000007.00000002.774103337.00007FF58E8A6000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58E8A6000
Size:	4096

Details

Name:	0000000A.00000002.775113011.00007FF5CC865000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC865000
Size:	8192

Details

Name:	0000000D.00000002.771835502.000000EAF0A7C000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	EAF0A7C000
Size:	16384

Details

Name:	00000023.00000002.688786704.00007FF5CB4F8000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CB4F8000
Size:	12288

Details

Name:	00000021.00000003.677825126.000001BAEFD40000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEFD40000
Size:	4096

Details

Name:	00000009.00000002.775132215.00007DF50B950000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50B950000
Size:	4096

Details

Name:	00000013.00000000.479632707.00007FF586D4F000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586D4F000
Size:	20480

Details

Name:	00000009.00000002.774253321.00000165BA313000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	165BA313000
Size:	4096

Details

Name:	00000023.00000002.688894392.00007FF5CB53F000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CB53F000
Size:	20480

Details

Name:	00000002.00000003.387222339.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	0000000D.00000002.775349874.00007FF5196FF000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5196FF000
Size:	20480

Details

Name:	00000005.00000002.621143387.00007FF5432E7000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5432E7000
Size:	4096

Details

Name:	00000006.00000003.383237147.0000000004A10000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A10000
Size:	4096

Details

Name:	00000007.00000002.771877706.000000CCBCF7B000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	CCBCF7B000
Size:	20480

Details

Name:	00000003.00000002.777660969.000000000562F000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	562F000
Size:	4096

Details

Name:	00000009.00000002.775008880.00000165BAA02000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	165BAA02000
Size:	4096

Details

Name:	00000005.00000003.618818021.000001F7936FF000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F7936FF000
Size:	8192

Details

Name:	00000003.00000003.656702485.0000000000CB3000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CB3000
Size:	40960

Details

Name:	0000000B.00000002.417065628.00007FF5D4381000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D4381000
Size:	4096

Details

Name:	00000003.00000003.328115474.0000000000A60000.00000040.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page execute and read and write
Base address:	A60000
Size:	4096

Details

Name:	00000002.00000003.394018786.0000000000C9E000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C9E000
Size:	4096

Details

Name:	00000025.00000002.740041996.00007FF4FD638000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FD638000
Size:	4096

Details

Name:	00000023.00000002.688798848.00007FF5CB4FF000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CB4FF000
Size:	8192

Details

Name:	00000000.00000002.776060582.0000000002E2D000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2E2D000
Size:	12288

Details

Name:	0000001E.00000002.774577656.00007FF52A679000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52A679000
Size:	4096

Details

Name:	00000000.00000003.471967147.0000000000D9C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D9C000
Size:	274432

Details

Name:	00000002.00000003.383806173.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000005.00000002.622052221.00007FF54341B000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54341B000
Size:	8192

Details

Name:	00000021.00000003.677567273.000001BAEF0A3000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF0A3000
Size:	4096

Details

Name:	00000021.00000003.694364259.000001BAEF98C000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF98C000
Size:	4096

Details

Name:	00000013.00000002.494366717.00007DF49A510000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF49A510000
Size:	20480

Details

Name:	00000006.00000002.415814823.0000000006590000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6590000
Size:	4096

Details

Name:	0000001E.00000002.771985711.0000005B620FE000.00000004.00000010.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5B620FE000
Size:	8192

Details

Name:	00000006.00000002.414469760.0000000002D36000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D36000
Size:	4096

Details

Name:	00000021.00000002.718674523.000001BAEF926000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF926000
Size:	196608

Details

Name:	00000002.00000003.345058292.0000000000C30000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C30000
Size:	4096

Details

Name:	00000000.00000002.777512720.000000007F1D0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F1D0000
Size:	20480

Details

Name:	00000002.00000003.367563401.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000006.00000002.415549663.0000000002DA4000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DA4000
Size:	4096

Details

Name:	00000002.00000003.393954296.00000000046D0000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	46D0000
Size:	4096

Details

Name:	00000021.00000002.719100366.00007FF530258000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF530258000
Size:	4096

Details

Name:	00000004.00000002.404346024.0000000002E0C000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E0C000
Size:	4096

Details

Name:	00000003.00000003.433791937.0000000000C99000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C99000
Size:	4096

Details

Name:	00000021.00000003.687151547.000001BAEFE21000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEFE21000
Size:	118784

Details

Name:	00000021.00000003.682433388.000001BAEFE1D000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEFE1D000
Size:	118784

Details

Name:	00000002.00000002.395676397.000000007F580000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F580000
Size:	4096

Details

Name:	00000013.00000002.494567210.00007FF586C7D000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586C7D000
Size:	28672

Details

Name:	00000025.00000002.739697744.0000027D23087000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	27D23087000
Size:	40960

Details

Name:	00000002.00000003.342334045.0000000000C20000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C20000
Size:	4096

Details

Name:	00000003.00000002.776426631.0000000002D65000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D65000
Size:	16384

Details

Name:	0000001E.00000003.675809588.0000017CFFFD0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	17CFFFD0000
Size:	20480

Details

Name:	00000021.00000003.702338181.000001BAEF9AD000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF9AD000
Size:	200704

Details

Name:	00000002.00000002.394913665.0000000002BE3000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BE3000
Size:	4096

Details

Name:	00000000.00000003.516748648.0000000000DE3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DE3000
Size:	45056

Details

Name:	0000001E.00000002.775113404.00007FF52A82D000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52A82D000
Size:	16384

Details

Name:	00000002.00000000.246697998.0000000002E17000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E17000
Size:	16384

Details

Name:	00000006.00000003.381094908.0000000004A10000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A10000
Size:	4096

Details

Name:	00000010.00000000.420712882.00007DF5C07A0000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5C07A0000
Size:	4096

Details

Name:	00000003.00000003.393052952.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000003.00000002.778202689.000000007FAA0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FAA0000
Size:	4096

Details

Name:	00000005.00000002.620673199.00007FF5431C4000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5431C4000
Size:	8192

Details

Name:	0000000D.00000002.771990354.000000EAF0E7D000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	EAF0E7D000
Size:	12288

Details

Name:	00000006.00000003.380290731.0000000004A10000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A10000
Size:	4096

Details

Name:	00000010.00000002.434118521.0000019870454000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	19870454000
Size:	32768

Details

Name:	00000010.00000002.434531358.00007FF5AAC8E000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AAC8E000
Size:	4096

Details

Name:	00000021.00000003.701343742.000001BAEF988000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF988000
Size:	49152

Details

Name:	00000025.00000002.740377083.00007FF4FDA95000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDA95000
Size:	8192

Details

Name:	0000000B.00000002.417148690.00007FF5D4AE9000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D4AE9000
Size:	20480

Details

Name:	00000002.00000002.394315975.00000000007BB000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7BB000
Size:	20480

Details

Name:	00000003.00000002.775844276.0000000002C0A000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C0A000
Size:	8192

Details

Name:	00000003.00000003.656310524.00000000057D1000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57D1000
Size:	315392

Details

Name:	00000005.00000003.618962591.000001F798AA0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798AA0000
Size:	4096

Details

Name:	00000005.00000002.620544976.00007FF54311A000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54311A000
Size:	4096

Details

Name:	00000004.00000002.403921603.000000000085D000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	85D000
Size:	49152

Details

Name:	00000003.00000003.700543019.0000000000CAF000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CAF000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000002.622068950.00007FF54341E000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54341E000
Size:	16384

