Automated Malware Analysis IOC Report for

Details

Name:	00000003.00000003.509352713.000000000579B000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	579B000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.471870873.0000000003328000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3328000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.560637015.00000000030AD000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	30AD000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.465062467.0000000005918000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5918000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.465039152.0000000005918000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5918000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.471891647.0000000003328000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3328000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.464981286.0000000005918000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5918000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.381867448.0000000003350000.00000040.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page execute and read and write
Base address:	3350000
Size:	86016

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000004.00000003.394966102.0000000003040000.00000040.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page execute and read and write
Base address:	3040000
Size:	86016

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000002.767090638.0000000002C19000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2C19000
Size:	57344

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.464893414.0000000005918000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5918000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.465188080.0000000005918000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5918000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.471790864.0000000003328000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3328000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.605359605.0000000002FAF000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	2FAF000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality
Found detection on Joe Sandbox Cloud Basic with higher score	System Summary

Details

Name:	00000000.00000003.471929589.0000000003328000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3328000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.465094811.0000000005918000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5918000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.464936169.0000000005918000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5918000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.471911946.0000000003328000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3328000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.599395411.000000000559F000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	559F000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000002.768061625.0000000005520000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5520000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000002.767231072.0000000002F30000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2F30000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.554580035.000000000569D000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	569D000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.471817265.0000000003328000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3328000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000002.00000003.381366029.0000000000620000.00000040.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page execute and read and write
Base address:	620000
Size:	86016

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.465080212.0000000005918000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5918000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.471848801.0000000003328000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3328000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.465019933.0000000005918000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5918000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000003.402193251.0000000003330000.00000040.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page execute and read and write
Base address:	3330000
Size:	86016

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.515634920.00000000031AB000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	31AB000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.472026864.0000000003328000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3328000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000002.767882960.00000000051A9000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	51A9000
Size:	57344

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality
Found detection on Joe Sandbox Cloud Basic with higher score	System Summary

Details

Name:	00000000.00000003.471943787.0000000003328000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3328000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.405389959.0000000000C40000.00000040.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page execute and read and write
Base address:	C40000
Size:	86016

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	0000000A.00000002.765834528.00007FF593067000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF593067000
Size:	20480

Details

Name:	00000022.00000003.715510470.00000256C8A6A000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8A6A000
Size:	425984

Details

Name:	00000009.00000002.767371542.00007FF5C84EF000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C84EF000
Size:	20480

Details

Name:	00000000.00000003.434852040.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000004.00000002.434836724.000000000328A000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	328A000
Size:	110592

Details

Name:	00000003.00000000.241146162.0000000002CB7000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CB7000
Size:	16384

Details

Name:	00000000.00000003.560559173.000000000101C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	101C000
Size:	32768

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000001D.00000002.764169557.0000020EADBE0000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	20EADBE0000
Size:	16384

Details

Name:	00000027.00000000.751039394.00007DF51DA70000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51DA70000
Size:	12288

Details

Name:	00000003.00000000.241166737.000000007FCB0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FCB0000
Size:	4096

Details

Name:	00000003.00000001.242065168.000000006EDE0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	6EDE0000
Size:	4096

Details

Name:	00000013.00000000.511627878.00007DF55D400000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55D400000
Size:	4096

Details

Name:	00000004.00000003.410632869.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000005.00000002.447409383.0000000002C1D000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C1D000
Size:	8192

Details

Name:	00000025.00000002.746860845.00007FF5CBE15000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CBE15000
Size:	16384

Details

Name:	00000022.00000002.731819490.00000256C7C56000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	256C7C56000
Size:	16384

Details

Name:	0000001E.00000002.764053731.00000049A747F000.00000004.00000010.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	49A747F000
Size:	4096

Details

Name:	00000000.00000002.767845888.000000007FBC0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBC0000
Size:	20480

Details

Name:	00000003.00000003.417812243.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000005.00000002.447695090.00000000034AF000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	34AF000
Size:	4096

Details

Name:	00000003.00000003.417303853.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000022.00000003.710066675.00000256C856E000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C856E000
Size:	69632

Details

Name:	00000022.00000003.704277778.00000256C8597000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8597000
Size:	32768

Details

Name:	00000022.00000003.697937078.00000256C83D0000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C83D0000
Size:	4096

Details

Name:	00000000.00000000.239119458.0000000000800000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	800000
Size:	102400

Details

Name:	00000000.00000002.767573710.000000006EDE3000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6EDE3000
Size:	4096

Details

Name:	00000002.00000002.427736634.000000000293D000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	293D000
Size:	12288

Details

Name:	00000009.00000002.764500502.000002882BD10000.00000004.00000020.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2882BD10000
Size:	8192

Details

Name:	00000022.00000003.710797236.00000256C856C000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C856C000
Size:	8192

Details

Name:	00000004.00000002.434808782.000000000322E000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	322E000
Size:	8192

Details

Name:	00000023.00000002.709920389.00007FF58CD16000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58CD16000
Size:	12288

Details

Name:	00000003.00000002.763790293.0000000002AAB000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AAB000
Size:	4096

Details

Name:	0000000A.00000002.765016204.0000022797A6F000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22797A6F000
Size:	20480

Details

Name:	00000003.00000002.765241996.00000000032F0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	32F0000
Size:	16384

Details

Name:	00000002.00000002.427702384.0000000002667000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2667000
Size:	16384

Details

Name:	00000000.00000003.605048403.0000000002661000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2661000
Size:	909312

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	0000000A.00000002.765285878.0000022797ED0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	22797ED0000
Size:	12288

Details

Name:	00000007.00000002.765876925.00007FF5D8CC0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D8CC0000
Size:	20480

Details

Name:	00000003.00000003.400518303.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000005.00000003.407678989.00000000033A0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33A0000
Size:	4096

Details

Name:	00000006.00000002.627406453.00007FF56C25C000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C25C000
Size:	4096

Details

Name:	00000002.00000003.424903820.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	00000005.00000003.447061041.00000000034A3000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	34A3000
Size:	20480

Details

Name:	00000009.00000002.767122535.00007FF5C8425000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C8425000
Size:	4096

Details

Name:	00000005.00000002.447749763.0000000004D8E000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4D8E000
Size:	8192

Details

Name:	00000006.00000002.627627461.00007FF56C8FF000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C8FF000
Size:	4096

Details

Name:	00000022.00000003.712101322.00000256C8596000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8596000
Size:	53248

Signature Hits	Behavior Group	Mitre Attack
Found detection on Joe Sandbox Cloud Basic with higher score	System Summary

Details

Name:	00000022.00000002.733301979.00007FF541AED000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541AED000
Size:	4096

Details

Name:	00000005.00000003.414824403.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	00000025.00000002.746995704.00007FF5CC4DE000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC4DE000
Size:	4096

Details

Name:	0000000D.00000002.765051840.000001E3C2E00000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E3C2E00000
Size:	12288

Details

Name:	00000003.00000000.241191108.000000007FCC2000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FCC2000
Size:	4096

Details

Name:	00000018.00000002.563775029.00007FF502E1B000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF502E1B000
Size:	4096

Details

Name:	00000025.00000002.746557465.000001BBF3A81000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBF3A81000
Size:	69632

Details

Name:	00000006.00000002.627816238.00007FF56CA76000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56CA76000
Size:	16384

Details

Name:	0000000D.00000002.766495635.00007FF5D5C00000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D5C00000
Size:	36864

Details

Name:	00000005.00000002.447478256.0000000002ED0000.00000004.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2ED0000
Size:	4096

Details

Name:	0000000F.00000002.446909039.000000595BCFB000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	595BCFB000
Size:	20480

Details

Name:	00000013.00000002.527604986.000002442F254000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2442F254000
Size:	98304

Details

Name:	00000005.00000002.447255103.0000000002B8D000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B8D000
Size:	24576

Details

Name:	0000001E.00000002.764430928.0000021DF7FF0000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	21DF7FF0000
Size:	12288

Details

Name:	0000000B.00000003.433915886.000001B344A40000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B344A40000
Size:	32768

Details

Name:	00000005.00000002.447345341.0000000002BEB000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BEB000
Size:	8192

Details

Name:	00000022.00000003.704398882.00000256C8586000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8586000
Size:	122880

Details

Name:	00000000.00000002.764638471.0000000000D70000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	D70000
Size:	69632

Details

Name:	0000001E.00000002.766430212.00007FF5BF54D000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BF54D000
Size:	28672

Details

Name:	00000004.00000002.434575274.00000000029AB000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29AB000
Size:	16384

Details

Name:	0000000F.00000002.447447093.00007FF4F3E9C000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F3E9C000
Size:	45056

Details

Name:	00000006.00000002.627112393.000001E698202000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E698202000
Size:	4096

Details

Name:	00000000.00000002.767603929.000000006EDE6000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6EDE6000
Size:	40960

Details

Name:	00000007.00000002.764505292.00000262D4228000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	262D4228000
Size:	81920

Details

Name:	0000001D.00000002.763981212.0000020EADB80000.00000004.00000040.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	20EADB80000
Size:	4096

Details

Name:	00000009.00000002.763848586.000000DBED77C000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DBED77C000
Size:	16384

Details

Name:	00000022.00000003.704338229.00000256C8A21000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8A21000
Size:	118784

Details

Name:	0000000B.00000002.434177198.000001B344940000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B344940000
Size:	16384

Details

Name:	00000013.00000002.527817451.00007DF55D402000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55D402000
Size:	4096

Details

Name:	00000027.00000000.751006317.00007DF51DA50000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51DA50000
Size:	4096

Details

Name:	00000006.00000002.627519002.00007FF56C793000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C793000
Size:	4096

Details

Name:	00000013.00000002.527967276.00007FF547974000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547974000
Size:	16384

Details

Name:	00000003.00000002.768045415.0000000005500000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5500000
Size:	4096

Details

Name:	00000003.00000003.401020704.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000006.00000002.626883815.000001E6979F0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E6979F0000
Size:	4096

Details

Name:	00000023.00000002.709643936.00007DF5A2660000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A2660000
Size:	12288

Details

Name:	00000002.00000002.427335799.0000000000610000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	610000
Size:	20480

Details

Name:	0000000F.00000002.447517318.00007FF4F3EC9000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F3EC9000
Size:	20480

Details

Name:	00000022.00000003.702787642.00000256C8584000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8584000
Size:	4096

Details

Name:	00000003.00000002.767855944.0000000004E30000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4E30000
Size:	4096

Details

Name:	00000018.00000002.563524143.00007FF502D2C000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF502D2C000
Size:	45056

Details

Name:	00000003.00000003.691187638.00000000035EE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35EE000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000023.00000002.709320914.000001FA619A5000.00000004.00000040.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1FA619A5000
Size:	8192

Details

Name:	0000000B.00000003.433823173.000001B344A6B000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B344A6B000
Size:	94208

Details

Name:	00000009.00000002.766043881.000002882C602000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2882C602000
Size:	4096

Details

Name:	00000005.00000003.407032202.00000000033A0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33A0000
Size:	4096

Details

Name:	00000018.00000000.551110356.00007DF518720000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF518720000
Size:	4096

Details

Name:	0000001D.00000002.764430208.0000020EADC29000.00000004.00000001.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20EADC29000
Size:	61440

Details

Name:	00000006.00000003.625326651.000001E69CF80000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69CF80000
Size:	4096

Details

Name:	0000001E.00000003.679613102.0000021DF8088000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	21DF8088000
Size:	4096

Details

Name:	00000022.00000003.701844303.00000256C8584000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8584000
Size:	114688

Details

Name:	0000000A.00000002.765960865.00007FF5930FD000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5930FD000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Found detection on Joe Sandbox Cloud Basic with higher score	System Summary

Details

Name:	0000001E.00000002.764891866.0000021DF8210000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	21DF8210000
Size:	4096

Details

Name:	00000007.00000002.765442458.00007DF5EE720000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EE720000
Size:	12288

Details

Name:	00000018.00000002.563228537.0000010A85602000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	10A85602000
Size:	4096

Details

Name:	00000005.00000000.259517795.000000007F052000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F052000
Size:	4096

Details

Name:	00000006.00000003.626624606.000001E697AAF000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E697AAF000
Size:	53248

Details

Name:	0000000F.00000002.447308538.00007FF4F3A59000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F3A59000
Size:	32768

Details

Name:	00000000.00000002.767508869.0000000003EA0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3EA0000
Size:	4096

Details

Name:	00000018.00000000.551168479.00007FF502E1F000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF502E1F000
Size:	20480

Details

Name:	0000000A.00000002.765355056.0000022798050000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	22798050000
Size:	4096

Details

Name:	00000005.00000002.447294987.0000000002BC0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BC0000
Size:	12288

Details

Name:	00000000.00000003.605274175.0000000001015000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1015000
Size:	28672

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000013.00000002.528137024.00007FF547AFF000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547AFF000
Size:	20480

Details

Name:	00000003.00000002.768545743.000000007FCD0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FCD0000
Size:	12288

Details

Name:	0000000A.00000002.766948765.00007FF59334E000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59334E000
Size:	16384

Details

Name:	00000003.00000003.417198937.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	0000000F.00000002.447332003.00007FF4F3C43000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F3C43000
Size:	4096

Details

Name:	00000018.00000002.562999710.0000010A85048000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	10A85048000
Size:	12288

Details

Name:	00000005.00000002.447287693.0000000002BB9000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BB9000
Size:	8192

Details

Name:	00000022.00000002.732878563.00007FF5419B0000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5419B0000
Size:	8192

Details

Name:	00000002.00000000.240773945.0000000002667000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2667000
Size:	16384

Details

Name:	00000009.00000002.767077180.00007FF5C8412000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C8412000
Size:	8192

Details

Name:	0000000F.00000002.446995019.00000211BD1B0000.00000004.00000020.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	211BD1B0000
Size:	8192

Details

Name:	0000000B.00000000.411619092.000001B3448E0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B3448E0000
Size:	102400

Details

Name:	00000022.00000002.732830186.00007FF54193F000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54193F000
Size:	20480

Details

Name:	00000022.00000003.710871318.00000256C8572000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8572000
Size:	53248

Details

Name:	00000022.00000002.732744066.00007FF54188D000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54188D000
Size:	16384

Details

Name:	00000004.00000003.429423214.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000004.00000002.434630253.0000000002C40000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C40000
Size:	4096

Details

Name:	00000022.00000003.721060600.00000256C8560000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8560000
Size:	139264

Details

Name:	00000003.00000003.401522790.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000005.00000000.259491289.0000000002EE0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2EE0000
Size:	102400

Details

Name:	00000025.00000002.746085173.0000009B782FC000.00000004.00000010.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	9B782FC000
Size:	16384

Details

Name:	00000000.00000003.471977302.0000000001015000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1015000
Size:	36864

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000002.447537611.000000000306B000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	306B000
Size:	12288

Details

Name:	00000003.00000003.738229805.0000000003614000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3614000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000002.447766757.0000000004E4E000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4E4E000
Size:	8192

Details

Name:	00000005.00000002.447282622.0000000002BB6000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BB6000
Size:	4096

Details

Name:	00000004.00000003.434020766.00000000032A9000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	32A9000
Size:	12288

Details

Name:	00000018.00000002.563381369.00007FF502983000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF502983000
Size:	4096

Details

Name:	00000003.00000003.421150213.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000007.00000002.763980703.00000262D4040000.00000004.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	262D4040000
Size:	4096

Details

Name:	00000025.00000002.747415058.00007FF5CC6DB000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC6DB000
Size:	8192

Details

Name:	00000005.00000003.414727577.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	00000005.00000003.408262290.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	00000007.00000002.763950434.0000007A7AAFF000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	7A7AAFF000
Size:	4096

Details

Name:	00000018.00000002.563147286.0000010A85102000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	10A85102000
Size:	12288

Details

Name:	00000006.00000002.627615213.00007FF56C87C000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C87C000
Size:	20480

Details

Name:	00000013.00000002.528089899.00007FF547AC6000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547AC6000
Size:	16384

Details

Name:	00000013.00000002.528034102.00007FF547A39000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547A39000
Size:	20480

Details

Name:	00000000.00000003.418188898.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000002.00000003.399412786.0000000000850000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	850000
Size:	4096

Details

Name:	0000001E.00000002.766135100.00007FF5BEEB9000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BEEB9000
Size:	12288

Details

Name:	00000009.00000000.408348637.00007FF5C852F000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C852F000
Size:	20480

Details

Name:	0000000F.00000002.446876157.000000595B8DB000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	595B8DB000
Size:	20480

Details

Name:	00000013.00000002.527922573.00007FF5478C3000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5478C3000
Size:	4096

Details

Name:	00000006.00000003.261945451.000001E69D20E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D20E000
Size:	73728

Details

Name:	00000002.00000003.394894096.0000000000850000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	850000
Size:	4096

Details

Name:	00000025.00000002.746976667.00007FF5CC4B3000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC4B3000
Size:	4096

Details

Name:	00000005.00000002.447266273.0000000002B9D000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B9D000
Size:	8192

Details

Name:	00000004.00000003.426207184.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000018.00000002.562859992.0000010A84DF0000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	10A84DF0000
Size:	4096

Details

Name:	00000006.00000002.627414350.00007FF56C25E000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C25E000
Size:	16384

Details

Name:	00000002.00000002.427624988.00000000025D5000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25D5000
Size:	12288

Details

Name:	00000003.00000003.409158832.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000009.00000002.763898854.000000DBED9FB000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DBED9FB000
Size:	20480

Details

Name:	00000003.00000003.508255202.0000000003578000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3578000
Size:	24576

Details

Name:	0000000A.00000002.764077129.0000008597A7F000.00000004.00000010.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8597A7F000
Size:	4096

Details

Name:	00000025.00000002.746627792.000001BBF3B00000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBF3B00000
Size:	4096

Details

Name:	00000025.00000002.747003922.00007FF5CC503000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC503000
Size:	4096

Details

Name:	00000004.00000002.434873194.00000000032B1000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	32B1000
Size:	28672

Details

Name:	00000005.00000003.418187604.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	00000003.00000003.736030249.00000000035EE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35EE000
Size:	4096

Details

Name:	0000000A.00000002.764209916.0000022797900000.00000004.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	22797900000
Size:	4096

Details

Name:	0000000D.00000000.414924784.000001E3C28B0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E3C28B0000
Size:	102400

Details

Name:	00000013.00000002.527784364.00007DF55D3F2000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55D3F2000
Size:	4096

Details

Name:	00000006.00000002.627842322.00007FF56CA8D000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56CA8D000
Size:	16384

Details

Name:	00000025.00000000.733938576.00007DF5E1FF2000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E1FF2000
Size:	4096

Details

Name:	00000006.00000002.627871669.00007FF56CAAD000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56CAAD000
Size:	4096

Details

Name:	00000003.00000003.426208710.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000002.00000002.427494335.0000000002566000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2566000
Size:	4096

Details

Name:	00000000.00000002.764310679.00000000009C0000.00000040.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page execute and read and write
Base address:	9C0000
Size:	4096

Details

Name:	00000003.00000002.767460032.0000000003586000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3586000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	00000006.00000002.626975738.000001E697A78000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E697A78000
Size:	12288

Details

Name:	00000004.00000002.434775546.00000000031CE000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	31CE000
Size:	8192

Details

Name:	0000000A.00000002.766711424.00007FF593326000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF593326000
Size:	16384

Details

Name:	00000005.00000003.429822580.0000000003360000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3360000
Size:	4096

Details

Name:	00000002.00000003.424533846.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	00000004.00000003.406479367.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000022.00000003.713664027.00000256C8592000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8592000
Size:	4096

Details

Name:	0000000B.00000002.434258409.000001B344A24000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B344A24000
Size:	16384

Details

Name:	00000005.00000002.447550484.00000000032D0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	32D0000
Size:	16384

Details

Name:	00000022.00000002.732606229.00007FF5415C8000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5415C8000
Size:	4096

Details

Name:	00000000.00000003.421154401.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000004.00000003.400451357.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000005.00000002.447718131.0000000003770000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3770000
Size:	69632

Details

Name:	00000022.00000003.704371418.00000256C8A02000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8A02000
Size:	126976

Details

Name:	00000007.00000000.279989061.00007DF5EE720000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EE720000
Size:	12288

Details

Name:	00000022.00000002.731751708.00000256C7BE0000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	256C7BE0000
Size:	4096

Details

Name:	0000001D.00000002.764788783.0000020EAE260000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	20EAE260000
Size:	16384

Details

Name:	00000006.00000000.259986402.00007DF5823C0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5823C0000
Size:	12288

Details

Name:	00000007.00000002.764263919.00000262D4200000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	262D4200000
Size:	4096