Details

Name:	00000003.00000002.777135064.000000000476A000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	476A000
Size:	24576

Details

Name:	00000007.00000000.280421135.00007FF58EB8F000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58EB8F000
Size:	20480

Details

Name:	00000009.00000002.776310242.00007FF4F5FA3000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5FA3000
Size:	12288

Details

Name:	00000000.00000002.772498611.0000000000C60000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	C60000
Size:	16384

Details

Name:	00000005.00000002.619490745.000001F793657000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F793657000
Size:	53248

Details

Name:	00000021.00000002.719575103.00007FF5304C7000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5304C7000
Size:	4096

Details

Name:	00000003.00000003.523831211.0000000000CB4000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CB4000
Size:	45056

Details

Name:	0000001E.00000002.773474013.0000017CFFAE0000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	17CFFAE0000
Size:	16384

Details

Name:	00000007.00000002.773203480.000001E0F84D0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E0F84D0000
Size:	4096

Details

Name:	0000000D.00000002.771759397.000000EAF05CC000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	EAF05CC000
Size:	16384

Details

Name:	00000000.00000002.777393794.000000006EC1D000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6EC1D000
Size:	4096

Details

Name:	00000021.00000002.718918904.00007DF545EE0000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF545EE0000
Size:	12288

Details

Name:	00000003.00000002.777202668.000000000483E000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	483E000
Size:	8192

Details

Name:	00000002.00000003.359760137.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000021.00000002.719467514.00007FF53047D000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53047D000
Size:	8192

Details

Name:	00000002.00000003.383471422.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000006.00000003.411154651.0000000000DC8000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DC8000
Size:	69632

Details

Name:	00000004.00000003.393471689.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000005.00000003.261585120.000001F798C60000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798C60000
Size:	8192

Details

Name:	00000023.00000002.688535747.000002AF48300000.00000004.00000001.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2AF48300000
Size:	57344

Details

Name:	00000009.00000002.772633452.00000165BA213000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	165BA213000
Size:	69632

Details

Name:	00000023.00000000.676381530.000002AF480D0000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AF480D0000
Size:	102400

Details

Name:	00000007.00000002.773419597.00007DF5A4480000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A4480000
Size:	4096

Details

Name:	00000010.00000002.434166687.000001987048A000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1987048A000
Size:	28672

Details

Name:	00000006.00000003.383514699.0000000004A10000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A10000
Size:	4096

Details

Name:	00000013.00000002.494513168.00007FF586BC4000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586BC4000
Size:	16384

Details

Name:	00000021.00000003.700205060.000001BAEFE6A000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEFE6A000
Size:	425984

Details

Name:	0000000D.00000002.774403116.00007FF5195E3000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5195E3000
Size:	4096

Details

Name:	00000009.00000002.776180404.00007FF4F5F78000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5F78000
Size:	49152

Details

Name:	00000000.00000003.387826649.0000000000BE0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000021.00000002.719594816.00007FF5304DC000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5304DC000
Size:	45056

Details

Name:	0000000A.00000002.774119223.00007DF5E2220000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E2220000
Size:	4096

Details

Name:	00000003.00000002.773295758.0000000000C29000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	C29000
Size:	4096

Details

Name:	00000003.00000003.362003776.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	0000000A.00000002.775290866.00007FF5CC8F6000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC8F6000
Size:	16384

Details

Name:	0000000D.00000002.775253277.00007FF5196EE000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5196EE000
Size:	16384

Details

Name:	00000021.00000003.703723775.000001BAEF99A000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF99A000
Size:	4096

Details

Name:	00000000.00000002.772640855.0000000000D10000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	D10000
Size:	36864

Details

Name:	00000003.00000002.774785138.0000000000F40000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	F40000
Size:	733184

Details

Name:	00000006.00000003.380825761.0000000004A10000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A10000
Size:	4096

Details

Name:	00000004.00000002.403891935.0000000000830000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	830000
Size:	32768

Details

Name:	00000000.00000002.775317856.00000000027AB000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	27AB000
Size:	20480

Details

Name:	00000023.00000002.688730995.00007FF5CB479000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CB479000
Size:	20480

Details

Name:	00000002.00000002.395131469.0000000002D44000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D44000
Size:	40960

Details

Name:	00000005.00000002.619551441.000001F79368F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F79368F000
Size:	8192

Details

Name:	00000006.00000003.393054709.00000000049C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	49C0000
Size:	4096

Details

Name:	00000010.00000002.434645963.00007FF5AAD97000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AAD97000
Size:	4096

Details

Name:	0000000A.00000002.771837015.00000030D76FB000.00000004.00000010.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	30D76FB000
Size:	20480

Details

Name:	0000001E.00000002.771860551.0000005B61EFE000.00000004.00000010.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5B61EFE000
Size:	8192

Details

Name:	00000005.00000002.619845324.000001F798E23000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798E23000
Size:	49152

Details

Name:	00000004.00000002.404290183.0000000002D89000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D89000
Size:	8192

Details

Name:	00000003.00000002.777811666.000000006EB90000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6EB90000
Size:	4096

Details

Name:	00000005.00000002.621946712.00007FF543395000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF543395000
Size:	12288

Details

Name:	00000016.00000002.526013896.00007FF50AFFD000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50AFFD000
Size:	28672

Details

Name:	00000005.00000003.618828730.000001F793702000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F793702000
Size:	45056

Details

Name:	00000021.00000002.718295717.000001BAEF0DC000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF0DC000
Size:	49152

Details

Name:	00000016.00000002.526064127.00007FF50B013000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50B013000
Size:	12288

Details

Name:	00000009.00000002.774186935.00000165BA302000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	165BA302000
Size:	32768

Details

Name:	00000004.00000002.404197611.0000000002D31000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D31000
Size:	4096

Details

Name:	00000006.00000003.393554180.00000000049C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	49C0000
Size:	4096

Details

Name:	00000005.00000002.621778110.00007FF543348000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF543348000
Size:	49152

Details

Name:	00000013.00000000.479584438.00007DF59C650000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF59C650000
Size:	4096

Details

Name:	00000016.00000002.525623105.000002112FA00000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2112FA00000
Size:	12288

Details

Name:	00000003.00000002.777249304.00000000048DE000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	48DE000
Size:	8192

Details

Name:	00000005.00000002.619240362.000000E3F4478000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	E3F4478000
Size:	32768

Details

Name:	00000000.00000002.772136383.0000000000BD0000.00000040.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page execute and read and write
Base address:	BD0000
Size:	4096

Details

Name:	00000005.00000003.618796013.000001F794520000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F794520000
Size:	8192

Details

Name:	00000005.00000003.618897902.000001F798D60000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798D60000
Size:	4096

Details

Name:	00000016.00000002.525590956.000002112F713000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2112F713000
Size:	12288

Details

Name:	00000003.00000002.776369546.0000000002D50000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D50000
Size:	32768

Details

Name:	0000000A.00000002.773249640.000001996B03E000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1996B03E000
Size:	8192

Details

Name:	00000007.00000002.773005475.000001E0F8268000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E0F8268000
Size:	53248

Details

Name:	00000004.00000002.404351368.0000000002E17000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E17000
Size:	16384

Details

Name:	00000021.00000002.719123693.00007FF5302C1000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5302C1000
Size:	4096

Details

Name:	0000001E.00000002.774875701.00007FF52A789000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52A789000
Size:	20480

Details

Name:	00000009.00000002.772363625.00000165BA0D0000.00000004.00000020.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	165BA0D0000
Size:	8192