Details

Name:	00000022.00000003.712922938.00000256C8569000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8569000
Size:	98304

Details

Name:	00000000.00000003.409444247.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000000.00000003.443655554.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000002.00000003.393386101.0000000000850000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	850000
Size:	4096

Details

Name:	00000025.00000002.747182497.00007FF5CC633000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC633000
Size:	12288

Details

Name:	00000000.00000002.763832662.00000000006D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6D0000
Size:	8192

Details

Name:	0000000B.00000003.433883357.000001B344A63000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B344A63000
Size:	16384

Details

Name:	00000005.00000002.447584272.0000000003340000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3340000
Size:	12288

Details

Name:	00000004.00000003.420817263.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000003.00000002.767713816.0000000003620000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3620000
Size:	36864

Details

Name:	00000000.00000002.766979114.0000000002660000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2660000
Size:	4096

Details

Name:	00000002.00000003.425272825.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	00000004.00000002.434644033.0000000002E10000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E10000
Size:	102400

Details

Name:	00000018.00000002.563241406.00007DF518710000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF518710000
Size:	4096

Details

Name:	00000009.00000002.766956933.00007FF5C8346000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C8346000
Size:	24576

Details

Name:	00000002.00000002.428126704.0000000005E50000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5E50000
Size:	8192

Details

Name:	00000000.00000003.740637250.0000000001021000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1021000
Size:	12288

Details

Name:	00000018.00000002.563345829.00007FF5028E9000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5028E9000
Size:	32768

Details

Name:	00000009.00000002.767347424.00007FF5C84E8000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C84E8000
Size:	12288

Details

Name:	0000000A.00000002.766592309.00007FF5932AA000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5932AA000
Size:	16384

Details

Name:	00000003.00000003.687329895.00000000035FA000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35FA000
Size:	32768

Details

Name:	00000003.00000003.399513163.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	0000000B.00000002.434807755.00007FF504EC3000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF504EC3000
Size:	12288

Details

Name:	00000005.00000002.447374458.0000000002BFC000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BFC000
Size:	32768

Details

Name:	0000001E.00000003.679627710.0000021DF8090000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	21DF8090000
Size:	8192

Details

Name:	0000000B.00000002.434842862.00007FF504F38000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF504F38000
Size:	12288

Details

Name:	0000000A.00000002.765082346.0000022797A75000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22797A75000
Size:	36864

Details

Name:	00000000.00000002.767518263.0000000003F20000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3F20000
Size:	4096

Details

Name:	00000006.00000002.627481072.00007FF56C637000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C637000
Size:	4096

Details

Name:	00000007.00000002.766080038.00007FF5D8D3D000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D8D3D000
Size:	28672

Details

Name:	00000022.00000003.712129332.00000256C85C8000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C85C8000
Size:	65536

Details

Name:	00000022.00000002.732654619.00007FF5417E3000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5417E3000
Size:	4096

Details

Name:	00000009.00000002.767638305.00007FF5C852D000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C852D000
Size:	4096

Details

Name:	00000006.00000002.626836295.000001E6978A0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E6978A0000
Size:	102400

Details

Name:	00000003.00000003.735939055.0000000003578000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3578000
Size:	24576

Details

Name:	00000023.00000000.696953124.00007DF5A2652000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A2652000
Size:	4096

Details

Name:	00000005.00000002.447645374.000000000347A000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	347A000
Size:	110592

Details

Name:	00000002.00000002.427686141.0000000002651000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2651000
Size:	8192

Details

Name:	0000001D.00000002.765675953.00007FF518EC4000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF518EC4000
Size:	4096

Details

Name:	00000022.00000003.715012020.00000256C8590000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8590000
Size:	425984

Details

Name:	00000006.00000003.261969910.000001E69D224000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D224000
Size:	4096

Details

Name:	00000022.00000003.716180012.00000256C856C000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C856C000
Size:	8192

Details

Name:	0000000F.00000002.447646197.00007FF4F3F8F000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F3F8F000
Size:	20480

Details

Name:	0000000D.00000002.764989177.000001E3C2B02000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E3C2B02000
Size:	28672

Details

Name:	00000006.00000002.627054509.000001E697B02000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E697B02000
Size:	16384

Details

Name:	00000009.00000002.766823293.00007FF5C82C2000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C82C2000
Size:	12288

Details

Name:	00000007.00000002.764845339.00000262D4280000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	262D4280000
Size:	4096

Details

Name:	00000003.00000003.735969940.0000000003586000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3586000
Size:	421888

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.415191265.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000022.00000002.731733944.00000256C7BB0000.00000004.00000020.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	256C7BB0000
Size:	12288

Details

Name:	00000022.00000003.713072721.00000256C8594000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8594000
Size:	8192

Details

Name:	00000004.00000000.250155580.000000007FA30000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FA30000
Size:	12288

Details

Name:	00000007.00000002.763930396.0000007A7A9FF000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	7A7A9FF000
Size:	4096

Details

Name:	00000006.00000003.626398555.000001E698DF0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E698DF0000
Size:	4096

Details

Name:	00000022.00000003.716156467.00000256C856F000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C856F000
Size:	77824

Details

Name:	00000000.00000002.763877110.00000000006D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6D4000
Size:	4096

Details

Name:	00000022.00000003.704295024.00000256C85B3000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C85B3000
Size:	65536

Details

Name:	00000005.00000002.447925575.000000007F052000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F052000
Size:	4096

Details

Name:	00000003.00000003.396499000.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000000.00000003.433206142.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	0000000B.00000003.433888794.000001B344A60000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B344A60000
Size:	12288

Details

Name:	00000004.00000002.435511438.000000000684E000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	684E000
Size:	8192

Details

Name:	00000022.00000002.732480747.00007DF5573F2000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5573F2000
Size:	4096

Details

Name:	0000000A.00000002.765689479.00007FF592AEB000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF592AEB000
Size:	12288

Details

Name:	0000000B.00000002.434424116.000001B344A46000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B344A46000
Size:	8192

Details

Name:	00000004.00000003.411666875.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000022.00000002.733275353.00007FF541ADE000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541ADE000
Size:	16384

Details

Name:	00000006.00000002.626867301.000001E6978F0000.00000004.00000020.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1E6978F0000
Size:	12288

Details

Name:	00000003.00000002.768433266.000000006EEC5000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6EEC5000
Size:	8192

Details

Name:	0000000A.00000002.766215011.00007FF59324C000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59324C000
Size:	4096

Details

Name:	0000000A.00000002.764239953.0000022797910000.00000004.00000040.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	22797910000
Size:	4096

Details

Name:	00000002.00000003.383864958.0000000002A32000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2A32000
Size:	114688

Details

Name:	00000005.00000003.420826457.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	0000001D.00000002.766166273.00007FF518FC0000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF518FC0000
Size:	36864

Details

Name:	00000002.00000003.408350538.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	00000013.00000000.511614134.00007DF55D3F0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55D3F0000
Size:	4096

Details

Name:	00000022.00000003.707842749.00000256C85C3000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C85C3000
Size:	147456

Details

Name:	00000005.00000002.447500295.0000000002F3A000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2F3A000
Size:	24576

Details

Name:	0000000A.00000002.765259487.0000022797CD0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	22797CD0000
Size:	4096

Details

Name:	00000006.00000002.627128671.000001E69D000000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D000000
Size:	65536

Details

Name:	0000000F.00000002.447604008.00007FF4F3F6D000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F3F6D000
Size:	16384

Details

Name:	00000025.00000000.733883318.00007DF5E1FE0000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E1FE0000
Size:	4096

Details

Name:	0000001E.00000002.764910641.0000021DF8230000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	21DF8230000
Size:	16384

Details

Name:	00000006.00000002.627471984.00007FF56C630000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C630000
Size:	16384

Details

Name:	00000006.00000003.624385659.000001E69D220000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D220000
Size:	4096

Details

Name:	00000023.00000002.709150519.000001FA616F0000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FA616F0000
Size:	16384

Details

Name:	00000022.00000002.732067662.00000256C7CFA000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	256C7CFA000
Size:	28672

Details

Name:	00000023.00000002.709943593.00007FF58CD1B000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58CD1B000
Size:	8192

Details

Name:	00000004.00000002.435594775.00000000073DE000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	73DE000
Size:	8192

Details

Name:	00000018.00000002.563661807.00007FF502DD8000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF502DD8000
Size:	12288

Details

Name:	00000022.00000003.701626235.00000256C8595000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8595000
Size:	32768

Details

Name:	00000022.00000003.706114049.00000256C8586000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8586000
Size:	94208

Details

Name:	00000025.00000002.746197856.000001BBF3890000.00000004.00000040.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1BBF3890000
Size:	4096

Details

Name:	00000005.00000003.447087819.00000000034B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	34B0000
Size:	65536

Details

Name:	00000022.00000003.717662550.00000256C85A5000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C85A5000
Size:	176128

Details

Name:	0000000F.00000002.447229186.00007DF509882000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF509882000
Size:	4096

Details

Name:	0000001D.00000002.765286451.00007FF518D25000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF518D25000
Size:	8192

Details

Name:	00000003.00000003.407585619.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000003.00000003.425276766.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000022.00000003.719563256.00000256C859C000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C859C000
Size:	53248

Details

Name:	00000009.00000002.765635531.000002882C200000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2882C200000
Size:	12288

Details

Name:	00000023.00000003.708514790.000001FA6173C000.00000004.00000001.sdmp
TargetID:	35
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FA6173C000
Size:	4096

Details

Name:	0000000B.00000000.411640366.00007DF51A870000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51A870000
Size:	4096

Details

Name:	00000004.00000003.432774200.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	0000001D.00000002.763930546.000000537F9FE000.00000004.00000010.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	537F9FE000
Size:	8192

Details

Name:	00000006.00000002.627180515.000001E69D044000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D044000
Size:	20480

Details

Name:	00000025.00000002.747051008.00007FF5CC564000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC564000
Size:	16384

Details

Name:	00000002.00000003.420466235.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	0000000F.00000002.447430523.00007FF4F3E87000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F3E87000
Size:	4096

Details

Name:	00000022.00000002.731914094.00000256C7CA6000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	256C7CA6000
Size:	49152

Details

Name:	00000007.00000002.764700975.00000262D4250000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	262D4250000
Size:	90112

Details

Name:	00000022.00000002.731841219.00000256C7C5F000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	256C7C5F000
Size:	8192

Details

Name:	0000001E.00000002.765229927.0000021DF8CB0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	21DF8CB0000
Size:	4096

Details

Name:	00000002.00000002.427359340.0000000000650000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	650000
Size:	4096

Details

Name:	00000002.00000003.427096374.0000000002A25000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2A25000
Size:	4096

Details

Name:	00000002.00000003.427107778.0000000002A31000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2A31000
Size:	28672

Details

Name:	00000004.00000002.434593487.00000000029B5000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29B5000
Size:	24576

Details

Name:	0000000D.00000002.763949392.000000623F4FD000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	623F4FD000
Size:	12288

Details

Name:	00000003.00000002.768195111.000000006EDE1000.00000020.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	6EDE1000
Size:	8192

Details

Name:	00000023.00000003.708654525.000001FA6174B000.00000004.00000001.sdmp
TargetID:	35
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FA6174B000
Size:	12288

Details

Name:	00000022.00000002.732276139.00000256C8518000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8518000
Size:	12288

Details

Name:	00000004.00000003.402962803.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	0000001E.00000002.766038097.00007FF5BEE26000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BEE26000
Size:	16384

Details

Name:	00000005.00000000.259485739.0000000002C97000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C97000
Size:	16384

Details

Name:	00000022.00000002.732374854.00000256C856A000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	256C856A000
Size:	8192

Details

Name:	00000003.00000003.738153345.00000000035F7000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35F7000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.430362319.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000000.00000002.766469936.0000000001025000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1025000
Size:	12288

Details

Name:	00000025.00000000.733978261.00007FF5CC6EF000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC6EF000
Size:	20480

Details

Name:	00000003.00000002.767725164.0000000003820000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3820000
Size:	69632

Details

Name:	00000003.00000003.508154376.00000000035F3000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35F3000
Size:	32768

Details

Name:	00000004.00000002.434709365.0000000003020000.00000040.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page execute and read and write
Base address:	3020000
Size:	4096

Details

Name:	00000022.00000003.721155108.00000256C858E000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C858E000
Size:	28672

Details

Name:	0000000D.00000002.764495210.000001E3C2A00000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E3C2A00000
Size:	4096

Details

Name:	00000003.00000003.599265312.00000000035FE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35FE000
Size:	94208

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	0000000F.00000002.447469470.00007FF4F3EA8000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F3EA8000
Size:	49152

Details

Name:	00000004.00000002.434264878.00000000027CD000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27CD000
Size:	8192

Details

Name:	00000018.00000002.563388706.00007FF502AD3000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF502AD3000
Size:	4096

Details

Name:	00000003.00000003.405039516.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000002.00000002.427505559.000000000256D000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	256D000
Size:	8192

Details

Name:	00000022.00000003.712884395.00000256C8569000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8569000
Size:	98304

Details

Name:	00000013.00000002.528012460.00007FF547A18000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547A18000
Size:	49152

Details

Name:	00000002.00000002.427712668.0000000002880000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2880000
Size:	4096

Details

Name:	00000004.00000003.430359805.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000000.00000003.740602270.000000000332B000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	332B000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000018.00000002.563545863.00007FF502D38000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF502D38000
Size:	49152

Details

Name:	00000000.00000003.440976782.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000023.00000002.709774363.00007FF58CC89000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58CC89000
Size:	20480

Details

Name:	00000009.00000002.767140750.00007FF5C8437000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C8437000
Size:	8192

Details

Name:	00000002.00000003.410980614.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	00000003.00000003.410163201.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	0000000D.00000002.765775225.00007FF5D5AF0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D5AF0000
Size:	8192

Details

Name:	00000003.00000003.426041650.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000007.00000002.767024181.00007FF5D8E0F000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D8E0F000
Size:	20480

Details

Name:	00000006.00000003.626532153.000001E698302000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E698302000
Size:	4096

Details

Name:	0000000F.00000002.447562778.00007FF4F3F4F000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F3F4F000
Size:	8192

Details

Name:	00000022.00000003.706027329.00000256C85A8000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C85A8000
Size:	49152

Details

Name:	0000001E.00000000.679024015.00007DF5D4F20000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5D4F20000
Size:	4096

Details

Name:	00000023.00000002.709006512.000000E24477F000.00000004.00000010.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	E24477F000
Size:	4096

Details

Name:	0000000F.00000002.447547528.00007FF4F3EF5000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F3EF5000
Size:	12288

Details

Name:	00000022.00000002.733085245.00007FF541A3A000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541A3A000
Size:	16384

Details

Name:	00000000.00000000.239145266.000000007FCC2000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FCC2000
Size:	4096

Details

Name:	00000022.00000003.714693695.00000256C8A02000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8A02000
Size:	159744

Details

Name:	00000000.00000003.410979292.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000006.00000002.627345647.00007DF5823B2000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5823B2000
Size:	4096

Details

Name:	0000001E.00000002.765260414.0000021DF8CC0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	21DF8CC0000
Size:	49152

Details

Name:	00000022.00000002.732034563.00000256C7CE6000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	256C7CE6000
Size:	28672

Details

Name:	00000004.00000002.434802569.00000000031EA000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	31EA000
Size:	12288

Details

Name:	00000005.00000002.447216805.0000000002A6C000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A6C000
Size:	4096

Details

Name:	00000013.00000002.527417452.000000A83CAFE000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A83CAFE000
Size:	8192

Details

Name:	00000003.00000002.767918712.000000000533C000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	533C000
Size:	16384

Details

Name:	00000006.00000003.299544691.000001E69D0D9000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D0D9000
Size:	4096

Details

Name:	0000000B.00000002.434695923.00007FF504C33000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF504C33000
Size:	4096

Details

Name:	00000022.00000002.731641390.000000856F6F8000.00000004.00000010.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	856F6F8000
Size:	32768

Details

Name:	0000000B.00000002.434877008.00007FF504F50000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF504F50000
Size:	36864

Details

Name:	00000022.00000002.732959611.00007FF5419F7000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5419F7000
Size:	8192

Details

Name:	00000022.00000002.733185711.00007FF541ABB000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541ABB000
Size:	8192

Details

Name:	00000022.00000002.732634993.00007FF541778000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541778000
Size:	4096

Details

Name:	00000003.00000003.552379998.00000000035F3000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35F3000
Size:	4096

Details

Name:	00000002.00000003.427088986.0000000002A4D000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2A4D000
Size:	4096

Details

Name:	0000000B.00000002.434194769.000001B344A00000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B344A00000
Size:	73728

Details

Name:	00000018.00000002.563593286.00007FF502D55000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF502D55000
Size:	8192

Details

Name:	00000005.00000003.432772044.0000000003360000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3360000
Size:	4096

Details

Name:	00000004.00000003.434009564.00000000032CD000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	32CD000
Size:	4096

Details

Name:	00000003.00000002.765068412.0000000002FA0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2FA0000
Size:	16384

Details

Name:	00000005.00000003.413349986.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	0000001E.00000002.765009762.0000021DF82A5000.00000004.00000040.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	21DF82A5000
Size:	12288

Details

Name:	00000000.00000003.471964594.000000000101E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	101E000
Size:	45056

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000002.768416725.000000006EEBD000.00000008.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page write copy
Base address:	6EEBD000
Size:	32768

Details

Name:	00000000.00000003.424532700.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000002.00000002.427485872.000000000255D000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	255D000
Size:	24576

Details

Name:	00000004.00000002.434826256.0000000003280000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	3280000
Size:	32768

Details

Name:	00000002.00000003.427101225.0000000002A29000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2A29000
Size:	28672

Details

Name:	00000000.00000002.764319489.00000000009F0000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	9F0000
Size:	4096

Details

Name:	00000000.00000003.421922265.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	0000001E.00000002.765105157.0000021DF86C0000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	21DF86C0000
Size:	12288

Details

Name:	00000005.00000003.417130679.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	00000002.00000002.427572862.00000000025AA000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25AA000
Size:	36864

Details

Name:	00000009.00000002.766549085.00007FF5C808A000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C808A000
Size:	12288

Details

Name:	00000006.00000002.627101478.000001E697F80000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E697F80000
Size:	4096

Details

Name:	00000023.00000002.709012009.000000E2447FF000.00000004.00000010.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	E2447FF000
Size:	4096

Details

Name:	00000004.00000003.401958637.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000003.00000002.768521897.000000007FCC0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FCC0000
Size:	4096

Details

Name:	00000005.00000003.447044014.0000000003499000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3499000
Size:	28672

Details

Name:	00000023.00000002.709253846.000001FA6173E000.00000004.00000001.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FA6173E000
Size:	49152

Details

Name:	00000025.00000002.747313700.00007FF5CC6BB000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC6BB000
Size:	8192

Details

Name:	00000006.00000002.627597129.00007FF56C84D000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C84D000
Size:	16384

Details

Name:	00000005.00000003.427720183.0000000003360000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3360000
Size:	4096

Details

Name:	00000004.00000003.431933796.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000018.00000003.562422763.0000010A85047000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10A85047000
Size:	16384

Details

Name:	00000000.00000003.420825766.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000018.00000002.563264618.00007DF518730000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF518730000
Size:	12288

Details

Name:	00000004.00000003.431073090.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000000.00000003.433709947.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000022.00000002.732885756.00007FF5419C8000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5419C8000
Size:	8192

Details

Name:	00000013.00000002.528108905.00007FF547ADD000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547ADD000
Size:	16384

Details

Name:	00000009.00000002.767269077.00007FF5C8469000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C8469000
Size:	20480

Details

Name:	00000003.00000002.767999565.000000000547B000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	547B000
Size:	20480

Details

Name:	00000006.00000002.627244664.000001E69D0A7000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D0A7000
Size:	45056

Details

Name:	00000003.00000002.767347987.0000000003563000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	3563000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000002.434610086.00000000029C7000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29C7000
Size:	16384

Details

Name:	00000022.00000002.731655454.000000856F7F8000.00000004.00000010.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	856F7F8000
Size:	32768

Details

Name:	0000000B.00000002.434461371.000001B344A65000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B344A65000
Size:	8192

Details

Name:	00000018.00000002.563252559.00007DF518720000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF518720000
Size:	4096

Details

Name:	00000009.00000002.766701717.00007FF5C81F6000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C81F6000
Size:	45056

Details

Name:	0000000D.00000002.765238245.00007DF4E93F0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4E93F0000
Size:	20480

Details

Name:	00000007.00000002.765163685.00000262D4780000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	262D4780000
Size:	4096

Details

Name:	00000003.00000003.397001391.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000003.00000003.508232404.00000000035E7000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35E7000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000025.00000002.746281909.000001BBF38F0000.00000004.00000020.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1BBF38F0000
Size:	8192

Details

Name:	00000004.00000002.434301119.00000000027F4000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27F4000
Size:	8192

Details

Name:	00000025.00000002.747483652.00007FF5CC6EF000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC6EF000
Size:	20480

Details

Name:	0000001D.00000002.764209639.0000020EADC00000.00000004.00000001.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20EADC00000
Size:	4096

Details

Name:	00000007.00000002.764372455.00000262D4213000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	262D4213000
Size:	65536

Details

Name:	00000007.00000002.765374032.00007DF5EE710000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EE710000
Size:	4096

Details

Name:	00000004.00000002.434695380.0000000002FE0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2FE0000
Size:	4096

Details

Name:	00000005.00000003.431373248.0000000003360000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3360000
Size:	4096

Details

Name:	00000004.00000003.412682231.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000004.00000002.434550045.000000000294D000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	294D000
Size:	8192

Details

Name:	0000000D.00000003.416924908.000001E3C3090000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E3C3090000
Size:	4096

Details

Name:	00000003.00000003.599339851.0000000003614000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3614000
Size:	4096

Details

Name:	00000005.00000002.447669551.000000000349C000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	349C000
Size:	16384

Details

Name:	00000003.00000002.765285334.0000000003310000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3310000
Size:	4096

Details

Name:	00000022.00000003.698977145.00000256C85B6000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C85B6000
Size:	49152

Details

Name:	00000006.00000002.627731179.00007FF56C9C8000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C9C8000
Size:	49152

Details

Name:	00000006.00000003.626383258.000001E69CE30000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69CE30000
Size:	4096

Details

Name:	00000002.00000003.427121188.0000000002A3A000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2A3A000
Size:	49152

Details

Name:	00000022.00000003.718116960.00000256C8A63000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8A63000
Size:	397312

Signature Hits	Behavior Group	Mitre Attack
Found detection on Joe Sandbox Cloud Basic with higher score	System Summary

Details

Name:	00000007.00000002.764622769.00000262D423D000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	262D423D000
Size:	73728

Details

Name:	0000001E.00000002.765714451.00007DF5D4F10000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5D4F10000
Size:	4096

Details

Name:	00000004.00000002.434446440.0000000002900000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2900000
Size:	32768

Details

Name:	00000005.00000002.447450461.0000000002C81000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C81000
Size:	8192

Details

Name:	00000005.00000002.447619344.00000000033DA000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	33DA000
Size:	12288

Details

Name:	00000006.00000003.626432563.000001E697B02000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E697B02000
Size:	45056

Details

Name:	00000022.00000002.732758097.00007FF5418A3000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5418A3000
Size:	16384

Details

Name:	00000006.00000002.627272301.000001E69D0D9000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D0D9000
Size:	12288

Details

Name:	00000006.00000002.627509308.00007FF56C76F000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C76F000
Size:	16384

Details

Name:	00000022.00000003.697812346.00000256C7CA9000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C7CA9000
Size:	20480

Details

Name:	00000022.00000000.695648372.00000256C7B60000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	256C7B60000
Size:	102400

Details

Name:	00000013.00000002.527708024.000002442F313000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2442F313000
Size:	12288

Details

Name:	00000004.00000002.434884238.00000000032BB000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	32BB000
Size:	49152

Details

Name:	00000006.00000002.627823390.00007FF56CA7B000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56CA7B000
Size:	8192

Details

Name:	00000000.00000002.764459748.00000000009FF000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	9FF000
Size:	4096

Details

Name:	00000018.00000002.563427052.00007FF502C0E000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF502C0E000
Size:	4096

Details

Name:	0000000D.00000002.764384185.000001E3C2900000.00000004.00000020.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1E3C2900000
Size:	8192

Details

Name:	00000004.00000002.434428892.00000000028F0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28F0000
Size:	12288

Details

Name:	00000022.00000002.732243780.00000256C8500000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8500000
Size:	86016

Details

Name:	00000013.00000002.528120133.00007FF547AEB000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547AEB000
Size:	8192

Details

Name:	00000007.00000000.279955281.00000262D4060000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	262D4060000
Size:	102400

Details

Name:	00000000.00000002.767584680.000000006EDE5000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6EDE5000
Size:	4096

Details

Name:	00000025.00000003.745606581.000001BBF3A77000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBF3A77000
Size:	36864

Details

Name:	00000003.00000002.768157502.0000000005E20000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5E20000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.735792387.0000000003562000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3562000
Size:	77824

Details

Name:	0000000A.00000002.765139532.0000022797B02000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22797B02000
Size:	32768

Details

Name:	00000003.00000003.465148560.00000000035E9000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35E9000
Size:	12288

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000A.00000002.766513065.00007FF593299000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF593299000
Size:	20480

Details

Name:	00000018.00000002.562755456.00000003BC5FF000.00000004.00000010.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3BC5FF000
Size:	4096

Details

Name:	00000000.00000002.764536526.0000000000A10000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	A10000
Size:	16384

Details

Name:	00000009.00000002.766276915.00007DF5DDE22000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5DDE22000
Size:	4096

Details

Name:	00000022.00000003.713262298.00000256C858F000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C858F000
Size:	8192

Details

Name:	00000003.00000003.429093680.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	0000000D.00000000.414945325.00007DF5EB522000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EB522000
Size:	4096

Details

Name:	00000003.00000003.423328805.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000007.00000002.764141588.00000262D4090000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	262D4090000
Size:	4096

Details

Name:	00000003.00000003.599193950.0000000005E21000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5E21000
Size:	475136

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000003.413214220.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000003.00000003.411670494.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000023.00000002.709243125.000001FA6173C000.00000004.00000001.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FA6173C000
Size:	4096

Details

Name:	00000004.00000003.423973515.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	0000001E.00000002.765645315.00007DF4D2DE0000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4D2DE0000
Size:	20480

Details

Name:	00000003.00000002.767399481.0000000003574000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3574000
Size:	4096

Details

Name:	00000002.00000002.427288371.00000000003CC000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3CC000
Size:	4096

Details

Name:	0000001E.00000002.765600229.0000021DF8F30000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	21DF8F30000
Size:	4096

Details

Name:	0000001D.00000002.763882930.000000537F7FE000.00000004.00000010.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	537F7FE000
Size:	8192

Details

Name:	00000007.00000002.766844446.00007FF5D8DF4000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D8DF4000
Size:	4096

Details

Name:	00000005.00000003.447073833.00000000034AF000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	34AF000
Size:	69632

Details

Name:	00000003.00000003.430997307.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000003.00000003.465112163.00000000035EC000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35EC000
Size:	4096

Details

Name:	00000018.00000000.551088450.00007DF518710000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF518710000
Size:	4096

Details

Name:	0000000F.00000000.434976528.00007DF5098A0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5098A0000
Size:	12288

Details

Name:	00000004.00000003.429321708.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000023.00000002.709000522.000000E2446FE000.00000004.00000010.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	E2446FE000
Size:	8192

Details

Name:	00000004.00000003.420462243.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000006.00000002.627340201.00007DF5823B0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5823B0000
Size:	4096

Details

Name:	00000003.00000002.764150827.0000000002BE0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BE0000
Size:	12288

Details

Name:	00000022.00000003.712962685.00000256C8569000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8569000
Size:	98304

Details

Name:	00000003.00000003.599406349.0000000003573000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3573000
Size:	8192

Details

Name:	00000003.00000003.552306024.0000000003578000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3578000
Size:	24576

Details

Name:	0000000D.00000002.766669580.00007FF5D5C1B000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D5C1B000
Size:	8192

Details

Name:	0000000B.00000002.434090733.000000A958E7E000.00000004.00000010.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A958E7E000
Size:	8192

Details

Name:	00000004.00000002.434637969.0000000002E00000.00000004.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2E00000
Size:	4096

Details

Name:	00000013.00000002.527906708.00007FF5477B3000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5477B3000
Size:	4096

Details

Name:	00000000.00000003.429021479.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000023.00000002.709850680.00007FF58CCB5000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58CCB5000
Size:	12288

Details

Name:	00000005.00000003.422697979.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	00000003.00000003.465118223.00000000035EE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35EE000
Size:	40960

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000013.00000002.528022047.00007FF547A2D000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547A2D000
Size:	28672

Details

Name:	0000000F.00000002.447212095.00007DF407750000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF407750000
Size:	20480

Details

Name:	0000000D.00000002.765966795.00007FF5D5B5D000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D5B5D000
Size:	28672

Details

Name:	00000003.00000003.554142316.00000000035F1000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35F1000
Size:	8192

Details

Name:	00000022.00000000.695680177.00007DF5573E2000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5573E2000
Size:	4096

Details

Name:	00000018.00000002.563493161.00007FF502D13000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF502D13000
Size:	4096

Details

Name:	00000003.00000002.763803733.0000000002AC6000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AC6000
Size:	24576

Details

Name:	00000022.00000002.732775455.00007FF5418A8000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5418A8000
Size:	4096

Details

Name:	00000022.00000003.716070931.00000256C856F000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C856F000
Size:	77824

Details

Name:	00000000.00000003.434277045.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000000.00000002.766618625.0000000001050000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1050000
Size:	36864

Details

Name:	00000003.00000002.764431416.0000000002C11000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C11000
Size:	12288

Details

Name:	00000005.00000003.409259617.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	0000001E.00000002.766111896.00007FF5BEEA5000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BEEA5000
Size:	8192

Details

Name:	00000023.00000002.709993839.00007FF58CD34000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58CD34000
Size:	4096

Details

Name:	00000003.00000002.765116351.0000000002FB0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2FB0000
Size:	4096

Details

Name:	00000003.00000003.736088407.00000000035EE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35EE000
Size:	4096

Details

Name:	00000022.00000002.732544652.00007FF54121B000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54121B000
Size:	4096

Details

Name:	00000022.00000003.707673140.00000256C859F000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C859F000
Size:	147456

Details

Name:	0000000B.00000002.434475814.000001B344A6D000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B344A6D000
Size:	40960

Details

Name:	00000003.00000002.764536549.0000000002C1C000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C1C000
Size:	32768

Details

Name:	0000000F.00000003.446705796.00000211BD269000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	211BD269000
Size:	20480

Details

Name:	00000004.00000002.434420325.00000000028E9000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28E9000
Size:	8192

Details

Name:	00000018.00000002.562896503.0000010A84FE0000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	10A84FE0000
Size:	4096

Details

Name:	00000022.00000002.732573079.00007FF54159F000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54159F000
Size:	8192

Details

Name:	00000003.00000002.767697840.00000000035F9000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	35F9000
Size:	4096

Details

Name:	00000000.00000003.437994599.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000006.00000003.262205073.000001E69CF90000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69CF90000
Size:	4096

Details

Name:	00000005.00000002.447414237.0000000002C24000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C24000
Size:	4096

Details

Name:	00000009.00000002.766301625.00007DF5DDE30000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5DDE30000
Size:	4096

Details

Name:	0000000F.00000002.446940945.000000595C0FE000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	595C0FE000
Size:	8192

Details

Name:	00000022.00000003.701602498.00000256C8584000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8584000
Size:	53248

Details

Name:	00000005.00000002.447261677.0000000002B96000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B96000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Found detection on Joe Sandbox Cloud Basic with higher score	System Summary

Details

Name:	00000009.00000002.767097689.00007FF5C841C000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C841C000
Size:	4096

Details

Name:	00000006.00000002.626989955.000001E697A8C000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E697A8C000
Size:	4096

Details

Name:	00000009.00000002.764435882.000002882BCE0000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2882BCE0000
Size:	12288

Details

Name:	00000004.00000002.434270354.00000000027DB000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27DB000
Size:	12288

Details

Name:	00000000.00000002.767003241.000000000289E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	289E000
Size:	8192

Details

Name:	00000002.00000002.427473989.0000000002494000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2494000
Size:	8192

Details

Name:	0000001E.00000002.765386246.0000021DF8F00000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	21DF8F00000
Size:	65536

Details

Name:	00000013.00000002.527366190.000000A83C39E000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A83C39E000
Size:	8192

Details

Name:	00000022.00000002.732411031.00000256C8584000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8584000
Size:	24576

Details

Name:	00000002.00000003.380393594.0000000000600000.00000040.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	600000
Size:	4096

Details

Name:	00000002.00000002.427281814.00000000003C8000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3C8000
Size:	12288

Details

Name:	00000002.00000003.417011519.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	00000000.00000002.767797507.000000006EEBD000.00000008.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page write copy
Base address:	6EEBD000
Size:	32768

Details

Name:	00000000.00000002.767894554.000000007FCD0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FCD0000
Size:	4096

Details

Name:	00000002.00000003.396398925.0000000000850000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	850000
Size:	4096

Details

Name:	00000018.00000002.563706112.00007FF502DF0000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF502DF0000
Size:	36864

Details

Name:	0000000F.00000002.447112758.00000211BD24F000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	211BD24F000
Size:	16384

Details

Name:	00000025.00000002.746777903.00007DF4DFEB0000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4DFEB0000
Size:	20480

Details

Name:	00000000.00000003.560624333.000000000332A000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	332A000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000002.768076589.0000000005918000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5918000
Size:	8192

Details

Name:	00000005.00000003.425650107.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	00000003.00000003.413479177.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000009.00000000.408277946.00007DF5DDE30000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5DDE30000
Size:	4096

Details

Name:	00000005.00000000.259504151.000000007F040000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F040000
Size:	4096

Details

Name:	00000005.00000003.415058169.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	0000001D.00000002.766141905.00007FF518FBB000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF518FBB000
Size:	8192

Details

Name:	00000000.00000003.445027964.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000023.00000002.709221002.000001FA61738000.00000004.00000001.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FA61738000
Size:	12288

Details

Name:	00000018.00000003.562341978.0000010A8504F000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10A8504F000
Size:	4096

Details

Name:	00000000.00000003.469845742.0000000000D30000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D30000
Size:	4096

Details

Name:	00000003.00000003.599302129.00000000035F3000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35F3000
Size:	45056

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.767918578.000000007FCE0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FCE0000
Size:	12288

Details

Name:	0000000B.00000002.434593067.00007DF418740000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF418740000
Size:	20480

Details

Name:	00000022.00000003.712980742.00000256C8569000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8569000
Size:	98304

Details

Name:	00000025.00000002.746118371.0000009B78577000.00000004.00000010.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	9B78577000
Size:	36864

Details

Name:	00000023.00000002.709163656.000001FA61710000.00000004.00000020.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1FA61710000
Size:	28672

Details

Name:	00000007.00000002.766322210.00007FF5D8D5A000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D8D5A000
Size:	16384

Details

Name:	00000025.00000002.747448876.00007FF5CC6DE000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC6DE000
Size:	16384

Details

Name:	0000000D.00000002.766078954.00007FF5D5B73000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D5B73000
Size:	12288

Details

Name:	00000003.00000002.767763756.00000000039B0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	39B0000
Size:	352256

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	00000005.00000003.423862641.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	00000022.00000003.713638177.00000256C856E000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C856E000
Size:	77824

Details

Name:	0000000A.00000002.763809204.00000085973FB000.00000004.00000010.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	85973FB000
Size:	20480

Details

Name:	00000025.00000002.746871814.00007FF5CBE1B000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CBE1B000
Size:	4096

Details

Name:	0000001D.00000002.764100657.0000020EADBC0000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	20EADBC0000
Size:	4096

Details

Name:	00000013.00000002.527960189.00007FF547955000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547955000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Found detection on Joe Sandbox Cloud Basic with higher score	System Summary

Details

Name:	00000002.00000003.396902004.0000000000850000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	850000
Size:	4096

Details

Name:	00000022.00000003.702800445.00000256C8587000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8587000
Size:	32768

Details

Name:	00000000.00000003.605265206.000000000102C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	102C000
Size:	12288

Details

Name:	0000000F.00000002.446900240.000000595B9DE000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	595B9DE000
Size:	8192

Details

Name:	00000022.00000003.710175889.00000256C8596000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8596000
Size:	53248

Signature Hits	Behavior Group	Mitre Attack
Found detection on Joe Sandbox Cloud Basic with higher score	System Summary

Details

Name:	00000000.00000002.767248505.0000000003328000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3328000
Size:	8192

Details

Name:	00000022.00000003.719589350.00000256C85AD000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C85AD000
Size:	32768

Details

Name:	00000022.00000002.732106255.00000256C7D13000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	256C7D13000
Size:	8192

Details

Name:	00000003.00000003.552313075.0000000003580000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3580000
Size:	16384

Details

Name:	00000002.00000003.420827605.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	00000004.00000003.404469942.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	0000000B.00000002.434551087.000001B344ED0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B344ED0000
Size:	12288

Details

Name:	00000000.00000003.446170987.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000022.00000003.713285401.00000256C858F000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C858F000
Size:	8192

Details

Name:	0000000B.00000002.434895438.00007FF504F6B000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF504F6B000
Size:	8192

Details

Name:	0000001E.00000002.766079567.00007FF5BEE2D000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BEE2D000
Size:	4096

Details

Name:	00000003.00000003.465207415.000000000591B000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	591B000
Size:	4096

Details

Name:	00000025.00000002.747137899.00007FF5CC61D000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC61D000
Size:	28672

Details

Name:	00000022.00000002.732222852.00000256C83E0000.00000004.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	256C83E0000
Size:	8192

Details

Name:	00000003.00000002.767221892.000000000352A000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	352A000
Size:	229376

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.767817904.000000006EEC7000.00000040.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute and read and write
Base address:	6EEC7000
Size:	12288

Details

Name:	00000007.00000002.764098896.00000262D4080000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	262D4080000
Size:	12288

Details

Name:	00000022.00000002.732051177.00000256C7CEE000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	256C7CEE000
Size:	45056

Details

Name:	0000000F.00000002.447555100.00007FF4F3F48000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F3F48000
Size:	12288

Details

Name:	00000018.00000002.562872254.0000010A84E10000.00000004.00000020.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	10A84E10000
Size:	8192

Details

Name:	00000018.00000002.563200945.0000010A85400000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	10A85400000
Size:	12288

Details

Name:	00000003.00000000.241180319.000000007FCC0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FCC0000
Size:	4096

Details

Name:	00000004.00000002.434377834.00000000028D1000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28D1000
Size:	12288

Details

Name:	0000001E.00000002.766593158.00007FF5BF559000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BF559000
Size:	20480

Details

Name:	00000022.00000003.713212418.00000256C8592000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8592000
Size:	4096

Details

Name:	00000004.00000003.397323498.00000000032B5000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	32B5000
Size:	12288

Details

Name:	00000006.00000002.627849468.00007FF56CA94000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56CA94000
Size:	4096

Details

Name:	0000000A.00000002.766022452.00007FF59311C000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59311C000
Size:	4096

Details

Name:	00000002.00000003.415193149.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	00000003.00000002.764011445.0000000002BBD000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BBD000
Size:	8192

Details

Name:	0000001E.00000002.767117111.00007FF5BF61F000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BF61F000
Size:	20480

Details

Name:	00000002.00000003.407026728.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	00000004.00000003.407484403.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000018.00000002.563462699.00007FF502C75000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF502C75000
Size:	24576

Details

Name:	0000000D.00000002.764025638.000000623F57F000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	623F57F000
Size:	4096

Details

Name:	00000007.00000002.765115841.00000262D4600000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	262D4600000
Size:	12288

Details

Name:	0000000B.00000002.434497709.000001B344A7A000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B344A7A000
Size:	4096

Details

Name:	00000003.00000003.691700684.00000000035A4000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35A4000
Size:	299008

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000003.408604381.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	0000000A.00000003.410990542.0000022797A67000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22797A67000
Size:	53248

Details

Name:	0000000B.00000002.434371900.000001B344A3A000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B344A3A000
Size:	8192

Details

Name:	0000001E.00000002.765764148.00007DF5D4F12000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5D4F12000
Size:	4096

Details

Name:	0000000B.00000002.434859213.00007FF504F46000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF504F46000
Size:	16384

Details

Name:	00000002.00000003.407678087.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	00000005.00000002.447903287.000000007EF40000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7EF40000
Size:	20480

Details

Name:	00000006.00000002.627745804.00007FF56C9DD000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C9DD000
Size:	28672

Details

Name:	00000002.00000003.413281356.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	00000004.00000003.416994407.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000013.00000000.511575933.000002442F040000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2442F040000
Size:	102400