Details

Name:	00000000.00000002.777049287.000000006EB93000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6EB93000
Size:	4096

Details

Name:	00000002.00000003.349444911.0000000000C30000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C30000
Size:	4096

Details

Name:	00000021.00000002.719222876.00007FF5302F3000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5302F3000
Size:	4096

Details

Name:	00000010.00000000.420724223.00007DF5C07B0000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5C07B0000
Size:	12288

Details

Name:	00000016.00000002.525306671.000002112F5D0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2112F5D0000
Size:	16384

Details

Name:	00000000.00000003.516063828.00000000040E1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	40E1000
Size:	475136

Details

Name:	00000006.00000002.412698477.0000000000C00000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	C00000
Size:	102400

Details

Name:	00000005.00000002.621018634.00007FF54327F000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54327F000
Size:	4096

Details

Name:	00000013.00000002.494393039.00007DF59C660000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF59C660000
Size:	12288

Details

Name:	00000006.00000003.379620291.0000000004A10000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A10000
Size:	4096

Details

Name:	00000002.00000002.394250483.0000000000720000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	720000
Size:	102400

Details

Name:	0000000A.00000002.774891433.00007FF5CC812000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC812000
Size:	16384

Details

Name:	00000021.00000003.694354557.000001BAEF993000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF993000
Size:	16384

Details

Name:	00000003.00000003.433265885.0000000000C5D000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C5D000
Size:	245760

Details

Name:	00000005.00000002.619763160.000001F798B30000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798B30000
Size:	4096

Details

Name:	00000009.00000002.771859916.00000025E597F000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	25E597F000
Size:	4096

Details

Name:	00000002.00000003.360865313.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000003.00000003.361200114.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000002.00000003.345861859.0000000000C30000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C30000
Size:	4096

Details

Name:	00000016.00000002.525513134.000002112F656000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2112F656000
Size:	106496

Details

Name:	00000000.00000003.384478465.0000000000BE0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000003.00000002.774715278.0000000000EFD000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	EFD000
Size:	12288

Details

Name:	00000010.00000002.434262902.00007DF5C07A2000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5C07A2000
Size:	4096

Details

Name:	0000000D.00000002.774281830.00007FF5195C0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5195C0000
Size:	8192

Details

Name:	00000002.00000003.350248656.0000000000C30000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C30000
Size:	4096

Details

Name:	00000004.00000003.403609515.000000000087D000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	87D000
Size:	4096

Details

Name:	00000000.00000002.772094634.0000000000BC0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	BC0000
Size:	4096

Details

Name:	00000021.00000003.677849948.000001BAEFD40000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEFD40000
Size:	4096

Details

Name:	00000010.00000002.434930344.00007FF5AAE70000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AAE70000
Size:	36864

Details

Name:	00000006.00000002.415453411.0000000002D89000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D89000
Size:	8192

Details

Name:	00000021.00000003.717332105.000001BAEF04F000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF04F000
Size:	12288

Details

Name:	00000003.00000003.390702421.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000010.00000002.433892254.0000019870340000.00000004.00000040.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	19870340000
Size:	4096

Details

Name:	00000006.00000002.413517008.0000000000D5B000.00000004.00000040.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	D5B000
Size:	12288

Details

Name:	00000006.00000002.414143924.0000000002BE8000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BE8000
Size:	8192

Details

Name:	00000010.00000002.434245796.00007DF5C0790000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5C0790000
Size:	4096

Details

Name:	00000021.00000003.690975970.000001BAEF98C000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF98C000
Size:	53248

Details

Name:	00000003.00000003.761774600.0000000000C9C000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C9C000
Size:	135168

Details

Name:	00000002.00000003.356009671.0000000000C30000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C30000
Size:	4096

Details

Name:	00000005.00000002.621586321.00007FF543337000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF543337000
Size:	8192

Details

Name:	0000001E.00000002.773642412.00007DF43E010000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF43E010000
Size:	20480

Details

Name:	00000000.00000002.772192633.0000000000C01000.00000020.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	C01000
Size:	45056

Details

Name:	00000003.00000002.777352156.0000000004D28000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4D28000
Size:	4096

Details

Name:	00000023.00000002.688199059.000000DD1399F000.00000004.00000010.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DD1399F000
Size:	4096

Details

Name:	00000021.00000003.679753436.000001BAEF965000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF965000
Size:	53248

Details

Name:	0000000B.00000002.416984676.000001C93E302000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C93E302000
Size:	16384

Details

Name:	00000021.00000002.718871175.00007DF545EC0000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF545EC0000
Size:	4096

Details

Name:	00000010.00000002.434181239.0000019870502000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	19870502000
Size:	16384

Details

Name:	00000025.00000002.739721955.0000027D23102000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	27D23102000
Size:	12288

Details

Name:	0000000B.00000002.416675125.00000032F707B000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	32F707B000
Size:	20480

Details

Name:	00000005.00000003.618949965.000001F798A90000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798A90000
Size:	4096

Details

Name:	00000023.00000002.688487920.000002AF482D0000.00000004.00000020.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2AF482D0000
Size:	69632

Details

Name:	00000006.00000002.415157213.0000000002D79000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D79000
Size:	8192

Details

Name:	00000005.00000003.277650296.000001F793F18000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F793F18000
Size:	4096

Details

Name:	00000003.00000003.394437247.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000002.00000002.395287014.0000000002D89000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D89000
Size:	8192

Details

Name:	0000000A.00000003.393104263.000001996B065000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1996B065000
Size:	61440

Details

Name:	00000013.00000003.493962237.0000020E5824E000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20E5824E000
Size:	12288

Details

Name:	00000005.00000003.617684514.000001F798C60000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798C60000
Size:	4096

Details

Name:	00000013.00000003.493940138.0000020E58255000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20E58255000
Size:	110592

Details

Name:	00000013.00000002.494188572.0000020E580E0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	20E580E0000
Size:	4096

Details

Name:	0000000B.00000002.416690961.00000032F717E000.00000004.00000010.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	32F717E000
Size:	8192

Details

Name:	00000003.00000003.377947987.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000010.00000002.433749402.0000000C24777000.00000004.00000010.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	C24777000
Size:	36864

Details

Name:	00000021.00000002.717604220.00000034B30FE000.00000004.00000010.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	34B30FE000
Size:	8192

Details

Name:	0000000B.00000002.417109697.00007FF5D4AA7000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D4AA7000
Size:	4096

Details

Name:	00000009.00000002.773329585.00000165BA270000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	165BA270000
Size:	94208

Details

Name:	00000016.00000002.526144040.00007FF50B0B4000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50B0B4000
Size:	4096

Details

Name:	00000007.00000002.775251290.00007FF58EB6D000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58EB6D000
Size:	16384

Details

Name:	00000003.00000002.775823028.0000000002BF2000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BF2000
Size:	4096

Details

Name:	0000000D.00000000.397322171.00007DF52F002000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF52F002000
Size:	4096

Details

Name:	00000025.00000002.739785795.0000027D23580000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27D23580000
Size:	4096

Details

Name:	00000000.00000003.648986549.0000000004154000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4154000
Size:	4096

Details

Name:	00000003.00000003.479570264.00000000056D1000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	56D1000
Size:	684032

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000025.00000002.739476098.0000027D22E20000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27D22E20000
Size:	12288

Details

Name:	00000010.00000002.434639429.00007FF5AAD93000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AAD93000
Size:	4096