Details

Name:	00000022.00000002.732438547.00007DF4552B0000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4552B0000
Size:	20480

Details

Name:	00000018.00000003.562298625.0000010A85053000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10A85053000
Size:	114688

Details

Name:	00000025.00000002.746481621.000001BBF3A55000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBF3A55000
Size:	102400

Details

Name:	00000006.00000000.259967270.00007DF5823A0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5823A0000
Size:	4096

Details

Name:	00000002.00000002.427600653.00000000025C5000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25C5000
Size:	8192

Details

Name:	00000022.00000002.733120780.00007FF541AA8000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541AA8000
Size:	12288

Details

Name:	00000013.00000002.527825214.00007DF55D410000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55D410000
Size:	12288

Details

Name:	00000022.00000003.697967329.00000256C83D0000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C83D0000
Size:	4096

Details

Name:	00000007.00000002.766009508.00007FF5D8D17000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D8D17000
Size:	8192

Details

Name:	00000007.00000002.765024144.00000262D4313000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	262D4313000
Size:	20480

Details

Name:	0000000F.00000002.447349835.00007FF4F3D53000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F3D53000
Size:	4096

Details

Name:	00000003.00000003.412675385.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000002.00000002.427840849.0000000002A4D000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A4D000
Size:	4096

Details

Name:	00000025.00000002.746017274.0000009B77EDC000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	9B77EDC000
Size:	16384

Details

Name:	00000022.00000003.713118200.00000256C856D000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C856D000
Size:	81920

Details

Name:	0000000F.00000000.434966756.00007DF509892000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF509892000
Size:	4096

Details

Name:	00000003.00000002.765177787.00000000030BC000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	30BC000
Size:	4096

Details

Name:	00000003.00000002.765532371.0000000003370000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3370000
Size:	4096

Details

Name:	00000000.00000003.413283907.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	0000000A.00000002.764040149.000000859797E000.00000004.00000010.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	859797E000
Size:	8192

Details

Name:	00000003.00000003.426379701.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000022.00000003.701701969.00000256C8A1E000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8A1E000
Size:	114688

Details

Name:	00000007.00000002.763732572.0000007A7A2CB000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7A7A2CB000
Size:	20480

Details

Name:	00000000.00000003.417132676.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000022.00000003.708088923.00000256C8585000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8585000
Size:	61440

Details

Name:	0000000D.00000002.766591268.00007FF5D5C0D000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D5C0D000
Size:	16384

Details

Name:	0000000A.00000002.765469677.00007DF4A6B20000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4A6B20000
Size:	20480

Details

Name:	0000000B.00000002.434531940.000001B344B02000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B344B02000
Size:	16384

Details

Name:	00000022.00000003.710903098.00000256C858E000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C858E000
Size:	12288

Details

Name:	0000000A.00000002.766849848.00007FF593344000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF593344000
Size:	4096

Details

Name:	00000004.00000003.428684925.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	0000001E.00000002.764871711.0000021DF80B3000.00000004.00000020.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	21DF80B3000
Size:	4096

Details

Name:	00000009.00000002.765295072.000002882BE88000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2882BE88000
Size:	8192

Details

Name:	00000025.00000000.733923949.00007DF5E1FF0000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E1FF0000
Size:	4096

Details

Name:	00000025.00000002.746707381.000001BBF3C00000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1BBF3C00000
Size:	4096

Details

Name:	0000000A.00000002.766038575.00007FF593126000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF593126000
Size:	4096

Details

Name:	00000002.00000002.427293438.000000000043A000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	43A000
Size:	24576

Details

Name:	00000003.00000002.765326760.0000000003320000.00000040.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	3320000
Size:	4096

Details

Name:	00000000.00000003.651924488.0000000001029000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1029000
Size:	12288

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000F.00000002.447326905.00007FF4F3B36000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F3B36000
Size:	4096

Details

Name:	00000004.00000002.434507672.0000000002929000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2929000
Size:	8192

Details

Name:	00000006.00000003.626553870.000001E698313000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E698313000
Size:	20480

Details

Name:	00000006.00000000.259981556.00007DF5823B2000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5823B2000
Size:	4096

Details

Name:	00000000.00000003.405352193.00000000009D0000.00000040.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page execute and read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000018.00000002.563410263.00007FF502BE3000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF502BE3000
Size:	4096

Details

Name:	00000004.00000003.415496666.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	0000000D.00000003.416939862.000001E3C3090000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E3C3090000
Size:	4096

Details

Name:	00000022.00000002.732668357.00007FF5417F7000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5417F7000
Size:	4096

Details

Name:	00000013.00000002.527657757.000002442F288000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2442F288000
Size:	20480

Details

Name:	00000002.00000002.427656081.00000000025F4000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25F4000
Size:	4096

Details

Name:	00000022.00000003.700139524.00000256C8587000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8587000
Size:	32768

Details

Name:	00000003.00000002.767705981.0000000003614000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3614000
Size:	4096

Details

Name:	00000000.00000003.407677627.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	0000001E.00000002.763896894.00000049A7379000.00000004.00000010.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	49A7379000
Size:	28672

Details

Name:	00000006.00000002.626938577.000001E697A40000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E697A40000
Size:	94208

Details

Name:	00000022.00000002.731981182.00000256C7CC2000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	256C7CC2000
Size:	36864

Details

Name:	00000004.00000002.434459954.000000000290A000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	290A000
Size:	36864

Details

Name:	0000000B.00000002.434105519.000000A95917E000.00000004.00000010.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A95917E000
Size:	8192

Details

Name:	00000002.00000002.427641140.00000000025DD000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25DD000
Size:	8192

Details

Name:	00000005.00000003.409763421.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	00000004.00000002.435655402.000000007FA12000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FA12000
Size:	4096

Details

Name:	00000003.00000002.767950407.00000000053BD000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	53BD000
Size:	12288

Details

Name:	00000000.00000003.560568511.0000000000FBB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FBB000
Size:	32768

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.421250433.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000003.00000003.427090279.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	0000001D.00000002.765104847.00007DF52E8F2000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF52E8F2000
Size:	4096

Details

Name:	00000000.00000000.239156549.000000007FCE0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FCE0000
Size:	12288

Details

Name:	0000001D.00000002.764669173.0000020EADED0000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	20EADED0000
Size:	4096

Details

Name:	00000003.00000003.465105369.000000000591D000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	591D000
Size:	4096

Details

Name:	00000023.00000000.696967732.00007DF5A2660000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A2660000
Size:	12288

Details

Name:	00000005.00000003.429322527.0000000003360000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3360000
Size:	4096

Details

Name:	00000000.00000003.442785436.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	0000000D.00000002.764054256.000000623F67D000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	623F67D000
Size:	12288

Details

Name:	0000000B.00000002.434441078.000001B344A5A000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B344A5A000
Size:	16384

Details

Name:	0000000F.00000002.447183583.00000211BD6D0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	211BD6D0000
Size:	12288

Details

Name:	00000022.00000003.700052682.00000256C8557000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8557000
Size:	32768

Details

Name:	00000000.00000003.437197899.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000022.00000003.698916429.00000256C85A1000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C85A1000
Size:	45056

Details

Name:	00000022.00000003.714903132.00000256C85A1000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C85A1000
Size:	212992

Details

Name:	00000005.00000003.420954566.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	00000005.00000002.447544291.000000000306F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	306F000
Size:	4096

Details

Name:	00000005.00000003.414487064.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	0000000D.00000000.414936424.00007DF5EB520000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EB520000
Size:	4096

Details

Name:	00000007.00000002.764176079.00000262D40B0000.00000004.00000020.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	262D40B0000
Size:	8192

Details

Name:	00000003.00000002.765635286.00000000033A1000.00000020.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	33A1000
Size:	45056

Details

Name:	00000000.00000003.436923496.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000022.00000003.719639662.00000256C85DF000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C85DF000
Size:	61440

Details

Name:	00000006.00000002.627502081.00007FF56C73A000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C73A000
Size:	4096

Details

Name:	00000003.00000003.399011176.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	0000000F.00000002.447319891.00007FF4F3A68000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F3A68000
Size:	4096

Details

Name:	00000025.00000002.746909844.00007FF5CC1C8000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC1C8000
Size:	4096

Details

Name:	00000005.00000002.447369045.0000000002BF9000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BF9000
Size:	8192

Details

Name:	0000000B.00000002.434833054.00007FF504EE5000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF504EE5000
Size:	12288

Details

Name:	00000006.00000002.626806781.000000C7587FB000.00000004.00000010.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	C7587FB000
Size:	20480

Details

Name:	00000004.00000003.426040437.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	0000000F.00000002.447119184.00000211BD256000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	211BD256000
Size:	73728

Details

Name:	0000000B.00000002.434166043.000001B344930000.00000004.00000020.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1B344930000
Size:	8192

Details

Name:	0000000B.00000002.434668817.00007FF5047BE000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5047BE000
Size:	12288

Details

Name:	0000000D.00000002.766761290.00007FF5D5C2D000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D5C2D000
Size:	4096

Details

Name:	00000025.00000002.747465474.00007FF5CC6EB000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC6EB000
Size:	4096

Details

Name:	00000006.00000003.263523795.000001E69D220000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D220000
Size:	4096

Details

Name:	00000002.00000003.393886921.0000000000850000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	850000
Size:	4096

Details

Name:	00000023.00000003.708644790.000001FA6174E000.00000004.00000001.sdmp
TargetID:	35
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FA6174E000
Size:	8192

Details

Name:	0000000F.00000002.446945577.00000211BD140000.00000004.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	211BD140000
Size:	4096

Details

Name:	00000002.00000002.427371697.0000000000670000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	670000
Size:	69632

Details

Name:	00000002.00000002.427541536.0000000002589000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2589000
Size:	8192

Details

Name:	00000006.00000002.627174964.000001E69D041000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D041000
Size:	8192

Details

Name:	00000005.00000002.447800747.0000000006A00000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6A00000
Size:	733184

Details

Name:	00000005.00000003.428230157.0000000003360000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3360000
Size:	4096

Details

Name:	00000006.00000002.627160518.000001E69D02E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D02E000
Size:	45056

Details

Name:	00000009.00000002.766078177.000002882C700000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2882C700000
Size:	4096

Details

Name:	00000006.00000002.627294626.000001E69D0F5000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D0F5000
Size:	4096

Details

Name:	00000006.00000002.627644308.00007FF56C960000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C960000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
Found detection on Joe Sandbox Cloud Basic with higher score	System Summary

Details

Name:	00000025.00000002.746145669.0000009B7877E000.00000004.00000010.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	9B7877E000
Size:	8192

Details

Name:	00000007.00000002.766154699.00007FF5D8D45000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D8D45000
Size:	8192

Details

Name:	00000000.00000003.427716159.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000003.00000002.768029027.00000000054FF000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	54FF000
Size:	4096

Details

Name:	00000022.00000003.713320251.00000256C8592000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8592000
Size:	4096

Details

Name:	00000003.00000003.410665950.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000009.00000002.765461098.000002882BECB000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2882BECB000
Size:	106496

Details

Name:	00000003.00000002.768090461.0000000005CDE000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5CDE000
Size:	8192

Details

Name:	00000004.00000002.435625806.000000007FA10000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FA10000
Size:	4096

Details

Name:	00000003.00000002.767192381.0000000003520000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	3520000
Size:	36864

Details

Name:	00000000.00000003.560551400.000000000332B000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	332B000
Size:	4096

Details

Name:	0000000A.00000002.766488999.00007FF593295000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF593295000
Size:	8192

Details

Name:	00000002.00000002.427565089.00000000025A0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25A0000
Size:	32768

Details

Name:	00000006.00000002.627351313.00007DF5823C0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5823C0000
Size:	12288

Details

Name:	00000000.00000002.764263148.00000000009B0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	9B0000
Size:	8192

Details

Name:	0000000D.00000002.765943753.00007FF5D5B3D000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D5B3D000
Size:	16384

Details

Name:	0000000F.00000002.447008494.00000211BD1C0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	211BD1C0000
Size:	16384

Details

Name:	00000002.00000003.427136375.0000000002A31000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2A31000
Size:	28672

Details

Name:	00000025.00000003.745645234.000001BBF3A50000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBF3A50000
Size:	122880

Details

Name:	00000002.00000002.427616794.00000000025CC000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25CC000
Size:	32768

Details

Name:	00000007.00000002.763799434.0000007A7A7FB000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	7A7A7FB000
Size:	20480

Details

Name:	00000000.00000003.651866315.000000000102C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	102C000
Size:	40960

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000009.00000002.766970532.00007FF5C8352000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C8352000
Size:	4096

Details

Name:	00000004.00000002.434759967.00000000030D0000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	30D0000
Size:	4096

Details

Name:	00000003.00000003.424536119.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000000.00000003.425652057.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000003.00000002.764815812.0000000002CAC000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CAC000
Size:	20480

Details

Name:	00000005.00000002.447240549.0000000002AAB000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AAB000
Size:	12288

Details

Name:	0000001D.00000002.765960220.00007FF518F33000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF518F33000
Size:	12288

Signature Hits	Behavior Group	Mitre Attack
Found detection on Joe Sandbox Cloud Basic with higher score	System Summary

Details

Name:	0000000D.00000002.763849562.000000623F2FE000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	623F2FE000
Size:	8192

Details

Name:	00000005.00000003.421155781.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	00000022.00000003.699975940.00000256C8584000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8584000
Size:	4096

Details

Name:	0000001D.00000002.765988980.00007FF518F3A000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF518F3A000
Size:	16384

Details

Name:	00000002.00000002.427390455.00000000007F0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F0000
Size:	4096

Details

Name:	00000003.00000002.768219881.000000006EDE5000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6EDE5000
Size:	4096

Details

Name:	00000023.00000002.709124560.000001FA616B0000.00000004.00000001.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FA616B0000
Size:	4096

Details

Name:	00000006.00000002.627329599.00007DF5823A0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5823A0000
Size:	4096

Details

Name:	00000006.00000003.290619798.000001E698359000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E698359000
Size:	4096

Details

Name:	00000004.00000003.430996335.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000022.00000002.731711219.00000256C7B80000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	256C7B80000
Size:	12288

Details

Name:	00000004.00000002.434436502.00000000028F4000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28F4000
Size:	40960

Details

Name:	00000000.00000003.438732871.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	0000001E.00000003.679654701.0000021DF8099000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	21DF8099000
Size:	4096

Details

Name:	00000003.00000003.738114008.0000000003614000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3614000
Size:	4096

Details

Name:	0000001D.00000002.764910573.0000020EAE380000.00000002.00000001.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	20EAE380000
Size:	4096

Details

Name:	00000003.00000003.599496882.0000000003562000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3562000
Size:	69632

Details

Name:	00000002.00000002.427274459.00000000001F0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F0000
Size:	16384

Details

Name:	0000001D.00000002.764827439.0000020EAE330000.00000004.00000001.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20EAE330000
Size:	4096

Details

Name:	00000003.00000003.687457349.0000000003578000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3578000
Size:	24576

Details

Name:	00000000.00000002.767788888.000000006EEBC000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6EEBC000
Size:	4096

Details

Name:	00000003.00000003.508376265.00000000035A4000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35A4000
Size:	270336

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000002.00000002.427880764.0000000005CE0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	5CE0000
Size:	733184

Details

Name:	00000004.00000002.434701518.0000000003000000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3000000
Size:	16384

Details

Name:	00000000.00000003.408898283.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000006.00000003.626593240.000001E69D043000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D043000
Size:	24576

Details

Name:	00000022.00000003.705530470.00000256C8591000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8591000
Size:	8192

Details

Name:	0000001D.00000002.765093222.00007DF52E8F0000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF52E8F0000
Size:	4096

Details

Name:	00000003.00000003.423976783.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	0000000A.00000000.410171644.0000022797920000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	22797920000
Size:	102400

Details

Name:	00000006.00000002.627710686.00007FF56C9B7000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C9B7000
Size:	8192

Details

Name:	00000013.00000002.527447396.000002442F030000.00000004.00000040.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2442F030000
Size:	4096

Details

Name:	00000007.00000002.765833868.00007FF5D8CBD000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D8CBD000
Size:	8192

Details

Name:	00000009.00000002.767258439.00007FF5C8465000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C8465000
Size:	8192

Details

Name:	00000004.00000002.434513386.000000000292C000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	292C000
Size:	32768

Details

Name:	00000004.00000000.250143228.000000007FA12000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FA12000
Size:	4096

Details

Name:	0000000A.00000002.764546446.0000022797A00000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22797A00000
Size:	4096

Details

Name:	0000000A.00000002.764913528.0000022797A5A000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22797A5A000
Size:	40960

Details

Name:	00000000.00000003.409963708.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000009.00000002.765115760.000002882BE6D000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2882BE6D000
Size:	106496

Details

Name:	00000022.00000003.707829383.00000256C7CC5000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C7CC5000
Size:	24576

Details

Name:	00000022.00000002.733198721.00007FF541AC0000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541AC0000
Size:	36864

Details

Name:	00000007.00000002.766525702.00007FF5D8DCF000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D8DCF000
Size:	20480

Details

Name:	0000000D.00000002.765287896.00007DF5EB520000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EB520000
Size:	4096

Details

Name:	0000000B.00000002.434542443.000001B344CD0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B344CD0000
Size:	4096

Details

Name:	0000001E.00000002.765148572.0000021DF8840000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	21DF8840000
Size:	4096

Details

Name:	00000003.00000003.738588244.00000000035F0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35F0000
Size:	12288

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000002.00000003.427141773.0000000002A39000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2A39000
Size:	4096

Details

Name:	00000023.00000002.709338675.000001FA619B0000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FA619B0000
Size:	36864

Details

Name:	00000005.00000003.425267561.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	00000004.00000003.433942094.0000000004BB0000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4BB0000
Size:	4096

Details

Name:	00000003.00000003.421787862.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000002.00000001.241087318.000000006EDE0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	6EDE0000
Size:	4096

Details

Name:	00000018.00000002.563692930.00007FF502DEB000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF502DEB000
Size:	8192

Details

Name:	00000007.00000002.764295878.00000262D4202000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	262D4202000
Size:	65536

Details

Name:	0000000B.00000002.434159925.000001B344910000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B344910000
Size:	4096

Details

Name:	00000002.00000003.409962965.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	00000000.00000003.471955952.000000000332D000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	332D000
Size:	4096

Details

Name:	00000002.00000003.425852673.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	00000022.00000002.732976774.00007FF5419FC000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5419FC000
Size:	45056

Details

Name:	00000022.00000003.710125512.00000256C85A8000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C85A8000
Size:	73728

Details

Name:	00000022.00000002.731578950.000000856F578000.00000004.00000010.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	856F578000
Size:	32768

Details

Name:	00000000.00000003.425849738.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	0000001D.00000002.764319851.0000020EADC13000.00000004.00000001.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20EADC13000
Size:	86016

Details

Name:	00000013.00000002.527987494.00007FF5479F7000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5479F7000
Size:	4096

Details

Name:	0000000F.00000002.446918051.000000595BDFB000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	595BDFB000
Size:	20480

Details

Name:	00000002.00000000.240781137.000000007FC30000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FC30000
Size:	4096

Details

Name:	0000001D.00000000.678352939.00007DF52E8F2000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF52E8F2000
Size:	4096

Details

Name:	00000003.00000003.420684488.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000022.00000003.716240059.00000256C858E000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C858E000
Size:	4096

Details

Name:	00000005.00000000.259527038.000000007F060000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F060000
Size:	12288

Details

Name:	00000003.00000003.381462412.0000000003330000.00000040.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	3330000
Size:	4096

Details

Name:	00000022.00000003.713173979.00000256C856D000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C856D000
Size:	81920

Details

Name:	0000001D.00000000.678316447.00007DF52E8E2000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF52E8E2000
Size:	4096

Details

Name:	00000006.00000002.627663391.00007FF56C980000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C980000
Size:	12288

Details

Name:	00000000.00000003.413185733.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000005.00000003.413145177.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	00000006.00000002.626741521.000000C757ECB000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C757ECB000
Size:	20480

Details

Name:	00000006.00000002.627562214.00007FF56C7B7000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C7B7000
Size:	20480

Details

Name:	00000004.00000003.404972901.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000000.00000003.410466669.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000004.00000003.397329436.00000000032B1000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	32B1000
Size:	4096

Details

Name:	00000023.00000002.709177430.000001FA61719000.00000004.00000020.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1FA61719000
Size:	36864

Details

Name:	00000004.00000002.434542107.000000000293D000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	293D000
Size:	8192

Details

Name:	0000000B.00000003.433924985.000001B344A57000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B344A57000
Size:	4096