Details

Name:	00000025.00000002.740058668.00007FF4FD813000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FD813000
Size:	4096

Details

Name:	00000021.00000002.719282762.00007FF530383000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF530383000
Size:	16384

Details

Name:	00000002.00000003.344150726.0000000000C20000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C20000
Size:	4096

Details

Name:	00000002.00000003.393758252.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000025.00000002.740092033.00007FF4FD923000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FD923000
Size:	4096

Details

Name:	0000000A.00000000.390986189.000001996ADB0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1996ADB0000
Size:	102400

Details

Name:	00000006.00000002.413980799.0000000000DC2000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	DC2000
Size:	8192

Details

Name:	00000006.00000002.412671615.0000000000A8D000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A8D000
Size:	12288

Details

Name:	00000021.00000002.719605799.00007FF5304E8000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5304E8000
Size:	49152

Details

Name:	00000000.00000003.395465752.0000000000BE0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000005.00000003.618805878.000001F794523000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F794523000
Size:	4096

Details

Name:	00000005.00000002.620902434.00007FF5431E8000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5431E8000
Size:	4096

Details

Name:	00000000.00000003.388457621.0000000000BE0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	0000000A.00000002.772362817.000001996ADA0000.00000004.00000040.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1996ADA0000
Size:	4096

Details

Name:	00000007.00000002.773568288.00007DF5A44A0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A44A0000
Size:	12288

Details

Name:	00000025.00000002.739409877.000000A07017F000.00000004.00000010.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A07017F000
Size:	4096

Details

Name:	00000010.00000002.434514685.00007FF5AAC63000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AAC63000
Size:	4096

Details

Name:	00000013.00000002.494538622.00007FF586C5C000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586C5C000
Size:	45056

Details

Name:	00000021.00000003.702207377.000001BAEF9AD000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF9AD000
Size:	176128

Details

Name:	00000003.00000002.777265243.000000000491F000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	491F000
Size:	4096

Details

Name:	00000007.00000002.774058413.00007FF58E81A000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58E81A000
Size:	4096

Details

Name:	00000005.00000002.619469943.000001F793640000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F793640000
Size:	90112

Details

Name:	00000002.00000003.383739166.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000003.00000003.356344570.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	0000000D.00000002.772307776.000002C79EB70000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C79EB70000
Size:	4096

Details

Name:	00000007.00000002.774140413.00007FF58E8D8000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58E8D8000
Size:	4096

Details

Name:	00000021.00000003.717312904.000001BAEF053000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF053000
Size:	12288

Details

Name:	00000007.00000000.280388594.00007DF5A4492000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A4492000
Size:	4096

Details

Name:	00000006.00000002.414160241.0000000002BF2000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BF2000
Size:	4096

Details

Name:	00000023.00000002.688174170.000000DD1389A000.00000004.00000001.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	DD1389A000
Size:	24576

Details

Name:	00000016.00000002.525969930.00007FF50AFDC000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50AFDC000
Size:	45056

Details

Name:	00000016.00000002.526086597.00007FF50B088000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50B088000
Size:	12288

Details

Name:	00000003.00000003.567501485.0000000000CBD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CBD000
Size:	8192

Details

Name:	00000003.00000003.433810410.0000000000C59000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C59000
Size:	262144

Details

Name:	0000000A.00000000.392034252.00007DF5E2220000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E2220000
Size:	4096

Details

Name:	00000003.00000003.356612294.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000004.00000003.400351689.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000025.00000002.740464747.00007FF4FDB1F000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDB1F000
Size:	8192

Details

Name:	00000002.00000003.381328526.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000013.00000002.494491473.00007FF586B63000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586B63000
Size:	4096

Details

Name:	00000021.00000002.718632082.000001BAEF91C000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF91C000
Size:	4096

Details

Name:	0000000B.00000002.417082751.00007FF5D4715000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D4715000
Size:	4096

Details

Name:	00000004.00000002.404039094.0000000000B30000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	B30000
Size:	32768

Details

Name:	00000003.00000002.772770477.0000000000BCA000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	BCA000
Size:	385024

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000006.00000002.414228621.0000000002C1D000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C1D000
Size:	8192

Details

Name:	0000000A.00000002.775130850.00007FF5CC869000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC869000
Size:	20480

Details

Name:	00000010.00000003.433348598.000001987045D000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1987045D000
Size:	4096

Details

Name:	00000009.00000002.776402874.00007FF4F601F000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F601F000
Size:	20480

Details

Name:	00000021.00000003.701370816.000001BAEF9A1000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF9A1000
Size:	32768

Details

Name:	00000025.00000002.739768127.0000027D23400000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27D23400000
Size:	12288

Details

Name:	00000021.00000002.717793222.000001BAEEF90000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1BAEEF90000
Size:	102400

Details

Name:	00000016.00000002.525828448.00007FF50ABA8000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50ABA8000
Size:	4096

Details

Name:	00000000.00000003.737070317.00000000040E5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	40E5000
Size:	4096

Details

Name:	00000003.00000003.744665500.0000000000CB6000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CB6000
Size:	4096

Details

Name:	00000025.00000002.740189558.00007FF4FD9AF000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FD9AF000
Size:	20480

Details

Name:	00000013.00000002.494444244.00007FF586819000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586819000
Size:	32768

Details

Name:	00000021.00000002.719806265.00007FF5305BE000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5305BE000
Size:	16384

Details

Name:	00000009.00000002.776357520.00007FF4F5FC5000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5FC5000
Size:	12288

Details

Name:	00000003.00000003.380658058.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000023.00000002.688683764.00007FF5CAD3E000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CAD3E000
Size:	4096

Details

Name:	00000021.00000002.717710972.00000034B37F8000.00000004.00000010.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	34B37F8000
Size:	32768

Details

Name:	0000000A.00000002.773550924.000001996B113000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1996B113000
Size:	4096

Details

Name:	00000000.00000003.470798431.0000000000DDF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DDF000
Size:	36864

Details

Name:	00000004.00000002.404501238.000000007FC72000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FC72000
Size:	4096

Details

Name:	00000000.00000002.775481649.00000000027F6000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	27F6000
Size:	12288

Details

Name:	00000000.00000002.776915465.0000000003F1F000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3F1F000
Size:	4096

Details

Name:	00000006.00000002.414757550.0000000002D50000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D50000
Size:	32768

Details

Name:	00000021.00000003.705983786.000001BAEF98E000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF98E000
Size:	24576

Details

Name:	00000000.00000003.424884285.0000000000DA1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DA1000
Size:	253952

Details

Name:	00000002.00000003.389198060.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000000.00000002.776820965.0000000003C1D000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3C1D000
Size:	12288

Details

Name:	00000016.00000000.513236640.00007DF5209C2000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5209C2000
Size:	4096

Details

Name:	00000000.00000002.776948710.000000000405A000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	405A000
Size:	24576

Details

Name:	0000000B.00000002.417232466.00007FF5D4BAB000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D4BAB000
Size:	4096

Details

Name:	0000000B.00000002.417022913.00007DF4E8370000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4E8370000
Size:	20480

Details

Name:	00000010.00000002.434354961.00007FF5AA963000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AA963000
Size:	20480

Details

Name:	0000001E.00000003.661142994.0000017CFF3A5000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	17CFF3A5000
Size:	4096

Details

Name:	00000016.00000002.525939005.00007FF50AFC3000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50AFC3000
Size:	4096

Details

Name:	0000000D.00000002.774908462.00007FF519665000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF519665000
Size:	12288