Details

Name:	00000023.00000002.709085126.000001FA61650000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FA61650000
Size:	102400

Details

Name:	00000013.00000002.527879259.00007FF5475C9000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5475C9000
Size:	32768

Details

Name:	0000001D.00000002.765388659.00007FF518D8D000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF518D8D000
Size:	4096

Details

Name:	00000005.00000003.426040811.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	00000018.00000002.563723136.00007FF502DFD000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF502DFD000
Size:	16384

Details

Name:	00000023.00000003.708537971.000001FA6173E000.00000004.00000001.sdmp
TargetID:	35
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FA6173E000
Size:	49152

Details

Name:	00000006.00000002.627253664.000001E69D0B3000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D0B3000
Size:	143360

Details

Name:	00000004.00000003.425851961.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000006.00000003.625312059.000001E69CF90000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69CF90000
Size:	4096

Details

Name:	0000000B.00000002.434153560.000001B344900000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B344900000
Size:	12288

Details

Name:	00000022.00000003.713311400.00000256C858F000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C858F000
Size:	8192

Details

Name:	00000005.00000003.414952867.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	0000001D.00000002.763767691.000000537F2CC000.00000004.00000001.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	537F2CC000
Size:	16384

Details

Name:	00000002.00000003.415492711.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	00000003.00000003.429422038.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000000.00000003.426380467.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000022.00000002.732533115.00007FF541215000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541215000
Size:	16384

Details

Name:	00000004.00000003.428228441.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000023.00000002.709018318.000000E244879000.00000004.00000010.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	E244879000
Size:	28672

Details

Name:	0000000A.00000000.410203206.00007DF5A8C70000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A8C70000
Size:	12288

Details

Name:	00000022.00000003.713343929.00000256C858E000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C858E000
Size:	4096

Details

Name:	00000002.00000003.398408653.0000000000850000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	850000
Size:	4096

Details

Name:	00000007.00000002.764011990.00000262D4060000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	262D4060000
Size:	102400

Details

Name:	00000000.00000003.443255459.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	0000001E.00000000.679051554.00007DF5D4F30000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5D4F30000
Size:	12288

Details

Name:	00000005.00000003.415557566.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	00000022.00000003.713653482.00000256C8590000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8590000
Size:	4096

Details

Name:	00000006.00000002.627657358.00007FF56C970000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C970000
Size:	8192

Details

Name:	00000022.00000003.706840548.00000256C8586000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8586000
Size:	4096

Details

Name:	00000006.00000003.626474975.000001E69D280000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D280000
Size:	4096

Details

Name:	00000009.00000002.767524293.00007FF5C850D000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C850D000
Size:	16384

Details

Name:	00000003.00000003.415192002.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000006.00000002.627792820.00007FF56CA15000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56CA15000
Size:	12288

Details

Name:	00000022.00000003.716125083.00000256C8566000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8566000
Size:	32768

Details

Name:	00000025.00000002.746368999.000001BBF3A13000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBF3A13000
Size:	86016

Details

Name:	00000018.00000002.562699165.00000003BC2FB000.00000004.00000010.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3BC2FB000
Size:	20480

Details

Name:	00000013.00000002.528050895.00007FF547A4A000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547A4A000
Size:	16384

Details

Name:	00000025.00000002.747162925.00007FF5CC629000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC629000
Size:	20480

Details

Name:	00000002.00000003.413184355.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	00000013.00000003.527162383.000002442F27E000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2442F27E000
Size:	36864

Details

Name:	00000013.00000002.527511584.000002442F190000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2442F190000
Size:	4096

Details

Name:	0000000A.00000002.766574658.00007FF5932A3000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5932A3000
Size:	12288

Details

Name:	0000000A.00000002.766684228.00007FF59331F000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59331F000
Size:	8192

Details

Name:	00000003.00000002.765902606.00000000033C7000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	33C7000
Size:	8192

Details

Name:	00000003.00000003.644079719.000000000591C000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	591C000
Size:	40960

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.469822064.0000000000D30000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D30000
Size:	4096

Details

Name:	00000003.00000003.644097565.000000000591A000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	591A000
Size:	4096

Details

Name:	0000000B.00000002.434136441.000001B3448E0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B3448E0000
Size:	102400

Details

Name:	00000000.00000003.413485768.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000002.00000003.383882919.0000000002A2E000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2A2E000
Size:	8192

Details

Name:	00000003.00000002.765860430.00000000033C0000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	33C0000
Size:	20480

Details

Name:	00000003.00000003.735810227.0000000003578000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3578000
Size:	24576

Details

Name:	00000003.00000003.418186852.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000000.00000003.472038155.000000000332C000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	332C000
Size:	4096

Details

Name:	00000005.00000002.447634688.0000000003470000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	3470000
Size:	32768

Details

Name:	00000002.00000003.423975062.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	00000022.00000003.710163045.00000256C7CC5000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C7CC5000
Size:	20480

Details

Name:	0000000A.00000002.766817522.00007FF59333D000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59333D000
Size:	16384

Details

Name:	00000025.00000002.746454439.000001BBF3A4D000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBF3A4D000
Size:	12288

Details

Name:	00000025.00000002.746068772.0000009B77FDE000.00000004.00000010.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	9B77FDE000
Size:	8192

Details

Name:	00000002.00000002.428188678.000000007FC30000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FC30000
Size:	4096

Details

Name:	00000013.00000002.527519045.000002442F200000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2442F200000
Size:	73728

Details

Name:	00000005.00000002.447894330.0000000006EA0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6EA0000
Size:	4096

Details

Name:	0000001E.00000002.764318611.0000021DF7FD0000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	21DF7FD0000
Size:	102400

Details

Name:	00000005.00000002.447361696.0000000002BF5000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BF5000
Size:	8192

Details

Name:	00000018.00000002.562795576.0000010A84DB0000.00000004.00000040.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	10A84DB0000
Size:	4096

Details

Name:	00000022.00000002.732897283.00007FF5419D2000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5419D2000
Size:	16384

Details

Name:	00000022.00000003.731131111.00000256C7C5D000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C7C5D000
Size:	16384

Details

Name:	0000001E.00000002.766155966.00007FF5BF34B000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BF34B000
Size:	4096

Details

Name:	00000023.00000002.710002606.00007FF58CD3B000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58CD3B000
Size:	8192

Details

Name:	00000005.00000003.423292164.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	00000004.00000002.434535526.0000000002939000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2939000
Size:	8192

Details

Name:	00000004.00000003.434071705.00000000032AD000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	32AD000
Size:	12288

Details

Name:	00000009.00000002.766185796.000002882C73A000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2882C73A000
Size:	8192

Details

Name:	00000005.00000002.447336332.0000000002BE5000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BE5000
Size:	16384

Details

Name:	00000006.00000002.627204759.000001E69D062000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D062000
Size:	143360

Details

Name:	00000006.00000002.627877330.00007FF56CAAF000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56CAAF000
Size:	20480

Details

Name:	0000000D.00000002.764614815.000001E3C2A13000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E3C2A13000
Size:	86016

Details

Name:	00000003.00000002.763898479.0000000002B98000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B98000
Size:	4096

Details

Name:	00000018.00000002.563651978.00007FF502D85000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF502D85000
Size:	12288

Details

Name:	00000007.00000002.766037915.00007FF5D8D1C000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D8D1C000
Size:	20480

Details

Name:	00000003.00000003.552323272.0000000003586000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3586000
Size:	122880

Details

Name:	00000023.00000002.709790088.00007FF58CC93000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58CC93000
Size:	12288

Details

Name:	00000004.00000003.421218046.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000025.00000002.746516646.000001BBF3A6F000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBF3A6F000
Size:	16384

Details

Name:	00000022.00000002.731460837.000000856ED8D000.00000004.00000010.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	856ED8D000
Size:	12288

Details

Name:	00000022.00000003.700129024.00000256C8584000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8584000
Size:	4096

Details

Name:	00000003.00000003.407082293.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	0000001E.00000002.767077913.00007FF5BF60B000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BF60B000
Size:	8192

Details

Name:	0000000B.00000002.434713752.00007FF504D1D000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF504D1D000
Size:	16384

Details

Name:	0000001E.00000002.764972646.0000021DF82A0000.00000004.00000040.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	21DF82A0000
Size:	12288

Details

Name:	00000022.00000002.733261933.00007FF541ADB000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541ADB000
Size:	8192

Details

Name:	00000009.00000002.765734807.000002882C470000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2882C470000
Size:	4096

Details

Name:	00000022.00000002.732469207.00007DF5573F0000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5573F0000
Size:	4096

Details

Name:	00000000.00000003.438134858.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000023.00000003.708617573.000001FA6174B000.00000004.00000001.sdmp
TargetID:	35
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FA6174B000
Size:	20480

Details

Name:	00000025.00000002.746834765.00007DF5E2000000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E2000000
Size:	12288

Details

Name:	00000023.00000000.696919403.00007DF5A2640000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A2640000
Size:	4096

Details

Name:	00000022.00000002.731831291.00000256C7C5B000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	256C7C5B000
Size:	4096

Details

Name:	0000000A.00000002.764099998.0000008597B7F000.00000004.00000010.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8597B7F000
Size:	4096

Details

Name:	00000003.00000002.767910308.0000000005228000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5228000
Size:	4096

Details

Name:	0000000F.00000002.447159427.00000211BD302000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	211BD302000
Size:	16384

Details

Name:	00000023.00000002.709897726.00007FF58CD08000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58CD08000
Size:	12288

Details

Name:	0000001D.00000002.764758662.0000020EAE250000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	20EAE250000
Size:	4096

Details

Name:	00000004.00000003.424902514.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000005.00000003.447002184.0000000005298000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5298000
Size:	4096

Details

Name:	0000000D.00000002.766167034.00007FF5D5B95000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D5B95000
Size:	12288

Details

Name:	00000009.00000002.764295157.000002882BCB0000.00000004.00000040.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2882BCB0000
Size:	4096

Details

Name:	0000000F.00000002.447173164.00000211BD313000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	211BD313000
Size:	12288

Details

Name:	00000004.00000002.434618587.0000000002C3C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C3C000
Size:	12288

Details

Name:	00000018.00000002.563177375.0000010A85113000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	10A85113000
Size:	12288

Details

Name:	00000004.00000002.434247169.000000000279C000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	279C000
Size:	4096

Details

Name:	00000006.00000002.626822554.000001E697880000.00000004.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1E697880000
Size:	4096

Details

Name:	00000006.00000002.627586234.00007FF56C844000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C844000
Size:	8192

Details

Name:	00000002.00000002.427315404.00000000005C0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	5C0000
Size:	16384

Details

Name:	00000000.00000003.740212122.0000000001029000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1029000
Size:	12288

Details

Name:	0000000F.00000002.447613098.00007FF4F3F74000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F3F74000
Size:	4096

Details

Name:	00000000.00000003.436621152.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000005.00000002.447562240.0000000003300000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	3300000
Size:	4096

Details

Name:	0000000B.00000002.434503880.000001B344A7E000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B344A7E000
Size:	16384

Details

Name:	00000005.00000002.447603813.00000000033D0000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	33D0000
Size:	20480

Details

Name:	00000022.00000003.710698894.00000256C8560000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8560000
Size:	57344

Details

Name:	00000004.00000003.403465684.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000006.00000002.627195648.000001E69D055000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D055000
Size:	49152

Details

Name:	0000001E.00000002.766823297.00007FF5BF5DF000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BF5DF000
Size:	8192

Details

Name:	00000006.00000002.627581046.00007FF56C800000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C800000
Size:	4096

Details

Name:	00000022.00000002.732838659.00007FF541945000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541945000
Size:	24576

Details

Name:	00000022.00000002.731664043.00000256C7B40000.00000004.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	256C7B40000
Size:	4096

Details

Name:	00000006.00000002.626828516.000001E697890000.00000004.00000040.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1E697890000
Size:	4096

Details

Name:	00000009.00000002.767563081.00007FF5C851B000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C851B000
Size:	8192

Details

Name:	0000000F.00000002.447508819.00007FF4F3EC5000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F3EC5000
Size:	8192

Details

Name:	00000000.00000003.430995914.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000004.00000003.427717998.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	0000000D.00000002.765018308.000001E3C2C00000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E3C2C00000
Size:	4096

Details

Name:	00000013.00000002.527621962.000002442F26D000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2442F26D000
Size:	24576

Details

Name:	0000000F.00000002.447387883.00007FF4F3DDF000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F3DDF000
Size:	20480

Details

Name:	00000003.00000003.738569493.00000000035E9000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35E9000
Size:	40960

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000002.767444019.0000000003580000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3580000
Size:	16384

Details

Name:	0000000F.00000002.447340632.00007FF4F3D2D000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F3D2D000
Size:	16384

Details

Name:	00000025.00000002.746767314.000001BBF4202000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBF4202000
Size:	4096

Details

Name:	00000022.00000002.733243088.00007FF541AD4000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541AD4000
Size:	4096

Details

Name:	0000000B.00000002.434468332.000001B344A6A000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B344A6A000
Size:	4096

Details

Name:	00000023.00000002.709746642.00007FF58CC85000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58CC85000
Size:	8192

Details

Name:	00000009.00000002.766892168.00007FF5C833D000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C833D000
Size:	12288

Details

Name:	00000003.00000003.508410810.00000000035E7000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35E7000
Size:	20480

Details

Name:	0000000F.00000002.447627533.00007FF4F3F7E000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F3F7E000
Size:	16384

Details

Name:	00000006.00000002.627716496.00007FF56C9BC000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C9BC000
Size:	45056

Details

Name:	00000003.00000003.430363478.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000006.00000002.627621860.00007FF56C8E7000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C8E7000
Size:	12288

Details

Name:	00000000.00000003.439470786.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	0000000A.00000002.766759984.00007FF593330000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF593330000
Size:	36864

Details

Name:	00000022.00000003.706945137.00000256C8599000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8599000
Size:	4096

Details

Name:	00000003.00000003.508165026.0000000003584000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3584000
Size:	401408

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000003.447055615.00000000034A1000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	34A1000
Size:	4096

Details

Name:	00000003.00000002.768457692.000000006EEDC000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6EEDC000
Size:	32768

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000009.00000000.408284120.00007DF5DDE32000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5DDE32000
Size:	4096

Details

Name:	00000003.00000002.768147744.0000000005DA0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5DA0000
Size:	4096

Details

Name:	00000000.00000003.423852809.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000023.00000003.708414873.000001FA6173E000.00000004.00000001.sdmp
TargetID:	35
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FA6173E000
Size:	49152

Details

Name:	00000003.00000003.738089345.000000000591B000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	591B000
Size:	4096

Details

Name:	00000022.00000003.705167936.00000256C8586000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8586000
Size:	4096

Details

Name:	00000027.00000000.751015249.00007DF51DA52000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51DA52000
Size:	4096

Details

Name:	00000000.00000003.740791655.000000000332A000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	332A000
Size:	4096

Details

Name:	00000003.00000003.462223521.0000000005C80000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C80000
Size:	4096

Details

Name:	00000027.00000000.750986169.0000029500DA0000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	29500DA0000
Size:	102400

Details

Name:	0000001E.00000002.765816373.00007DF5D4F20000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5D4F20000
Size:	4096

Details

Name:	0000000B.00000002.434188736.000001B344960000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B344960000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Found detection on Joe Sandbox Cloud Basic with higher score	System Summary

Details

Name:	00000004.00000003.399940173.0000000003070000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3070000
Size:	4096

Details

Name:	00000000.00000002.767213108.0000000002F2E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2F2E000
Size:	8192

Details

Name:	00000000.00000003.441243449.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	0000000F.00000002.446934334.000000595BFFC000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	595BFFC000
Size:	16384

Details

Name:	00000007.00000002.765232745.00000262D4A02000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	262D4A02000
Size:	4096

Details

Name:	00000002.00000002.427589448.00000000025BB000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25BB000
Size:	8192

Details

Name:	0000000B.00000000.411690172.00007DF51A890000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51A890000
Size:	12288

Details

Name:	0000001E.00000002.765861998.00007DF5D4F22000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5D4F22000
Size:	4096

Details

Name:	00000002.00000003.383888372.0000000002A31000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2A31000
Size:	4096

Details

Name:	00000000.00000003.431367158.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000018.00000002.563440664.00007FF502C33000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF502C33000
Size:	4096

Details

Name:	00000005.00000003.410767026.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	00000000.00000002.766576066.000000000104E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	104E000
Size:	4096

Details

Name:	00000022.00000002.732613790.00007FF541621000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541621000
Size:	4096

Details

Name:	00000022.00000003.707706102.00000256C859F000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C859F000
Size:	294912

Details

Name:	00000023.00000003.708395245.000001FA6173C000.00000004.00000001.sdmp
TargetID:	35
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FA6173C000
Size:	4096

Details

Name:	00000013.00000002.527492964.000002442F070000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2442F070000
Size:	4096

Details

Name:	00000018.00000002.563638829.00007FF502D6A000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF502D6A000
Size:	16384

Details

Name:	00000009.00000002.764160119.000000DBEDE7F000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DBEDE7F000
Size:	4096

Details

Name:	0000000D.00000002.764842673.000001E3C2A40000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E3C2A40000
Size:	102400

Details

Name:	00000003.00000003.597555306.00000000035EC000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35EC000
Size:	24576

Details

Name:	00000000.00000002.764574573.0000000000D2E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	D2E000
Size:	8192

Details

Name:	00000003.00000003.552480319.00000000035F3000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35F3000
Size:	4096

Details

Name:	00000002.00000003.413483730.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	00000025.00000002.746791091.00007DF5E1FE0000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E1FE0000
Size:	4096

Details

Name:	00000022.00000002.731782887.00000256C7C29000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	256C7C29000
Size:	73728

Details

Name:	00000005.00000003.414077737.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	00000002.00000003.425652711.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	00000000.00000003.421058651.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	0000000B.00000002.434680880.00007FF504AE3000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF504AE3000
Size:	8192

Details

Name:	00000003.00000002.765797369.00000000033AD000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	33AD000
Size:	8192

Details

Name:	00000009.00000002.767154644.00007FF5C843C000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C843C000
Size:	45056

Details

Name:	00000003.00000002.764262418.0000000002BF0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BF0000
Size:	32768

Details

Name:	00000013.00000002.527888282.00007FF5475D8000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5475D8000
Size:	4096

Details

Name:	00000000.00000003.441746925.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000003.00000003.735781698.00000000035EF000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35EF000
Size:	16384

Details

Name:	00000022.00000003.704288096.00000256C85A8000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C85A8000
Size:	4096

Details

Name:	00000006.00000002.627774981.00007FF56C9F3000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C9F3000
Size:	12288

Details

Name:	00000018.00000000.551116076.00007DF518722000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF518722000
Size:	4096

Details

Name:	00000003.00000002.765137890.00000000030B8000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	30B8000
Size:	8192

Details

Name:	00000000.00000002.767877461.000000007FCC2000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FCC2000
Size:	4096

Details

Name:	00000006.00000002.627488710.00007FF56C63F000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C63F000
Size:	4096

Details

Name:	0000000A.00000002.763753499.0000008596F8B000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8596F8B000
Size:	20480

Details

Name:	00000000.00000002.767625379.000000006EDF0000.00000020.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	6EDF0000
Size:	450560

Details

Name:	00000002.00000002.428141416.0000000005E54000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5E54000
Size:	4096

Details

Name:	00000006.00000002.627003245.000001E697A95000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E697A95000
Size:	40960

Details

Name:	00000025.00000002.746752445.000001BBF3F80000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1BBF3F80000
Size:	4096

Details

Name:	00000000.00000002.767414420.0000000003A5F000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3A5F000
Size:	4096

Details

Name:	00000018.00000002.563512783.00007FF502D27000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF502D27000
Size:	8192

Details

Name:	0000001D.00000002.763847058.000000537F6FC000.00000004.00000010.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	537F6FC000
Size:	16384

Details

Name:	00000013.00000002.527397629.000000A83C8FE000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A83C8FE000
Size:	8192

Details

Name:	00000005.00000003.411269874.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	0000000B.00000002.434689003.00007FF504B26000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF504B26000
Size:	4096

Details

Name:	0000000B.00000002.434116680.000000A95927E000.00000004.00000010.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A95927E000
Size:	8192

Details

Name:	00000002.00000002.427556177.0000000002594000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2594000
Size:	40960

Details

Name:	00000007.00000002.765687520.00007FF5D8B26000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D8B26000
Size:	4096

Details

Name:	00000022.00000003.709978728.00000256C85BA000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C85BA000
Size:	73728

Details

Name:	00000022.00000003.713145662.00000256C856D000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C856D000
Size:	81920

Details

Name:	00000005.00000002.447785160.000000000532F000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	532F000
Size:	4096

Details

Name:	00000000.00000002.767154369.0000000002DAE000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2DAE000
Size:	8192

Details

Name:	00000002.00000002.428283490.000000007FC50000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FC50000
Size:	12288

Details

Name:	00000005.00000003.417813424.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	00000022.00000003.715946911.00000256C8560000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8560000
Size:	57344

Details

Name:	00000022.00000003.699902881.00000256C8563000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8563000
Size:	40960

Details

Name:	00000003.00000003.735957267.0000000003580000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3580000
Size:	16384

Details

Name:	00000009.00000002.766997405.00007FF5C83A4000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C83A4000
Size:	16384

Details

Name:	00000022.00000003.717856533.00000256C8594000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8594000
Size:	397312

Details

Name:	00000018.00000002.562988051.0000010A8503C000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	10A8503C000
Size:	45056

Details

Name:	0000000D.00000002.764176819.000001E3C28B0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E3C28B0000
Size:	102400

Details

Name:	00000004.00000002.434718057.0000000003030000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3030000
Size:	4096

Details

Name:	00000000.00000002.765689076.0000000000FC4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FC4000
Size:	360448

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000002.434796202.00000000031E7000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	31E7000
Size:	4096

Details

Name:	00000003.00000002.764662917.0000000002C3D000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C3D000
Size:	8192

Details

Name:	0000001D.00000002.764541457.0000020EADC3A000.00000004.00000001.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20EADC3A000
Size:	4096

Details

Name:	00000013.00000002.528070493.00007FF547AB8000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547AB8000
Size:	12288

Details

Name:	00000022.00000003.713079423.00000256C858F000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C858F000
Size:	8192

Details

Name:	00000006.00000003.261915655.000001E69CF60000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69CF60000
Size:	8192

Details

Name:	00000006.00000002.626955223.000001E697A58000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E697A58000
Size:	77824

Details

Name:	00000005.00000002.447421034.0000000002C2D000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C2D000
Size:	73728

Details

Name:	00000013.00000002.527532254.000002442F213000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2442F213000
Size:	86016

Details

Name:	00000022.00000003.710724372.00000256C8566000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8566000
Size:	32768

Details

Name:	00000009.00000002.767461393.00007FF5C84FB000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C84FB000
Size:	8192

Details

Name:	0000000F.00000002.446981735.00000211BD190000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	211BD190000
Size:	4096

Details

Name:	00000002.00000003.423850862.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	00000000.00000002.767460998.0000000003D5F000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3D5F000
Size:	4096

Details

Name:	00000003.00000002.768492579.000000007FCB0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FCB0000
Size:	4096

Details

Name:	0000000B.00000002.434125963.000001B3448C0000.00000004.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1B3448C0000
Size:	4096

Details

Name:	00000000.00000002.767479506.0000000003D9D000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3D9D000
Size:	12288

Details

Name:	00000000.00000002.766668783.0000000001250000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1250000
Size:	352256

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	0000000F.00000000.434924957.00000211BD160000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	211BD160000
Size:	102400

Details

Name:	0000001D.00000002.764854052.0000020EAE370000.00000004.00000001.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20EAE370000
Size:	65536

Details

Name:	00000006.00000002.627756554.00007FF56C9E5000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C9E5000
Size:	8192

Details

Name:	00000003.00000002.764891954.0000000002F00000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2F00000
Size:	102400

Details

Name:	0000001E.00000002.766308167.00007FF5BF524000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BF524000
Size:	4096

Details

Name:	00000023.00000002.709565039.00007DF5A2640000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A2640000
Size:	4096

Details

Name:	00000022.00000000.695688956.00007DF5573F0000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5573F0000
Size:	4096

Details

Name:	00000004.00000002.434818936.000000000326F000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	326F000
Size:	4096

Details

Name:	0000000D.00000002.765887747.00007FF5D5B27000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D5B27000
Size:	4096

Details

Name:	00000025.00000002.746718580.000001BBF3E00000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1BBF3E00000
Size:	12288

Details

Name:	0000000A.00000002.766071638.00007FF59312F000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59312F000
Size:	8192

Details

Name:	00000025.00000002.746048770.0000009B77F5E000.00000004.00000010.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	9B77F5E000
Size:	8192

Details

Name:	0000001E.00000002.764102274.00000049A74F9000.00000004.00000010.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	49A74F9000
Size:	28672

Details

Name:	00000005.00000003.421920896.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	0000000D.00000002.764321184.000001E3C28D0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E3C28D0000
Size:	12288

Details

Name:	00000006.00000002.627442128.00007FF56C5B6000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C5B6000
Size:	4096

Details

Name:	00000003.00000003.692079227.000000000358B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	358B000
Size:	102400

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.597603528.0000000003586000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3586000
Size:	417792

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000006.00000002.627300434.000001E69D0F7000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D0F7000
Size:	8192

Details

Name:	00000009.00000000.408268835.00007DF5DDE20000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5DDE20000
Size:	4096

Details

Name:	0000001E.00000000.678737951.0000021DF7FD0000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	21DF7FD0000
Size:	102400

Details

Name:	00000009.00000002.767485586.00007FF5C84FE000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C84FE000
Size:	45056

Details

Name:	00000000.00000003.439167684.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	0000000A.00000000.410226111.00007FF59335F000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59335F000
Size:	20480

Details

Name:	00000009.00000002.766355246.00007DF5DDE40000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5DDE40000
Size:	12288

Details

Name:	0000000B.00000002.434796214.00007FF504EB9000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF504EB9000
Size:	20480

Details

Name:	00000003.00000003.405575431.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000007.00000002.766684056.00007FF5D8DDE000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D8DDE000
Size:	45056

Details

Name:	00000004.00000003.424534870.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000013.00000002.527851540.00007FF547264000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547264000
Size:	16384

Details

Name:	00000004.00000003.420920835.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000007.00000002.766246866.00007FF5D8D53000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D8D53000
Size:	12288

Details

Name:	00000006.00000002.627854507.00007FF56CA9B000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56CA9B000
Size:	8192

Details

Name:	0000000B.00000002.434850972.00007FF504F3F000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF504F3F000
Size:	8192

Details

Name:	00000022.00000003.712939963.00000256C8569000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8569000
Size:	98304

Details

Name:	0000000F.00000002.447424980.00007FF4F3E83000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F3E83000
Size:	4096

Details

Name:	00000004.00000003.412997024.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000025.00000002.746945028.00007FF5CC41A000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC41A000
Size:	4096

Details

Name:	0000001D.00000002.764639434.0000020EADD02000.00000004.00000001.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20EADD02000
Size:	16384

Details

Name:	00000005.00000003.430361163.0000000003360000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3360000
Size:	4096

Details

Name:	00000009.00000002.763752619.000000DBED30B000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	DBED30B000
Size:	20480

Details

Name:	0000001D.00000002.763950162.0000020EADB70000.00000004.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	20EADB70000
Size:	4096

Details

Name:	00000005.00000003.412811424.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	00000003.00000003.462159988.0000000003579000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3579000
Size:	40960

Details

Name:	00000006.00000002.627575159.00007FF56C7D3000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C7D3000
Size:	4096

Details

Name:	0000000F.00000002.447398241.00007FF4F3DE5000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F3DE5000
Size:	24576

Details

Name:	00000003.00000003.429824143.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000005.00000002.447699965.00000000034B3000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	34B3000
Size:	53248

Details

Name:	00000013.00000002.527631254.000002442F274000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2442F274000
Size:	40960

Details

Name:	0000001E.00000002.765903637.00007DF5D4F30000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5D4F30000
Size:	12288

Details

Name:	00000006.00000000.259977738.00007DF5823B0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5823B0000
Size:	4096

Details

Name:	00000002.00000002.427754702.00000000029BE000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	29BE000
Size:	8192

Details

Name:	00000006.00000002.627080716.000001E697C00000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E697C00000
Size:	4096

Details

Name:	00000007.00000002.767013816.00007FF5D8E0D000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D8E0D000
Size:	4096

Details

Name:	00000000.00000003.740664679.0000000001029000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1029000
Size:	12288

Details

Name:	00000018.00000002.563158204.0000010A85108000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	10A85108000
Size:	24576

Details

Name:	00000006.00000003.291607638.000001E69D0B2000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D0B2000
Size:	147456

Details

Name:	00000004.00000002.434491530.0000000002921000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2921000
Size:	12288

Details

Name:	00000006.00000002.627800272.00007FF56CA68000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56CA68000
Size:	12288

Details

Name:	00000004.00000002.435666318.000000007FA20000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FA20000
Size:	4096

Details

Name:	00000003.00000003.691296494.0000000003573000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3573000
Size:	8192

Details

Name:	00000013.00000003.527188893.000002442F24F000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2442F24F000
Size:	118784

Details

Name:	00000000.00000003.439635979.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000018.00000002.562673161.00000003BBFFE000.00000004.00000010.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3BBFFE000
Size:	8192

Details

Name:	00000013.00000002.528044716.00007FF547A43000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547A43000
Size:	12288

Details

Name:	00000022.00000003.713255487.00000256C8594000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8594000
Size:	8192

Details

Name:	00000022.00000002.731690573.00000256C7B60000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	256C7B60000
Size:	102400

Details

Name:	00000003.00000003.431373960.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Found detection on Joe Sandbox Cloud Basic with higher score	System Summary

Details

Name:	00000000.00000003.651947895.000000000101C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	101C000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000003.400953817.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000005.00000003.415154280.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	00000002.00000000.240804292.000000007FC50000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FC50000
Size:	12288

Details

Name:	00000007.00000002.765961356.00007FF5D8CFC000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D8CFC000
Size:	4096

Details

Name:	00000003.00000003.599316058.00000000035EF000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35EF000
Size:	16384

Details

Name:	0000000D.00000002.765825590.00007FF5D5B00000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D5B00000
Size:	12288

Details

Name:	00000000.00000002.765419965.0000000000FAB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FAB000
Size:	45056

Details

Name:	00000005.00000003.413246636.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	00000005.00000003.431935703.0000000003360000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3360000
Size:	4096

Details

Name:	00000007.00000000.279970635.00007DF5EE700000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EE700000
Size:	4096

Details

Name:	0000001D.00000002.765895708.00007FF518F25000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF518F25000
Size:	8192

Details

Name:	00000006.00000003.261932461.000001E69D200000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D200000
Size:	28672

Details

Name:	00000022.00000002.731429422.000000856EC8B000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	856EC8B000
Size:	20480

Details

Name:	00000022.00000003.718593185.00000256C8560000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8560000
Size:	139264

Details

Name:	0000000B.00000000.411730812.00007FF504F7F000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF504F7F000
Size:	20480

Details

Name:	00000000.00000003.740732899.0000000000FC4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FC4000
Size:	376832

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000006.00000002.627422390.00007FF56C263000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C263000
Size:	4096

Details

Name:	00000002.00000002.428194596.000000007FC32000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FC32000
Size:	4096

Details

Name:	00000000.00000002.763913714.0000000000800000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	800000
Size:	102400

Details

Name:	00000003.00000003.687528471.0000000003586000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3586000
Size:	421888

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000002.00000003.423331471.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	00000004.00000002.434660357.0000000002E6A000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2E6A000
Size:	24576

Details

Name:	00000000.00000003.430762431.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	0000000D.00000002.765498857.00007FF5D5420000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D5420000
Size:	8192

Details

Name:	00000003.00000003.432536923.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	0000001D.00000002.765047707.00007DF52E8E0000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF52E8E0000
Size:	4096

Details

Name:	00000022.00000003.731146242.00000256C7C5A000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C7C5A000
Size:	8192

Details

Name:	0000001D.00000002.765931364.00007FF518F29000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF518F29000
Size:	20480

Details

Name:	00000003.00000003.554157672.00000000035F4000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35F4000
Size:	4096

Details

Name:	00000002.00000003.398911551.0000000000850000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	850000
Size:	4096

Details

Name:	00000013.00000002.527772887.00007DF55D3F0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55D3F0000
Size:	4096

Details

Name:	00000023.00000002.709102859.000001FA61670000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FA61670000
Size:	12288

Details

Name:	00000007.00000002.766589880.00007FF5D8DD6000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D8DD6000
Size:	16384

Details

Name:	00000027.00000000.751023497.00007DF51DA60000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51DA60000
Size:	4096

Details

Name:	00000002.00000003.411525935.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	00000003.00000002.764468411.0000000002C15000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C15000
Size:	8192

Details

Name:	00000004.00000001.251225164.000000006EDE0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	6EDE0000
Size:	4096

Details

Name:	0000000B.00000003.433931351.000001B344A45000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B344A45000
Size:	12288

Details

Name:	00000003.00000002.764320209.0000000002BFA000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BFA000
Size:	36864

Details

Name:	00000000.00000003.740621246.000000000104E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	104E000
Size:	4096

Details

Name:	00000000.00000003.431936339.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000003.00000002.767414006.0000000003578000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3578000
Size:	24576

Details

Name:	00000006.00000000.259948678.000001E6978A0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E6978A0000
Size:	102400

Details

Name:	0000000A.00000002.766743916.00007FF59332B000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59332B000
Size:	8192

Details

Name:	00000007.00000002.765747643.00007FF5D8B87000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D8B87000
Size:	4096

Details

Name:	00000003.00000003.597579370.0000000003578000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3578000
Size:	24576

Details

Name:	00000022.00000002.732328753.00000256C854E000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	256C854E000
Size:	32768

Details

Name:	00000013.00000002.528131588.00007FF547AFB000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547AFB000
Size:	4096

Details

Name:	00000013.00000002.527695487.000002442F302000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2442F302000
Size:	16384

Details

Name:	00000000.00000003.740780794.000000000101C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	101C000
Size:	16384

Details

Name:	00000006.00000003.264666384.000001E69D2E0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D2E0000
Size:	4096

Details

Name:	00000023.00000002.709027717.000000E2448FF000.00000004.00000010.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	E2448FF000
Size:	4096

Details

Name:	00000004.00000002.434669582.0000000002EAB000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2EAB000
Size:	20480

Details

Name:	00000000.00000002.763731208.00000000005E0000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	5E0000
Size:	4096

Details

Name:	00000007.00000002.765409192.00007DF5EE712000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EE712000
Size:	4096

Details

Name:	00000009.00000002.767647262.00007FF5C852F000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C852F000
Size:	20480

Details

Name:	00000002.00000003.426342646.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	0000000A.00000002.766657903.00007FF593318000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF593318000
Size:	12288

Details

Name:	0000000A.00000002.763877915.000000859757C000.00000004.00000010.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	859757C000
Size:	16384

Details

Name:	0000000A.00000002.765564353.00007DF5A8C60000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A8C60000
Size:	4096

Details

Name:	00000006.00000003.261990406.000001E69CF80000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69CF80000
Size:	8192

Details

Name:	00000013.00000002.527954024.00007FF54794F000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54794F000
Size:	20480

Details

Name:	0000001D.00000002.765563565.00007FF518E93000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF518E93000
Size:	12288

Details

Name:	0000001E.00000002.764295586.0000021DF7FC0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	21DF7FC0000
Size:	4096

Details

Name:	0000000B.00000002.434584369.000001B345202000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B345202000
Size:	4096

Details

Name:	00000005.00000003.430997749.0000000003360000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3360000
Size:	4096

Details

Name:	00000002.00000003.408897029.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	00000006.00000003.286184240.000001E698318000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E698318000
Size:	4096

Details

Name:	00000009.00000002.764186738.000000DBEDF7D000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DBEDF7D000
Size:	12288

Details

Name:	00000009.00000002.764259558.000002882BCA0000.00000004.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2882BCA0000
Size:	4096

Details

Name:	00000013.00000002.527763641.00007DF45B2C0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF45B2C0000
Size:	20480

Details

Name:	0000000B.00000003.433842725.000001B344A77000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B344A77000
Size:	45056

Details

Name:	00000007.00000002.763874928.0000007A7A8FB000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	7A7A8FB000
Size:	20480

Details

Name:	00000003.00000002.765758901.00000000033AC000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	33AC000
Size:	4096

Details

Name:	00000003.00000003.597666940.00000000035A4000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35A4000
Size:	294912

Details

Name:	00000002.00000002.427817229.0000000002A31000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A31000
Size:	28672

Details

Name:	0000001D.00000002.765272534.00007FF518D15000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF518D15000
Size:	16384

Details

Name:	0000000D.00000000.414950297.00007DF5EB530000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EB530000
Size:	4096

Details

Name:	00000018.00000002.563331123.00007FF5028E3000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5028E3000
Size:	20480

Details

Name:	0000000A.00000002.766637824.00007FF5932C5000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5932C5000
Size:	12288

Details

Name:	00000004.00000002.435674069.000000007FA22000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FA22000
Size:	4096

Details

Name:	00000013.00000002.528101456.00007FF547AD0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547AD0000
Size:	36864

Details

Name:	0000000A.00000002.766166323.00007FF593242000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF593242000
Size:	16384

Details

Name:	00000000.00000003.426041272.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000004.00000003.413446927.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000005.00000003.415254175.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	00000006.00000002.627453790.00007FF56C61B000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C61B000
Size:	4096

Details

Name:	00000022.00000003.712855528.00000256C8569000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8569000
Size:	98304

Details

Name:	00000003.00000003.597593216.0000000003580000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3580000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.432101428.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000013.00000002.527935896.00007FF5478EE000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5478EE000
Size:	4096

Details

Name:	00000018.00000002.563673987.00007FF502DDF000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF502DDF000
Size:	8192

Details

Name:	00000004.00000003.415190234.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000007.00000002.764000454.00000262D4050000.00000004.00000040.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	262D4050000
Size:	4096

Details

Name:	00000006.00000002.627866767.00007FF56CAAB000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56CAAB000
Size:	4096

Details

Name:	00000007.00000002.765562216.00007FF5D8916000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D8916000
Size:	4096

Details

Name:	00000006.00000003.626617244.000001E697AAB000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E697AAB000
Size:	12288

Details

Name:	00000003.00000003.599430204.0000000003580000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3580000
Size:	16384

Details

Name:	00000006.00000002.627458965.00007FF56C624000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C624000
Size:	8192

Details

Name:	00000000.00000003.432503042.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000003.00000003.738271847.0000000003574000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3574000
Size:	4096

Details

Name:	00000006.00000002.627187945.000001E69D04A000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D04A000
Size:	28672

Details

Name:	0000001D.00000002.765742367.00007FF518EE7000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF518EE7000
Size:	4096

Details

Name:	0000000D.00000002.765322563.00007DF5EB522000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EB522000
Size:	4096

Details

Name:	00000000.00000003.440707341.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000022.00000002.733014530.00007FF541A1D000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541A1D000
Size:	28672

Details

Name:	00000022.00000002.732165652.00000256C8330000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	256C8330000
Size:	8192

Details

Name:	0000001D.00000000.678341633.00007DF52E8F0000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF52E8F0000
Size:	4096

Details

Name:	00000005.00000002.447323579.0000000002BDA000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BDA000
Size:	36864

Details

Name:	00000005.00000003.402298164.00000000034A8000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	34A8000
Size:	90112

Details

Name:	00000006.00000003.264660861.000001E69D2E0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D2E0000
Size:	4096

Details

Name:	00000013.00000002.527701518.000002442F308000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2442F308000
Size:	24576

Details

Name:	00000003.00000003.642411817.00000000035FA000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35FA000
Size:	32768

Details

Name:	00000003.00000002.765421810.0000000003345000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	3345000
Size:	16384

Details

Name:	00000002.00000003.394400340.0000000000850000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	850000
Size:	4096

Details

Name:	00000004.00000000.250109951.00000000029C7000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	29C7000
Size:	16384

Details

Name:	00000002.00000003.395896369.0000000000850000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	850000
Size:	4096

Details

Name:	00000018.00000003.562268120.0000010A8507F000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10A8507F000
Size:	36864

Details

Name:	00000007.00000002.766968680.00007FF5D8DFE000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D8DFE000
Size:	16384

Details

Name:	00000003.00000003.738166338.00000000035F9000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35F9000
Size:	4096

Details

Name:	00000022.00000002.731742843.00000256C7BC0000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	256C7BC0000
Size:	16384

Details

Name:	00000006.00000003.626416657.000001E6981E3000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E6981E3000
Size:	4096

Details

Name:	00000004.00000003.421754060.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000022.00000002.731511747.000000856F27E000.00000004.00000010.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	856F27E000
Size:	8192