Details

Name:	00000023.00000002.688822917.00007FF5CB50B000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CB50B000
Size:	8192

Details

Name:	00000005.00000003.619075070.000001F7936AB000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F7936AB000
Size:	69632

Details

Name:	00000003.00000003.389600294.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000010.00000002.433556176.0000000C2416C000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C2416C000
Size:	16384

Details

Name:	00000002.00000003.363812414.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	0000000D.00000002.774135002.00007FF5193A8000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5193A8000
Size:	12288

Details

Name:	00000025.00000002.740138337.00007FF4FD94E000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FD94E000
Size:	4096

Details

Name:	00000005.00000002.620168626.000001F798EDF000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798EDF000
Size:	4096

Details

Name:	0000000A.00000002.773624496.000001996B400000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1996B400000
Size:	12288

Details

Name:	0000000A.00000002.774423385.00007FF5CC5BA000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC5BA000
Size:	4096

Details

Name:	00000004.00000000.262839512.000000007FC70000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FC70000
Size:	4096

Details

Name:	0000001E.00000002.775065995.00007FF52A81B000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52A81B000
Size:	8192

Details

Name:	00000006.00000002.414045043.0000000000F9E000.00000004.00000010.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F9E000
Size:	8192

Details

Name:	00000000.00000002.777474671.000000006ECC4000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6ECC4000
Size:	8192

Details

Name:	00000002.00000003.364616262.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	0000000B.00000002.416946084.000001C93E27E000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C93E27E000
Size:	16384

Details

Name:	00000007.00000002.774239947.00007FF58EA2D000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58EA2D000
Size:	8192

Details

Name:	00000013.00000002.494461326.00007FF586A03000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586A03000
Size:	4096

Details

Name:	00000007.00000002.775332361.00007FF58EB7B000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58EB7B000
Size:	8192

Details

Name:	00000003.00000003.343552560.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000003.00000003.746041129.000000000586C000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	586C000
Size:	466944

Details

Name:	00000002.00000002.395301594.0000000002D9D000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D9D000
Size:	8192

Details

Name:	00000003.00000002.776632620.0000000002DA2000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DA2000
Size:	12288

Details

Name:	00000002.00000003.387389524.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	0000000B.00000002.416750128.000001C93DFE0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1C93DFE0000
Size:	12288

Details

Name:	0000000B.00000002.417200304.00007FF5D4B80000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D4B80000
Size:	36864

Details

Name:	00000005.00000002.621314013.00007FF543308000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF543308000
Size:	8192

Details

Name:	00000007.00000000.280365844.00007DF5A4490000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A4490000
Size:	4096

Details

Name:	00000006.00000002.413641391.0000000000D60000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	D60000
Size:	4096

Details

Name:	00000002.00000003.387892475.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000002.00000003.367027576.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000002.00000003.394046691.0000000000C82000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C82000
Size:	32768

Details

Name:	00000021.00000002.718905750.00007DF545ED2000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF545ED2000
Size:	4096

Details

Name:	00000010.00000002.434883457.00007FF5AADEA000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AADEA000
Size:	16384

Details

Name:	00000000.00000003.561305345.0000000000DEB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DEB000
Size:	8192

Details

Name:	00000003.00000003.479682421.00000000051C9000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	51C9000
Size:	466944

Details

Name:	0000000A.00000002.771969120.00000030D78FC000.00000004.00000010.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	30D78FC000
Size:	16384

Details

Name:	00000003.00000000.247186852.000000007FAB0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FAB0000
Size:	4096

Details

Name:	0000000A.00000002.774248977.00007DF5E2240000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E2240000
Size:	12288

Details

Name:	00000002.00000002.395414214.000000000460F000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	460F000
Size:	4096

Details

Name:	00000009.00000002.776069897.00007FF4F5F55000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5F55000
Size:	4096

Details

Name:	0000001E.00000002.774993738.00007FF52A80F000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52A80F000
Size:	8192

Details

Name:	00000010.00000003.433317803.0000019870462000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	19870462000
Size:	114688

Details

Name:	00000016.00000002.525239376.000002112F490000.00000004.00000040.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2112F490000
Size:	4096

Details

Name:	00000005.00000002.619518729.000001F793672000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F793672000
Size:	4096

Details

Name:	00000016.00000002.525953754.00007FF50AFC7000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50AFC7000
Size:	4096

Details

Name:	00000009.00000002.772921032.00000165BA23E000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	165BA23E000
Size:	172032

Details

Name:	00000006.00000002.415594002.0000000002E05000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E05000
Size:	24576

Details

Name:	0000001E.00000002.772649010.0000017CFF250000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	17CFF250000
Size:	12288

Details

Name:	00000002.00000003.388360861.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000004.00000002.403981758.0000000000A8E000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A8E000
Size:	8192

Details

Name:	00000003.00000002.772648974.0000000000B00000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	B00000
Size:	4096

Details

Name:	00000000.00000002.775569323.00000000028A0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	28A0000
Size:	4096

Details

Name:	0000000A.00000002.774824527.00007FF5CC6FF000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC6FF000
Size:	8192

Details

Name:	00000004.00000002.404075775.0000000000EFE000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	EFE000
Size:	8192

Details

Name:	00000016.00000002.526174788.00007FF50B0CF000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50B0CF000
Size:	20480

Details

Name:	00000010.00000002.434034407.0000019870400000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	19870400000
Size:	73728

Details

Name:	00000002.00000002.395334405.0000000002DFB000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DFB000
Size:	16384

Details

Name:	00000005.00000003.618783959.000001F794A90000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F794A90000
Size:	4096

Details

Name:	00000006.00000003.394189849.00000000049C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	49C0000
Size:	4096

Details

Name:	00000021.00000003.702303746.000001BAEF99C000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF99C000
Size:	61440

Details

Name:	00000003.00000003.342333447.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000004.00000003.392617723.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000021.00000002.719820842.00007FF5305CB000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5305CB000
Size:	4096

Details

Name:	00000010.00000002.434924839.00007FF5AAE6B000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AAE6B000
Size:	8192

Details

Name:	0000001E.00000002.772488583.0000017CFF230000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	17CFF230000
Size:	102400

Details

Name:	00000021.00000003.679125449.000001BAEF977000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF977000
Size:	24576

Details

Name:	0000001E.00000002.773280076.0000017CFF539000.00000004.00000040.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	17CFF539000
Size:	8192

Details

Name:	00000002.00000003.342951779.0000000000C20000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C20000
Size:	4096

Details

Name:	00000004.00000003.361978144.0000000000B00000.00000040.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	B00000
Size:	4096

Details

Name:	00000000.00000003.424390328.0000000000D9E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D9E000
Size:	4096

Details

Name:	0000000D.00000002.775010589.00007FF5196C6000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5196C6000
Size:	16384

Details

Name:	0000000B.00000002.417156538.00007FF5D4AF3000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D4AF3000
Size:	12288

Details

Name:	00000002.00000003.390202787.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	0000000D.00000002.773664680.00007DF52F000000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF52F000000
Size:	4096

Details

Name:	00000021.00000002.719401943.00007FF5303E3000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5303E3000
Size:	4096

Details

Name:	00000021.00000003.698831892.000001BAEF96D000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF96D000
Size:	4096

Details

Name:	00000003.00000003.377409949.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000003.00000002.771808565.0000000000820000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000002.00000003.351387324.0000000000C30000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C30000
Size:	4096

Details

Name:	00000002.00000002.395649597.000000007F470000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F470000
Size:	20480

Details

Name:	0000000B.00000002.417187251.00007FF5D4B76000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D4B76000
Size:	16384

Details

Name:	00000021.00000003.682423134.000001BAEFE02000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEFE02000
Size:	4096

Details

Name:	00000016.00000000.513260622.00007DF5209D0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5209D0000
Size:	4096

Details

Name:	00000002.00000003.353462123.0000000000C30000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C30000
Size:	4096

Details

Name:	00000013.00000002.494677228.00007FF586D4B000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586D4B000
Size:	4096

Details

Name:	00000021.00000002.719021216.00007FF530093000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF530093000
Size:	20480

Details

Name:	00000013.00000003.493969595.0000020E5824B000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20E5824B000
Size:	12288

Details

Name:	00000005.00000002.619723081.000001F793D30000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F793D30000
Size:	4096

Details

Name:	00000009.00000002.773640263.00000165BA2C6000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	165BA2C6000
Size:	20480

Details

Name:	0000000B.00000002.417034256.00007DF5EA4A2000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EA4A2000
Size:	4096

Details

Name:	00000013.00000002.494595386.00007FF586C9A000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586C9A000
Size:	16384

Details

Name:	00000009.00000002.775178473.00007DF50B952000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50B952000
Size:	4096

Details

Name:	00000005.00000003.261476256.000001F798D90000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798D90000
Size:	8192

Details

Name:	00000003.00000002.778098744.000000006EC28000.00000040.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute and read and write
Base address:	6EC28000
Size:	8192

Details

Name:	00000002.00000002.394787554.0000000000C50000.00000004.00000020.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	C50000
Size:	32768

Details

Name:	00000004.00000003.403661180.0000000000877000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	877000
Size:	4096

Details

Name:	00000005.00000000.260059575.00007DF558D30000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF558D30000
Size:	4096

Details

Name:	00000010.00000002.433899253.0000019870350000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	19870350000
Size:	102400

Details

Name:	00000002.00000002.394774129.0000000000C20000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	C20000
Size:	4096

Details

Name:	00000002.00000002.394926055.0000000002BF2000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BF2000
Size:	4096

Details

Name:	0000000A.00000002.773737201.000001996B602000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1996B602000
Size:	4096

Details

Name:	00000009.00000002.771960365.00000025E5C7B000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	25E5C7B000
Size:	20480

Details

Name:	00000016.00000002.526116439.00007FF50B09B000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50B09B000
Size:	8192

Details

Name:	00000025.00000002.739359450.000000A06FD7E000.00000004.00000010.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A06FD7E000
Size:	8192

Details

Name:	00000003.00000002.774749590.0000000000F3E000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F3E000
Size:	8192

Details

Name:	00000023.00000002.688551031.000002AF483D0000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AF483D0000
Size:	32768

Details

Name:	00000009.00000002.773552835.00000165BA2BD000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	165BA2BD000
Size:	12288

Details

Name:	00000004.00000003.388455778.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000021.00000002.717936360.000001BAEF03A000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF03A000
Size:	4096

Details

Name:	00000021.00000002.719721356.00007FF530596000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF530596000
Size:	16384

Details

Name:	00000010.00000002.434851606.00007FF5AADD5000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AADD5000
Size:	8192

Details

Name:	00000000.00000002.777541023.000000007F2D0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F2D0000
Size:	4096

Details

Name:	00000003.00000002.774482666.0000000000CBE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	CBE000
Size:	4096

Details

Name:	00000002.00000002.395105611.0000000002D39000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D39000
Size:	8192

Details

Name:	0000000B.00000002.416868762.000001C93E25E000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C93E25E000
Size:	8192

Details

Name:	00000005.00000002.619333126.000001F793570000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1F793570000
Size:	4096

Details

Name:	00000000.00000002.776862653.0000000003D1A000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3D1A000
Size:	24576

Details

Name:	00000003.00000003.433804764.0000000000C51000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C51000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000002.620277443.00007DF558D30000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF558D30000
Size:	4096

Details

Name:	00000025.00000003.739143860.0000027D2307B000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	27D2307B000
Size:	40960

Details

Name:	00000009.00000002.773265350.00000165BA269000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	165BA269000
Size:	24576

Details

Name:	00000010.00000002.434548416.00007FF5AACB3000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AACB3000
Size:	4096

Details

Name:	00000002.00000003.361936883.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000002.00000003.365419923.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000006.00000000.282130314.000000007F322000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F322000
Size:	4096

Details

Name:	00000023.00000002.688864045.00007FF5CB524000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CB524000
Size:	4096

Details

Name:	00000003.00000002.776497317.0000000002D75000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D75000
Size:	8192

Details

Name:	00000025.00000002.739711212.0000027D23100000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	27D23100000
Size:	4096

Details

Name:	0000000D.00000002.775113815.00007FF5196DD000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5196DD000
Size:	16384

Details

Name:	0000000B.00000003.416372701.000001C93E277000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C93E277000
Size:	45056

Details

Name:	00000005.00000003.282663008.000001F798EFB000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798EFB000
Size:	12288

Details

Name:	00000005.00000002.619671492.000001F7938D0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F7938D0000
Size:	4096

Details

Name:	00000007.00000000.280296135.000001E0F80F0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E0F80F0000
Size:	102400

Details

Name:	00000006.00000002.415653993.00000000033B0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	33B0000
Size:	4096

Details

Name:	00000002.00000003.331175673.0000000000C82000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C82000
Size:	4096

Details

Name:	00000003.00000003.379374599.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000002.00000002.395308331.0000000002DA4000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DA4000
Size:	4096

Details

Name:	00000000.00000003.561296343.0000000000DE4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DE4000
Size:	12288

Details

Name:	00000003.00000002.776032640.0000000002C3D000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C3D000
Size:	20480

Details

Name:	0000000D.00000002.774438508.00007FF5195F7000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5195F7000
Size:	4096

Details

Name:	00000016.00000002.525801430.00007FF50AB99000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50AB99000
Size:	32768

Details

Name:	00000002.00000003.393994785.0000000000FF0000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	FF0000
Size:	8192

Details

Name:	00000007.00000002.774802201.00007FF58EAC5000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58EAC5000
Size:	8192

Details

Name:	00000013.00000002.494505229.00007FF586BA5000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586BA5000
Size:	24576

Details

Name:	0000000B.00000002.416710510.00000032F74FE000.00000004.00000010.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	32F74FE000
Size:	8192

Details

Name:	00000021.00000002.718002232.000001BAEF058000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF058000
Size:	12288

Details

Name:	00000023.00000002.688809711.00007FF5CB506000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CB506000
Size:	12288

Details

Name:	00000023.00000002.688882983.00007FF5CB52E000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CB52E000
Size:	16384

Details

Name:	00000002.00000002.395000437.0000000002D08000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D08000
Size:	12288

Details

Name:	00000013.00000002.494685047.00007FF586D4F000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF586D4F000
Size:	20480

Details

Name:	00000021.00000003.696823108.000001BAEF9BC000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF9BC000
Size:	151552

Details

Name:	00000004.00000002.404108795.0000000000FE0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FE0000
Size:	4096

Details

Name:	00000016.00000002.525880735.00007FF50AE9E000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50AE9E000
Size:	12288

Details

Name:	00000004.00000002.404368346.00000000044C0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	44C0000
Size:	733184

Details

Name:	00000002.00000003.355205389.0000000000C30000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C30000
Size:	4096