Details

Name:	00000003.00000003.400015489.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000000.00000003.436354298.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	0000000A.00000002.765454096.0000022798202000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22798202000
Size:	4096

Details

Name:	00000003.00000003.413378392.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000006.00000003.626545782.000001E698300000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E698300000
Size:	4096

Details

Name:	0000001E.00000002.766525593.00007FF5BF555000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BF555000
Size:	8192

Details

Name:	00000018.00000002.563220635.0000010A85580000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	10A85580000
Size:	4096

Details

Name:	00000002.00000002.427691974.0000000002655000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2655000
Size:	24576

Details

Name:	00000022.00000003.715975308.00000256C856F000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C856F000
Size:	77824

Details

Name:	00000004.00000002.434737832.0000000003070000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3070000
Size:	4096

Details

Name:	00000022.00000003.712065691.00000256C85B7000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C85B7000
Size:	65536

Details

Name:	00000009.00000002.764318445.000002882BCC0000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2882BCC0000
Size:	102400

Details

Name:	00000023.00000002.709602044.00007DF5A2650000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A2650000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Found detection on Joe Sandbox Cloud Basic with higher score	System Summary

Details

Name:	00000013.00000002.527979835.00007FF5479F3000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5479F3000
Size:	4096

Details

Name:	00000003.00000000.241152757.0000000002F00000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2F00000
Size:	102400

Details

Name:	00000006.00000002.627699956.00007FF56C9A3000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C9A3000
Size:	4096

Details

Name:	00000003.00000003.599418952.0000000003578000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3578000
Size:	24576

Details

Name:	00000005.00000003.426208038.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	00000004.00000003.412175577.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000023.00000000.697010230.00007FF58CD4F000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58CD4F000
Size:	20480

Details

Name:	00000009.00000002.766501111.00007FF5C7FDF000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C7FDF000
Size:	8192

Details

Name:	00000006.00000002.627436431.00007FF56C55F000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C55F000
Size:	8192

Details

Name:	00000002.00000003.418188271.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	00000003.00000003.738535030.0000000003562000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3562000
Size:	69632

Details

Name:	00000018.00000002.563737785.00007FF502E04000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF502E04000
Size:	4096

Details

Name:	00000004.00000002.434742465.00000000030A0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	30A0000
Size:	4096

Details

Name:	0000001D.00000002.765482547.00007FF518DA8000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF518DA8000
Size:	4096

Details

Name:	00000003.00000002.764682486.0000000002C42000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C42000
Size:	12288

Details

Name:	00000003.00000003.642424072.0000000003614000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3614000
Size:	4096

Details

Name:	00000006.00000002.626875036.000001E6979D0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E6979D0000
Size:	16384

Details

Name:	00000023.00000000.696898139.000001FA61650000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FA61650000
Size:	102400

Details

Name:	0000000A.00000002.766111518.00007FF5931DE000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5931DE000
Size:	8192

Details

Name:	0000000F.00000002.446967953.00000211BD180000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	211BD180000
Size:	12288

Details

Name:	00000002.00000003.426179819.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	00000004.00000002.434680444.0000000002EB0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2EB0000
Size:	16384

Details

Name:	00000018.00000002.562842896.0000010A84DE0000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	10A84DE0000
Size:	12288

Details

Name:	00000022.00000002.732457258.00007DF5573E2000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5573E2000
Size:	4096

Details

Name:	00000002.00000002.427326641.00000000005F0000.00000040.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	5F0000
Size:	4096

Details

Name:	00000000.00000002.767376286.000000000395E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	395E000
Size:	8192

Details

Name:	0000000B.00000002.434452944.000001B344A62000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B344A62000
Size:	4096

Details

Name:	00000022.00000002.732556342.00007FF5412A9000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5412A9000
Size:	8192

Details

Name:	00000003.00000003.406077357.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000006.00000002.627117943.000001E698215000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E698215000
Size:	4096

Details

Name:	00000000.00000002.766322126.000000000101D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	101D000
Size:	12288

Details

Name:	00000002.00000003.421155149.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	00000022.00000002.733143076.00007FF541AAF000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541AAF000
Size:	8192

Details

Name:	00000000.00000002.764914412.0000000000F5B000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	F5B000
Size:	229376

Signature Hits	Behavior Group	Mitre Attack
Creates a DirectInput object (often for capturing keystrokes)	Key, Mouse, Clipboard, Microphone and Screen Capturing	Input Capture
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.764248831.0000000000960000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	960000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Found detection on Joe Sandbox Cloud Basic with higher score	System Summary

Details

Name:	0000001E.00000002.765515000.0000021DF8F10000.00000002.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	21DF8F10000
Size:	4096

Details

Name:	00000000.00000002.767902553.000000007FCD2000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FCD2000
Size:	4096

Details

Name:	00000003.00000003.465170035.0000000005899000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5899000
Size:	45056

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000009.00000002.767323869.00007FF5C8495000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C8495000
Size:	12288

Details

Name:	0000001E.00000002.766232537.00007FF5BF42D000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BF42D000
Size:	12288

Details

Name:	00000003.00000002.768317895.000000006EE5E000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6EE5E000
Size:	385024

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000009.00000000.408274032.00007DF5DDE22000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5DDE22000
Size:	4096

Details

Name:	00000013.00000002.527995309.00007FF547A07000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547A07000
Size:	8192

Details

Name:	00000005.00000003.430761441.0000000003360000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3360000
Size:	4096

Details

Name:	00000005.00000003.412910784.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	00000013.00000002.528095986.00007FF547ACB000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547ACB000
Size:	8192

Details

Name:	00000005.00000002.447690039.00000000034AA000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	34AA000
Size:	4096

Details

Name:	00000007.00000002.764461458.00000262D4224000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	262D4224000
Size:	12288

Details

Name:	0000000A.00000002.764523591.00000227979A0000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	227979A0000
Size:	4096

Details

Name:	00000003.00000002.764746251.0000000002C9B000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C9B000
Size:	16384

Details

Name:	00000005.00000002.447313700.0000000002BD0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BD0000
Size:	32768

Details

Name:	00000004.00000003.434015062.00000000032A5000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	32A5000
Size:	4096

Details

Name:	00000018.00000003.562356942.0000010A8504D000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10A8504D000
Size:	8192

Details

Name:	0000001D.00000002.765850102.00007FF518F1D000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF518F1D000
Size:	28672

Details

Name:	0000000D.00000002.765372470.00007DF5EB530000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EB530000
Size:	4096

Details

Name:	00000006.00000002.627547704.00007FF56C7A3000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C7A3000
Size:	4096

Details

Name:	0000000A.00000000.410199905.00007DF5A8C62000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A8C62000
Size:	4096

Details

Name:	00000000.00000003.407036539.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000000.00000003.439100112.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000000.00000002.763778706.00000000005F0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	5F0000
Size:	16384

Details

Name:	00000006.00000002.627023518.000001E697AB4000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E697AB4000
Size:	32768

Details

Name:	0000000B.00000002.434132090.000001B3448D0000.00000004.00000040.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1B3448D0000
Size:	4096

Details

Name:	00000022.00000003.706855265.00000256C858D000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C858D000
Size:	16384

Details

Name:	0000001D.00000002.766355138.00007FF518FDE000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF518FDE000
Size:	16384

Details

Name:	00000022.00000000.695701214.00007DF557400000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF557400000
Size:	12288

Details

Name:	00000003.00000002.767987087.000000000543D000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	543D000
Size:	12288

Details

Name:	00000006.00000002.627278534.000001E69D0DE000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D0DE000
Size:	36864

Details

Name:	00000000.00000002.765532552.0000000000FB8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FB8000
Size:	45056

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000F.00000003.446671837.00000211BD27F000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	211BD27F000
Size:	28672

Details

Name:	0000000D.00000002.765531947.00007FF5D58D8000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D58D8000
Size:	12288

Details

Name:	0000000D.00000003.416934254.000001E3C3090000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E3C3090000
Size:	4096

Details

Name:	00000007.00000000.280013292.00007FF5D8E0F000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D8E0F000
Size:	20480

Details

Name:	00000003.00000002.764629196.0000000002C29000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C29000
Size:	8192

Details

Name:	00000006.00000002.627033293.000001E697ABD000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E697ABD000
Size:	4096

Details

Name:	00000003.00000003.554564320.000000000591A000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	591A000
Size:	4096

Details

Name:	00000022.00000003.706052303.00000256C8A02000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8A02000
Size:	184320

Details

Name:	00000022.00000003.713351330.00000256C8595000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8595000
Size:	16384

Details

Name:	0000001E.00000003.694208797.0000021DF8F80000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	21DF8F80000
Size:	20480

Details

Name:	00000006.00000002.627168712.000001E69D03D000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D03D000
Size:	12288

Details

Name:	00000025.00000002.746823937.00007DF5E1FF2000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E1FF2000
Size:	4096

Details

Name:	00000006.00000003.261982403.000001E69CF50000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69CF50000
Size:	4096

Details

Name:	00000005.00000002.447675990.00000000034A1000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	34A1000
Size:	4096

Details

Name:	00000000.00000003.740699340.0000000000FAB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FAB000
Size:	45056

Details

Name:	00000006.00000002.627139367.000001E69D011000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D011000
Size:	53248

Details

Name:	00000022.00000003.707864691.00000256C856E000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C856E000
Size:	16384

Details

Name:	00000025.00000000.733908185.00007DF5E1FE2000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E1FE2000
Size:	4096

Details

Name:	00000022.00000002.732787380.00007FF5418B3000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5418B3000
Size:	4096

Details

Name:	0000000D.00000002.764101054.000001E3C2890000.00000004.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1E3C2890000
Size:	4096

Details

Name:	00000002.00000002.427583122.00000000025B5000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25B5000
Size:	16384

Details

Name:	00000006.00000002.627860488.00007FF56CA9E000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56CA9E000
Size:	16384

Details

Name:	0000000F.00000002.447375196.00007FF4F3DA3000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F3DA3000
Size:	4096

Details

Name:	00000022.00000002.731501886.000000856F1F7000.00000004.00000010.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	856F1F7000
Size:	36864

Details

Name:	00000007.00000002.765512754.00007FF5D8654000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D8654000
Size:	8192

Details

Name:	00000022.00000003.718639423.00000256C8566000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8566000
Size:	114688

Details

Name:	00000002.00000002.427311259.00000000005A0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5A0000
Size:	4096

Details

Name:	00000022.00000002.731672438.00000256C7B50000.00000004.00000040.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	256C7B50000
Size:	4096

Details

Name:	00000022.00000003.715882389.00000256C8556000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8556000
Size:	36864

Details

Name:	00000004.00000003.427069856.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000006.00000000.259972721.00007DF5823A2000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5823A2000
Size:	4096

Details

Name:	00000003.00000003.735918852.00000000035EE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35EE000
Size:	4096

Details

Name:	00000018.00000002.563784930.00007FF502E1F000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF502E1F000
Size:	20480

Details

Name:	0000001D.00000002.764237924.0000020EADC02000.00000004.00000001.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20EADC02000
Size:	65536

Details

Name:	00000013.00000002.527383214.000000A83C77C000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A83C77C000
Size:	16384

Details

Name:	0000000D.00000002.764142620.000001E3C28A0000.00000004.00000040.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1E3C28A0000
Size:	4096

Details

Name:	00000022.00000002.732816049.00007FF5418FD000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5418FD000
Size:	12288

Details

Name:	0000000F.00000002.446950160.00000211BD150000.00000004.00000040.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	211BD150000
Size:	4096

Details

Name:	0000000A.00000002.766381888.00007FF593278000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF593278000
Size:	49152

Details

Name:	00000025.00000002.747341578.00007FF5CC6C0000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC6C0000
Size:	36864

Details

Name:	00000022.00000002.731964059.00000256C7CB3000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	256C7CB3000
Size:	49152

Details

Name:	0000000A.00000002.765904520.00007FF5930F2000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5930F2000
Size:	12288

Details

Name:	00000013.00000002.527390524.000000A83C87B000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A83C87B000
Size:	20480

Details

Name:	00000002.00000003.421787489.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	00000004.00000002.434311987.00000000028BD000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28BD000
Size:	24576

Details

Name:	0000000B.00000002.434121991.000000A95937F000.00000004.00000010.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A95937F000
Size:	4096

Details

Name:	00000002.00000003.417272867.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	00000000.00000003.740195597.0000000001025000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1025000
Size:	12288

Details

Name:	0000001E.00000003.679687637.0000021DF8090000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	21DF8090000
Size:	8192

Details

Name:	00000003.00000003.462262758.0000000005C80000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C80000
Size:	4096

Details

Name:	00000004.00000002.434961106.0000000003700000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3700000
Size:	4096

Details

Name:	00000000.00000002.766511461.0000000001029000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1029000
Size:	12288

Details

Name:	00000006.00000003.625775789.000001E69CE40000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69CE40000
Size:	4096

Details

Name:	00000018.00000003.562326449.0000010A85050000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10A85050000
Size:	12288

Details

Name:	00000005.00000003.414622076.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	00000005.00000003.420467919.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	00000018.00000002.563504052.00007FF502D17000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF502D17000
Size:	4096

Details

Name:	00000005.00000002.447464986.0000000002C8C000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C8C000
Size:	4096

Details

Name:	0000000A.00000002.764725381.0000022797A29000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22797A29000
Size:	77824

Details

Name:	00000007.00000002.764776273.00000262D4269000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	262D4269000
Size:	32768

Details

Name:	00000022.00000003.704260664.00000256C8586000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8586000
Size:	45056

Details

Name:	00000006.00000002.627448190.00007FF56C5E1000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C5E1000
Size:	4096

Details

Name:	00000002.00000003.427043167.0000000004180000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4180000
Size:	4096

Details

Name:	00000003.00000003.735760105.00000000035FA000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35FA000
Size:	32768

Details

Name:	00000003.00000003.599518434.00000000035EE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35EE000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000B.00000002.434767602.00007FF504EAD000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF504EAD000
Size:	28672

Details

Name:	00000004.00000000.250147949.000000007FA20000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FA20000
Size:	4096

Details

Name:	00000003.00000002.764036308.0000000002BC1000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BC1000
Size:	12288

Details

Name:	00000013.00000002.527408870.000000A83C9F7000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A83C9F7000
Size:	36864

Details

Name:	00000006.00000002.627694808.00007FF56C99C000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C99C000
Size:	4096

Details

Name:	0000001E.00000002.766182985.00007FF5BF34E000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BF34E000
Size:	8192

Details

Name:	00000005.00000002.447509459.0000000002F7B000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2F7B000
Size:	20480

Details

Name:	00000018.00000000.551104389.00007DF518712000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF518712000
Size:	4096

Details

Name:	00000003.00000002.767161130.00000000034CD000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	34CD000
Size:	12288

Details

Name:	0000000B.00000002.434749193.00007FF504E98000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF504E98000
Size:	49152

Details

Name:	00000005.00000002.447568978.0000000003310000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	3310000
Size:	20480

Details

Name:	00000007.00000002.765984916.00007FF5D8D07000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D8D07000
Size:	4096

Details

Name:	00000002.00000002.427401290.000000000243C000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	243C000
Size:	4096

Details

Name:	00000000.00000003.651912737.0000000001026000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1026000
Size:	4096

Details

Name:	00000025.00000002.746405860.000001BBF3A29000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBF3A29000
Size:	73728

Details

Name:	00000005.00000003.424899091.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	00000022.00000003.697951755.00000256C83D0000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C83D0000
Size:	4096

Details

Name:	00000007.00000000.279975829.00007DF5EE702000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EE702000
Size:	4096

Details

Name:	00000002.00000000.240799956.000000007FC42000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FC42000
Size:	4096

Details

Name:	00000006.00000003.626519186.000001E698860000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E698860000
Size:	4096

Details

Name:	00000025.00000002.746881484.00007FF5CC1B3000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC1B3000
Size:	20480

Details

Name:	00000000.00000002.764353026.00000000009F1000.00000020.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	9F1000
Size:	45056

Details

Name:	00000000.00000002.767430164.0000000003B5C000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3B5C000
Size:	16384

Details

Name:	00000027.00000000.751030859.00007DF51DA62000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51DA62000
Size:	4096

Details

Name:	00000000.00000003.740718428.0000000000FB8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FB8000
Size:	45056

Details

Name:	00000000.00000003.422494006.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000003.00000002.765373493.0000000003340000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	3340000
Size:	16384

Details

Name:	00000003.00000002.768481092.000000007FBB0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBB0000
Size:	20480

Details

Name:	00000025.00000002.747270832.00007FF5CC6AF000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC6AF000
Size:	8192

Details

Name:	00000006.00000002.627526252.00007FF56C79A000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C79A000
Size:	4096

Details

Name:	00000006.00000002.627833422.00007FF56CA7E000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56CA7E000
Size:	45056

Details

Name:	0000000A.00000002.765797999.00007FF59305D000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59305D000
Size:	8192

Details

Name:	00000000.00000003.435567375.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000023.00000002.709483329.000001FA61D30000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FA61D30000
Size:	4096

Details

Name:	0000000B.00000002.434602734.00007DF51A870000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51A870000
Size:	4096

Details

Name:	00000004.00000003.422031642.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000003.00000003.413076987.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000003.00000002.767176563.000000000350E000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	350E000
Size:	8192

Details

Name:	00000025.00000002.746096603.0000009B783FB000.00000004.00000010.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	9B783FB000
Size:	20480

Details

Name:	00000004.00000003.425273531.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	0000000A.00000002.766413193.00007FF59328D000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59328D000
Size:	28672

Details

Name:	0000000D.00000002.765901796.00007FF5D5B37000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D5B37000
Size:	8192

Details

Name:	00000000.00000003.445666032.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000006.00000002.627533817.00007FF56C79C000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C79C000
Size:	4096

Details

Name:	00000022.00000002.732134735.00000256C80D0000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	256C80D0000
Size:	12288

Details

Name:	00000002.00000003.410468363.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	00000003.00000002.768105955.0000000005D1E000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5D1E000
Size:	8192

Details

Name:	00000005.00000002.447272155.0000000002BA1000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BA1000
Size:	12288

Details

Name:	00000007.00000002.766798502.00007FF5D8DED000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D8DED000
Size:	16384

Details

Name:	00000013.00000000.511732594.00007FF547AFF000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547AFF000
Size:	20480

Details

Name:	0000001D.00000002.765421500.00007FF518DA3000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF518DA3000
Size:	16384

Details

Name:	00000000.00000003.605213777.000000000102F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	102F000
Size:	131072

Details

Name:	00000006.00000002.627073778.000001E697B14000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E697B14000
Size:	8192

Details

Name:	0000000B.00000002.434216941.000001B344A13000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B344A13000
Size:	65536

Details

Name:	00000000.00000003.472044665.000000000332B000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	332B000
Size:	4096

Details

Name:	00000023.00000002.709577076.00007DF5A2642000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A2642000
Size:	4096

Details

Name:	00000025.00000002.747113026.00007FF5CC5FC000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC5FC000
Size:	45056

Details

Name:	0000001E.00000002.767023510.00007FF5BF5FD000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BF5FD000
Size:	16384

Details

Name:	00000005.00000002.447910707.000000007F040000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F040000
Size:	4096

Details

Name:	00000013.00000002.527498981.000002442F090000.00000004.00000020.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2442F090000
Size:	8192

Details

Name:	00000022.00000000.695694904.00007DF5573F2000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5573F2000
Size:	4096

Details

Name:	0000000B.00000002.434334555.000001B344A33000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B344A33000
Size:	20480

Details

Name:	00000000.00000002.767543793.000000006EDE1000.00000020.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	6EDE1000
Size:	8192

Details

Name:	0000001E.00000002.766940632.00007FF5BF5EB000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BF5EB000
Size:	8192

Details

Name:	0000000D.00000002.766712546.00007FF5D5C1E000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D5C1E000
Size:	16384

Details

Name:	0000000A.00000002.767024639.00007FF59335F000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59335F000
Size:	20480

Details

Name:	00000022.00000002.732355490.00000256C8560000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8560000
Size:	36864

Details

Name:	00000022.00000003.717929334.00000256C8594000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8594000
Size:	397312

Details

Name:	00000004.00000003.434028711.00000000032AD000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	32AD000
Size:	12288

Details

Name:	00000000.00000003.421788222.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000004.00000002.434253373.00000000027C1000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27C1000
Size:	32768

Details

Name:	00000000.00000003.417815380.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000000.00000003.435861305.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000022.00000003.701560295.00000256C85A7000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C85A7000
Size:	90112

Details

Name:	00000003.00000003.408656612.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000000.00000003.425272013.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000018.00000002.562883016.0000010A84EF0000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	10A84EF0000
Size:	16384