Details

Name:	0000001E.00000002.772994709.0000017CFF3C5000.00000004.00000020.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	17CFF3C5000
Size:	12288

Details

Name:	00000010.00000002.434071406.0000019870429000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	19870429000
Size:	73728

Details

Name:	00000006.00000003.381629791.0000000004A10000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A10000
Size:	4096

Details

Name:	00000025.00000002.740553606.00007FF4FDB44000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDB44000
Size:	4096

Details

Name:	0000001E.00000002.772090230.0000005B621F9000.00000004.00000010.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5B621F9000
Size:	28672

Details

Name:	0000000B.00000002.416990563.000001C93E400000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1C93E400000
Size:	4096

Details

Name:	00000021.00000003.717398193.000001BAEF039000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF039000
Size:	8192

Details

Name:	00000003.00000003.357416218.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000009.00000002.774402574.00000165BA780000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	165BA780000
Size:	4096

Details

Name:	00000006.00000002.415894660.000000007F340000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F340000
Size:	12288

Details

Name:	00000004.00000001.265418523.000000006EB90000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	6EB90000
Size:	4096

Details

Name:	00000004.00000002.404186266.0000000002D1D000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D1D000
Size:	8192

Details

Name:	00000007.00000002.772796999.000001E0F8228000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E0F8228000
Size:	94208

Details

Name:	00000002.00000002.394401184.0000000000A60000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	A60000
Size:	4096

Details

Name:	00000007.00000002.773377945.00007DF4A2350000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4A2350000
Size:	20480

Details

Name:	00000021.00000002.719365101.00007FF53039E000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53039E000
Size:	12288

Details

Name:	00000003.00000003.744681408.0000000000CBE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CBE000
Size:	4096

Details

Name:	00000005.00000002.622007108.00007FF5433FE000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5433FE000
Size:	45056

Details

Name:	0000000A.00000000.392041275.00007DF5E2222000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E2222000
Size:	4096

Details

Name:	00000000.00000003.470807273.0000000000D99000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D99000
Size:	8192

Details

Name:	0000000B.00000003.416348101.000001C93E274000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C93E274000
Size:	57344

Details

Name:	00000003.00000003.385414986.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000010.00000002.433994673.00000198703A0000.00000004.00000020.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	198703A0000
Size:	8192

Details

Name:	00000002.00000003.343819504.0000000000C20000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	C20000
Size:	4096

Details

Name:	00000005.00000002.621517295.00007FF543327000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF543327000
Size:	4096

Details

Name:	0000000B.00000002.416826802.000001C93E23A000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C93E23A000
Size:	4096

Details

Name:	00000021.00000002.717911547.000001BAEF026000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF026000
Size:	8192

Details

Name:	00000002.00000002.394444536.0000000000A87000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	A87000
Size:	12288

Details

Name:	00000009.00000002.775610453.00007FF4F5D26000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5D26000
Size:	45056

Details

Name:	00000006.00000000.283370360.000000007F340000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F340000
Size:	12288

Details

Name:	00000005.00000002.620130069.000001F798EC3000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798EC3000
Size:	94208

Details

Name:	00000000.00000003.394707923.0000000000BE0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000023.00000002.688694229.00007FF5CB44D000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CB44D000
Size:	8192

Details

Name:	0000001E.00000002.773430741.0000017CFFAD0000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	17CFFAD0000
Size:	4096

Details

Name:	00000010.00000002.434504379.00007FF5AAC3D000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AAC3D000
Size:	16384

Details

Name:	0000000B.00000002.416793194.000001C93E213000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C93E213000
Size:	86016

Details

Name:	00000002.00000002.395162225.0000000002D65000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D65000
Size:	16384

Details

Name:	0000001E.00000002.773750830.00007DF540140000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF540140000
Size:	4096

Details

Name:	00000009.00000002.771905496.00000025E5AFC000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	25E5AFC000
Size:	16384

Details

Name:	00000007.00000002.774937568.00007FF58EAF5000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58EAF5000
Size:	12288

Details

Name:	00000016.00000002.525787015.00007FF50A8C9000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50A8C9000
Size:	4096

Details

Name:	00000000.00000002.772400389.0000000000C5D000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	C5D000
Size:	12288

Details

Name:	00000010.00000003.433354854.000001987045C000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1987045C000
Size:	4096

Details

Name:	00000002.00000002.395074601.0000000002D36000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D36000
Size:	4096

Details

Name:	00000009.00000002.776579536.00007FF4F604E000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F604E000
Size:	16384

Details

Name:	00000000.00000002.776801142.0000000003B1F000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3B1F000
Size:	4096

Details

Name:	00000003.00000002.777880148.000000006EB96000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6EB96000
Size:	40960

Details

Name:	0000000D.00000002.775079310.00007FF5196D0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5196D0000
Size:	36864

Details

Name:	00000004.00000003.384476763.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000004.00000002.403966583.0000000000960000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	960000
Size:	4096

Details

Name:	00000006.00000002.414441359.0000000002D21000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D21000
Size:	20480

Details

Name:	00000003.00000002.772728797.0000000000BC0000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	BC0000
Size:	32768

Details

Name:	00000016.00000002.525982186.00007FF50AFE8000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50AFE8000
Size:	49152

Details

Name:	00000021.00000002.719532303.00007FF5304B2000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5304B2000
Size:	16384

Details

Name:	0000000D.00000000.397287209.000002C79EB40000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C79EB40000
Size:	102400

Details

Name:	00000006.00000003.411055737.0000000000DC2000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DC2000
Size:	8192

Details

Name:	00000021.00000002.717894530.000001BAEF013000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF013000
Size:	73728

Details

Name:	00000006.00000003.392152133.00000000049C0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	49C0000
Size:	4096

Details

Name:	0000000A.00000002.775098132.00007FF5CC85D000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC85D000
Size:	28672

Details

Name:	00000002.00000003.382667487.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000009.00000002.772847549.00000165BA229000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	165BA229000
Size:	81920

Details

Name:	00000003.00000003.568390162.0000000000CBE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CBE000
Size:	4096

Details

Name:	00000002.00000003.390987397.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	0000000A.00000002.773585585.000001996B200000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1996B200000
Size:	4096

Details

Name:	00000002.00000003.388595212.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000003.00000003.355809807.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000003.00000003.433254049.0000000000C5A000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C5A000
Size:	4096

Details

Name:	00000005.00000002.620401080.00007FF542EDF000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF542EDF000
Size:	8192

Details

Name:	00000003.00000003.363946341.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	0000001E.00000002.772012262.0000005B62179000.00000004.00000010.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5B62179000
Size:	28672

Details

Name:	00000002.00000002.394408539.0000000000A70000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	A70000
Size:	4096

Details

Name:	0000001E.00000002.771964578.0000005B6207C000.00000004.00000010.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5B6207C000
Size:	16384

Details

Name:	0000000A.00000002.775271704.00007FF5CC8EF000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC8EF000
Size:	8192

Details

Name:	00000021.00000002.718979466.00007FF52FDCE000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52FDCE000
Size:	4096

Details

Name:	00000007.00000002.773696554.00007FF58E696000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58E696000
Size:	4096

Details

Name:	00000003.00000000.247182860.000000007FAA2000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FAA2000
Size:	4096

Details

Name:	00000004.00000002.404461047.000000007FB60000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FB60000
Size:	20480

Details

Name:	00000010.00000000.420698185.00007DF5C0790000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5C0790000
Size:	4096

Details

Name:	00000021.00000002.719656080.00007FF530513000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF530513000
Size:	12288

Details

Name:	00000005.00000003.282309738.000001F793F18000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F793F18000
Size:	4096

Details

Name:	00000021.00000003.680808829.000001BAEF99A000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF99A000
Size:	53248

Details

Name:	00000002.00000002.395445144.0000000006230000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6230000
Size:	733184

Details

Name:	00000016.00000002.525542735.000002112F68B000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2112F68B000
Size:	24576

Details

Name:	00000009.00000002.776125122.00007FF4F5F6C000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5F6C000
Size:	45056

Details

Name:	0000001E.00000002.771905401.0000005B61F7F000.00000004.00000010.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5B61F7F000
Size:	4096

Details

Name:	00000005.00000003.263157171.000001F798D90000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798D90000
Size:	4096

Details

Name:	00000005.00000002.620410171.00007FF542F36000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF542F36000
Size:	4096

Details

Name:	00000002.00000002.394931797.0000000002C11000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C11000
Size:	32768

Details

Name:	0000000D.00000002.774479746.00007FF519607000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF519607000
Size:	8192

Details

Name:	0000000A.00000002.772399076.000001996ADB0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1996ADB0000
Size:	102400

Details

Name:	00000007.00000002.774268887.00007FF58EA3D000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58EA3D000
Size:	8192

Details

Name:	0000000B.00000002.416885079.000001C93E262000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C93E262000
Size:	20480

Details

Name:	00000025.00000002.740297279.00007FF4FDA67000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDA67000
Size:	8192

Details

Name:	00000004.00000003.395117151.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000002.00000003.394064205.0000000000C8B000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C8B000
Size:	45056

Details

Name:	00000003.00000003.389878117.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000003.00000003.434320812.0000000000CA0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CA0000
Size:	8192

Details

Name:	00000003.00000003.383914668.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000016.00000003.524949363.000002112F64C000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2112F64C000
Size:	20480

Details

Name:	0000000A.00000002.772332722.000001996AD90000.00000004.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1996AD90000
Size:	4096

Details

Name:	00000003.00000002.777708843.0000000005650000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5650000
Size:	4096

Details

Name:	00000005.00000003.282328344.000001F793F59000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F793F59000
Size:	4096

Details

Name:	00000007.00000002.773500298.00007DF5A4490000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A4490000
Size:	4096

Details

Name:	00000010.00000003.433341491.000001987045E000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1987045E000
Size:	16384

Details

Name:	00000004.00000002.404213976.0000000002D40000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D40000
Size:	12288

Details

Name:	00000000.00000002.771720104.00000000005E0000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	5E0000
Size:	4096

Details

Name:	00000003.00000002.776103072.0000000002C4A000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C4A000
Size:	8192

Details

Name:	00000000.00000000.245303301.000000007F2F0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F2F0000
Size:	12288

Details

Name:	00000005.00000002.619371379.000001F7935B0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F7935B0000
Size:	4096

Details

Name:	00000002.00000003.384342222.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	0000000B.00000002.416732855.000001C93DFC0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1C93DFC0000
Size:	102400

Details

Name:	00000006.00000002.414322783.0000000002D11000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D11000
Size:	4096

Details

Name:	00000003.00000003.361735950.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000021.00000003.691492797.000001BAEF988000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF988000
Size:	4096

Details

Name:	00000013.00000002.494311155.0000020E58302000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20E58302000
Size:	16384

Details

Name:	00000003.00000003.385649684.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	0000000D.00000002.772069233.000002C79EB30000.00000004.00000040.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2C79EB30000
Size:	4096

Details

Name:	00000021.00000003.687125774.000001BAEF9AA000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF9AA000
Size:	4096

Details

Name:	00000000.00000003.424348794.0000000000DA1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DA1000
Size:	233472

Details

Name:	00000013.00000002.494198704.0000020E581E0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	20E581E0000
Size:	16384

Details

Name:	00000007.00000002.772513667.000001E0F8202000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E0F8202000
Size:	65536

Details

Name:	00000005.00000003.618997358.000001F793F02000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F793F02000
Size:	4096

Details

Name:	00000025.00000002.740454345.00007FF4FDB18000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FDB18000
Size:	12288

Details

Name:	00000004.00000003.390139653.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000003.00000003.656459253.0000000005758000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5758000
Size:	286720

Details

Name:	0000000B.00000002.416716192.00000032F75FF000.00000004.00000010.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	32F75FF000
Size:	4096

Details

Name:	00000000.00000002.777069593.000000006EB95000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6EB95000
Size:	4096

Details

Name:	00000002.00000003.363008693.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000021.00000002.719788425.00007FF5305B4000.00000002.00020000.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5305B4000
Size:	4096

Details

Name:	00000004.00000002.404009615.0000000000B00000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	B00000
Size:	4096

Details

Name:	00000005.00000003.261517959.000001F798C3E000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F798C3E000
Size:	73728

Details

Name:	00000003.00000003.656498895.0000000000C9A000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C9A000
Size:	151552

Details

Name:	00000010.00000002.434607778.00007FF5AACF5000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5AACF5000
Size:	24576

Details

Name:	00000025.00000002.739866217.00007DF513462000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF513462000
Size:	4096

Details

Name:	00000002.00000003.386083482.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000021.00000002.717990786.000001BAEF055000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF055000
Size:	4096

Details

Name:	00000006.00000002.412927370.0000000000CB0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	CB0000
Size:	4096

Details

Name:	00000003.00000003.568358525.0000000000CAF000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CAF000
Size:	16384

Details

Name:	00000004.00000000.262124849.0000000002E17000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E17000
Size:	16384

Details

Name:	00000016.00000002.525836854.00007FF50AC76000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50AC76000
Size:	4096

Details

Name:	00000003.00000003.395865789.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000009.00000002.774315643.00000165BA600000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	165BA600000
Size:	12288

Details

Name:	00000003.00000003.761808136.0000000000CB7000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CB7000
Size:	24576

Details

Name:	00000003.00000003.359559137.0000000000A90000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000009.00000002.776511659.00007FF4F603D000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F603D000
Size:	16384

Details

Name:	00000000.00000003.383915746.0000000000BE0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	00000003.00000002.777218144.000000000487F000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	487F000
Size:	4096

Details

Name:	00000004.00000003.378131154.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Details

Name:	00000002.00000003.379988747.0000000000BE0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BE0000
Size:	4096

Details

Name:	0000000A.00000002.772612410.000001996ADD0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1996ADD0000
Size:	12288

Details

Name:	00000023.00000002.688447811.000002AF48230000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AF48230000
Size:	8192

Details

Name:	00000021.00000003.705758942.000001BAEF9AF000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF9AF000
Size:	32768

Details

Name:	00000021.00000003.696639167.000001BAEF98E000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEF98E000
Size:	4096

Details

Name:	00000021.00000003.687201896.000001BAEFE02000.00000004.00000001.sdmp
TargetID:	33
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BAEFE02000
Size:	126976

Details

Name:	00000007.00000002.773067440.000001E0F8302000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E0F8302000
Size:	49152

Details

Name:	00000013.00000002.494103058.000000A52607C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A52607C000
Size:	16384

Details

Name:	0000000D.00000002.772888974.000002C79EC36000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C79EC36000
Size:	36864

Details

Name:	00000003.00000003.700567793.0000000000CBB000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	CBB000
Size:	16384

Details

Name:	00000004.00000003.390701254.0000000000FF0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FF0000
Size:	4096

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

IOC Report

Processes

URLs

Domains

IPs

Memdumps