Details

Name:	00000006.00000002.627807951.00007FF56CA6F000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56CA6F000
Size:	20480

Details

Name:	0000000A.00000000.410193469.00007DF5A8C52000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A8C52000
Size:	4096

Details

Name:	00000005.00000002.447591383.0000000003350000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3350000
Size:	4096

Details

Name:	00000006.00000002.626890235.000001E697A00000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E697A00000
Size:	73728

Details

Name:	00000002.00000000.240742536.00000000001D0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1D0000
Size:	102400

Details

Name:	00000000.00000002.764422911.00000000009FD000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	9FD000
Size:	8192

Details

Name:	00000018.00000002.563246621.00007DF518712000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF518712000
Size:	4096

Details

Name:	00000007.00000000.279985263.00007DF5EE712000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EE712000
Size:	4096

Details

Name:	00000000.00000003.440273925.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	0000000D.00000002.766358847.00007FF5D5BF6000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D5BF6000
Size:	16384

Details

Name:	00000003.00000003.597544018.00000000035F9000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35F9000
Size:	16384

Details

Name:	0000000D.00000000.414964047.00007DF5EB532000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EB532000
Size:	4096

Details

Name:	00000022.00000003.710938975.00000256C8594000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8594000
Size:	8192

Details

Name:	00000004.00000003.405475116.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000002.00000002.428202965.000000007FC40000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FC40000
Size:	4096

Details

Name:	00000005.00000003.408757207.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	00000023.00000002.709839195.00007FF58CCB3000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58CCB3000
Size:	4096

Details

Name:	00000003.00000003.738139594.00000000035F3000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35F3000
Size:	12288

Details

Name:	00000013.00000002.527722568.000002442F600000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2442F600000
Size:	12288

Details

Name:	00000022.00000003.714564301.00000256C85A1000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C85A1000
Size:	176128

Details

Name:	00000022.00000002.732990687.00007FF541A08000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541A08000
Size:	49152

Details

Name:	00000007.00000002.764879390.00000262D4300000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	262D4300000
Size:	4096

Details

Name:	00000002.00000002.427307284.0000000000480000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	480000
Size:	4096

Details

Name:	00000005.00000002.447627120.00000000033E0000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	33E0000
Size:	4096

Details

Name:	00000022.00000003.705997592.00000256C8586000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8586000
Size:	45056

Details

Name:	00000005.00000003.420682804.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	00000023.00000000.696928298.00007DF5A2642000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A2642000
Size:	4096

Details

Name:	00000000.00000003.740151385.000000000104E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	104E000
Size:	4096

Details

Name:	00000003.00000002.767842452.0000000004E10000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4E10000
Size:	4096

Details

Name:	00000018.00000002.562816589.0000010A84DC0000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	10A84DC0000
Size:	102400

Details

Name:	00000003.00000003.420956117.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	0000000B.00000003.433858229.000001B344A7B000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B344A7B000
Size:	28672

Details

Name:	0000000A.00000002.765506519.00007DF5A8C50000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A8C50000
Size:	4096

Details

Name:	00000004.00000002.434971416.0000000004B9E000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4B9E000
Size:	8192

Details

Name:	0000000F.00000003.446715864.00000211BD24D000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	211BD24D000
Size:	24576

Details

Name:	0000000D.00000002.763753818.000000623ED8B000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	623ED8B000
Size:	20480

Details

Name:	00000005.00000003.429091596.0000000003360000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3360000
Size:	4096

Details

Name:	00000006.00000003.301889104.000001E69D102000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D102000
Size:	4096

Details

Name:	00000018.00000000.551127386.00007DF518730000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF518730000
Size:	12288

Details

Name:	00000004.00000002.435614465.000000007F910000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F910000
Size:	20480

Details

Name:	00000006.00000003.626460707.000001E69D260000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D260000
Size:	4096

Details

Name:	00000003.00000002.768446623.000000006EEC7000.00000040.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute and read and write
Base address:	6EEC7000
Size:	12288

Details

Name:	00000009.00000002.765669519.000002882C380000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2882C380000
Size:	4096

Details

Name:	00000013.00000002.527481556.000002442F060000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2442F060000
Size:	12288

Details

Name:	00000005.00000003.412307708.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	0000000B.00000002.434730208.00007FF504E8C000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF504E8C000
Size:	45056

Details

Name:	0000000D.00000002.766469309.00007FF5D5BFB000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D5BFB000
Size:	4096

Details

Name:	00000022.00000003.710193197.00000256C85A7000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C85A7000
Size:	4096

Details

Name:	00000004.00000003.413319335.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000006.00000002.627397479.00007FF56C173000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C173000
Size:	28672

Details

Name:	00000006.00000003.626512807.000001E6981F0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E6981F0000
Size:	4096

Details

Name:	00000000.00000003.605236646.000000000101C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	101C000
Size:	32768

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000022.00000002.732234041.00000256C8402000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8402000
Size:	4096

Details

Name:	0000001E.00000002.766735009.00007FF5BF585000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BF585000
Size:	12288

Details

Name:	00000023.00000002.709268342.000001FA6174C000.00000004.00000001.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FA6174C000
Size:	8192

Details

Name:	00000003.00000003.691359639.0000000003586000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3586000
Size:	421888

Details

Name:	0000000B.00000002.434822938.00007FF504ECA000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF504ECA000
Size:	16384

Details

Name:	00000018.00000002.562636484.00000003BBEFB000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3BBEFB000
Size:	20480

Details

Name:	00000018.00000002.562948176.0000010A85013000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	10A85013000
Size:	86016

Details

Name:	00000003.00000003.552385987.0000000003562000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3562000
Size:	69632

Details

Name:	00000022.00000002.732491558.00007DF557400000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF557400000
Size:	12288

Details

Name:	00000003.00000002.764843266.0000000002CB7000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CB7000
Size:	16384

Details

Name:	00000002.00000003.426947586.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	00000022.00000002.731562274.000000856F47F000.00000004.00000010.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	856F47F000
Size:	4096

Details

Name:	00000022.00000002.733160308.00007FF541AB6000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541AB6000
Size:	16384

Details

Name:	00000018.00000002.563751375.00007FF502E0B000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF502E0B000
Size:	8192

Details

Name:	0000000D.00000002.764695350.000001E3C2A29000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E3C2A29000
Size:	90112

Details

Name:	00000022.00000002.732596208.00007FF5415B9000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5415B9000
Size:	32768

Details

Name:	00000004.00000002.434748566.00000000030C0000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	30C0000
Size:	20480

Details

Name:	00000003.00000003.687400528.0000000003562000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3562000
Size:	77824

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.687358699.0000000003614000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3614000
Size:	4096

Details

Name:	00000022.00000002.733048842.00007FF541A29000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541A29000
Size:	20480

Details

Name:	00000018.00000002.563766869.00007FF502E0E000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF502E0E000
Size:	16384

Details

Name:	0000000F.00000002.447639720.00007FF4F3F8B000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F3F8B000
Size:	4096

Details

Name:	00000000.00000003.426209363.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000018.00000002.563395438.00007FF502BBD000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF502BBD000
Size:	16384

Details

Name:	00000007.00000002.765932258.00007FF5D8CF2000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D8CF2000
Size:	8192

Details

Name:	0000000B.00000003.433866256.000001B344A67000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B344A67000
Size:	16384

Details

Name:	00000005.00000003.447036406.0000000003495000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3495000
Size:	4096

Details

Name:	00000018.00000002.563011925.0000010A85052000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	10A85052000
Size:	4096

Details

Name:	00000002.00000000.240793224.000000007FC40000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FC40000
Size:	4096

Details

Name:	00000009.00000002.767193006.00007FF5C8448000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C8448000
Size:	49152

Details

Name:	00000000.00000000.239140831.000000007FCC0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FCC0000
Size:	4096

Details

Name:	00000018.00000002.563621585.00007FF502D63000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF502D63000
Size:	12288

Details

Name:	00000013.00000002.527431157.000000A83CBFE000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A83CBFE000
Size:	8192

Details

Name:	00000025.00000002.746691707.000001BBF3B13000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBF3B13000
Size:	16384

Details

Name:	00000000.00000003.415075306.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000003.00000003.465216213.000000000591A000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	591A000
Size:	4096

Details

Name:	00000009.00000002.767615751.00007FF5C852B000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C852B000
Size:	4096

Details

Name:	00000003.00000003.508265137.0000000003580000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3580000
Size:	16384

Details

Name:	0000000A.00000002.765213453.0000022797B13000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22797B13000
Size:	4096

Details

Name:	00000000.00000003.605148191.0000000003F21000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3F21000
Size:	458752

Details

Name:	00000022.00000003.718673361.00000256C858E000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C858E000
Size:	24576

Details

Name:	00000003.00000000.241194865.000000007FCD0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FCD0000
Size:	12288

Details

Name:	0000001D.00000000.678203274.0000020EADB90000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	20EADB90000
Size:	102400

Details

Name:	0000000D.00000002.765861397.00007FF5D5B13000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D5B13000
Size:	4096

Details

Name:	0000000D.00000002.765114061.000001E3C2F80000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E3C2F80000
Size:	4096

Details

Name:	00000009.00000002.764012838.000000DBEDBFC000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DBEDBFC000
Size:	16384

Details

Name:	00000004.00000003.402460337.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000009.00000002.767230203.00007FF5C845D000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C845D000
Size:	28672

Details

Name:	0000000B.00000002.434889494.00007FF504F64000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF504F64000
Size:	4096

Details

Name:	00000004.00000003.421888090.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000004.00000003.426379332.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000022.00000003.701655333.00000256C85B1000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C85B1000
Size:	61440

Details

Name:	00000007.00000002.765265848.00007DF4EC5D0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4EC5D0000
Size:	20480

Details

Name:	00000006.00000003.626490947.000001E69CF50000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69CF50000
Size:	4096

Details

Name:	00000000.00000003.604951195.0000000002661000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2661000
Size:	860160

Details

Name:	00000003.00000003.738186813.00000000035FD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35FD000
Size:	8192

Details

Name:	00000009.00000002.763968268.000000DBEDAFE000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DBEDAFE000
Size:	8192

Details

Name:	00000005.00000002.447778423.00000000052EE000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	52EE000
Size:	8192

Details

Name:	00000006.00000002.627554326.00007FF56C7AD000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C7AD000
Size:	8192

Details

Name:	00000000.00000002.765379349.0000000000FA7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FA7000
Size:	8192

Details

Name:	00000004.00000003.413112435.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000003.00000003.403531994.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000006.00000003.266664901.000001E69CF60000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69CF60000
Size:	4096

Details

Name:	00000022.00000003.699988703.00000256C858B000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C858B000
Size:	16384

Details

Name:	00000022.00000003.713326457.00000256C8594000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8594000
Size:	8192

Details

Name:	00000004.00000003.429092940.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000005.00000002.447384395.0000000002C05000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C05000
Size:	12288

Details

Name:	00000022.00000002.732153929.00000256C8250000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	256C8250000
Size:	4096

Details

Name:	00000022.00000003.710010558.00000256C85BA000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C85BA000
Size:	151552

Details

Name:	0000000B.00000002.434273517.000001B344A29000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B344A29000
Size:	36864

Details

Name:	00000004.00000003.434035693.00000000032B1000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	32B1000
Size:	28672

Details

Name:	0000001E.00000002.764531863.0000021DF8040000.00000004.00000020.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	21DF8040000
Size:	28672

Details

Name:	0000001D.00000002.765136699.00007DF52E900000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF52E900000
Size:	12288

Details

Name:	00000003.00000002.764191005.0000000002BE4000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BE4000
Size:	40960

Details

Name:	00000002.00000002.427258974.00000000001D0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1D0000
Size:	102400

Details

Name:	00000004.00000003.394704977.0000000003030000.00000040.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page execute and read and write
Base address:	3030000
Size:	4096

Details

Name:	0000000B.00000002.434081813.000000A958B9B000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A958B9B000
Size:	20480

Details

Name:	00000004.00000003.434045797.00000000032B9000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	32B9000
Size:	57344

Details

Name:	00000004.00000003.417644675.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	0000001D.00000000.678367984.00007DF52E900000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF52E900000
Size:	12288

Details

Name:	00000009.00000002.765324819.000002882BEBA000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2882BEBA000
Size:	36864

Details

Name:	00000022.00000003.719042269.00000256C859F000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C859F000
Size:	32768

Details

Name:	00000000.00000003.420955414.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000004.00000003.417197907.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	0000001E.00000002.765047730.0000021DF82B0000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	21DF82B0000
Size:	4096

Details

Name:	00000003.00000003.402025407.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000000.00000003.740178877.0000000001023000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1023000
Size:	4096

Details

Name:	0000000F.00000003.446685192.00000211BD253000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	211BD253000
Size:	86016

Details

Name:	00000009.00000002.767286044.00007FF5C8473000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C8473000
Size:	12288

Details

Name:	00000006.00000003.624361782.000001E69D220000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D220000
Size:	4096

Details

Name:	0000001D.00000002.764134361.0000020EADBD0000.00000004.00000020.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	20EADBD0000
Size:	4096

Details

Name:	0000000A.00000002.766969084.00007FF59335B000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59335B000
Size:	4096

Details

Name:	0000000B.00000002.434405319.000001B344A3D000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B344A3D000
Size:	12288

Details

Name:	00000023.00000002.709820493.00007FF58CC9A000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58CC9A000
Size:	16384

Details

Name:	00000013.00000002.527586761.000002442F23C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2442F23C000
Size:	57344

Details

Name:	00000000.00000003.560576628.0000000000FC4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FC4000
Size:	360448

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000003.423327131.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000003.00000003.428229592.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000005.00000002.447221895.0000000002A91000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A91000
Size:	32768

Details

Name:	0000000B.00000003.433872798.000001B344A48000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B344A48000
Size:	57344

Details

Name:	00000009.00000002.767110123.00007FF5C8423000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C8423000
Size:	4096

Details

Name:	0000000A.00000002.765585726.00007DF5A8C62000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A8C62000
Size:	4096

Details

Name:	00000006.00000002.627086981.000001E697E00000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E697E00000
Size:	12288

Details

Name:	00000013.00000002.527861187.00007FF5475C3000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5475C3000
Size:	20480

Details

Name:	00000025.00000002.747297521.00007FF5CC6B6000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC6B6000
Size:	16384

Details

Name:	00000004.00000002.434472330.0000000002915000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2915000
Size:	16384

Details

Name:	00000018.00000002.563569586.00007FF502D4D000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF502D4D000
Size:	28672

Details

Name:	00000018.00000002.563103103.0000010A8508D000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	10A8508D000
Size:	8192

Details

Name:	00000005.00000003.411778766.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	0000001D.00000002.765337548.00007FF518D8B000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF518D8B000
Size:	4096

Details

Name:	0000001E.00000002.765178526.0000021DF8850000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	21DF8850000
Size:	16384

Details

Name:	00000000.00000002.767336721.0000000003410000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3410000
Size:	4096

Details

Name:	0000001D.00000002.766080411.00007FF518FB6000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF518FB6000
Size:	16384

Details

Name:	00000027.00000000.751078278.00007FF50815F000.00000002.00020000.sdmp
TargetID:	39
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50815F000
Size:	20480

Details

Name:	00000000.00000002.767175341.0000000002EAB000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2EAB000
Size:	20480

Details

Name:	00000005.00000003.413481597.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	00000022.00000003.715100651.00000256C8590000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8590000
Size:	425984

Details

Name:	0000000B.00000003.433901206.000001B344A59000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B344A59000
Size:	20480

Details

Name:	00000004.00000003.421015266.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000000.00000003.432937576.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000003.00000002.764072993.0000000002BD6000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BD6000
Size:	4096

Details

Name:	00000025.00000002.746925567.00007FF5CC3A3000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC3A3000
Size:	4096

Details

Name:	00000007.00000002.765804373.00007FF5D8CAD000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D8CAD000
Size:	8192

Details

Name:	0000000F.00000002.447240298.00007DF509892000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF509892000
Size:	4096

Details

Name:	00000006.00000002.626797766.000000C7586F9000.00000004.00000010.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	C7586F9000
Size:	28672

Details

Name:	00000022.00000003.705501371.00000256C8568000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8568000
Size:	40960

Details

Name:	00000013.00000002.528002818.00007FF547A0C000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547A0C000
Size:	45056

Details

Name:	00000000.00000003.442414980.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000002.00000003.397906900.0000000000850000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	850000
Size:	4096

Details

Name:	0000000D.00000002.764530883.000001E3C2A02000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E3C2A02000
Size:	65536

Details

Name:	00000009.00000002.766621538.00007FF5C808E000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C808E000
Size:	4096

Details

Name:	00000002.00000003.426020722.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	00000003.00000003.738314248.0000000003586000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3586000
Size:	446464

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000006.00000003.261940189.000001E69D208000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D208000
Size:	16384

Details

Name:	0000000F.00000002.447526687.00007FF4F3ED3000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F3ED3000
Size:	12288

Details

Name:	00000005.00000002.447470368.0000000002C97000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C97000
Size:	16384

Details

Name:	00000003.00000003.508292555.0000000003562000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3562000
Size:	69632

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000A.00000000.410196914.00007DF5A8C60000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A8C60000
Size:	4096

Details

Name:	00000025.00000002.747259592.00007FF5CC6A8000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC6A8000
Size:	12288

Details

Name:	00000003.00000003.432773581.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	0000001D.00000002.763834521.000000537F3CE000.00000004.00000010.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	537F3CE000
Size:	8192

Details

Name:	00000009.00000002.767132796.00007FF5C8427000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C8427000
Size:	4096

Details

Name:	00000022.00000003.710215476.00000256C85CB000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C85CB000
Size:	81920

Details

Name:	00000013.00000002.527352180.000000A83C31B000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A83C31B000
Size:	20480

Details

Name:	0000001D.00000002.766257952.00007FF518FCD000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF518FCD000
Size:	16384

Details

Name:	00000009.00000002.765426957.000002882BEC9000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2882BEC9000
Size:	4096

Details

Name:	00000003.00000003.398509024.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000004.00000002.434346637.00000000028CD000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28CD000
Size:	8192

Details

Name:	00000003.00000003.430761015.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	0000000B.00000003.433895921.000001B344A5E000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B344A5E000
Size:	8192

Details

Name:	00000022.00000002.732126366.00000256C7ED0000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	256C7ED0000
Size:	4096

Details

Name:	0000001E.00000002.766207518.00007FF5BF3AA000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BF3AA000
Size:	8192

Details

Name:	00000009.00000002.764726608.000002882BE29000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2882BE29000
Size:	77824

Details

Name:	00000018.00000002.563131947.0000010A85100000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	10A85100000
Size:	4096

Details

Name:	00000000.00000003.417001149.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000025.00000002.747062760.00007FF5CC5E3000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC5E3000
Size:	4096

Details

Name:	00000022.00000003.718560681.00000256C8556000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8556000
Size:	36864

Details

Name:	00000022.00000002.732177127.00000256C8360000.00000008.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page write copy
Base address:	256C8360000
Size:	266240

Details

Name:	0000000F.00000002.447154003.00000211BD300000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	211BD300000
Size:	4096

Details

Name:	00000004.00000002.434413556.00000000028E6000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28E6000
Size:	4096

Details

Name:	00000022.00000003.713296544.00000256C8592000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8592000
Size:	4096

Details

Name:	00000022.00000003.705181243.00000256C858D000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C858D000
Size:	16384

Details

Name:	00000022.00000002.732807119.00007FF5418DE000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5418DE000
Size:	4096

Details

Name:	00000004.00000003.397326761.00000000032AE000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	32AE000
Size:	8192

Details

Name:	00000002.00000003.395397120.0000000000850000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	850000
Size:	4096

Details

Name:	00000003.00000003.597566490.0000000003574000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3574000
Size:	4096

Details

Name:	00000002.00000000.240785456.000000007FC32000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FC32000
Size:	4096

Details

Name:	0000001E.00000002.763849293.00000049A72FE000.00000004.00000010.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	49A72FE000
Size:	8192

Details

Name:	00000005.00000003.446969826.0000000004EA0000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4EA0000
Size:	4096

Details

Name:	00000006.00000002.627123524.000001E69CE50000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69CE50000
Size:	4096

Details

Name:	00000022.00000003.713054996.00000256C858F000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C858F000
Size:	8192

Details

Name:	0000000B.00000002.434930929.00007FF504F7F000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF504F7F000
Size:	20480

Details

Name:	00000003.00000003.552341267.00000000035A5000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35A5000
Size:	294912

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000009.00000002.767581752.00007FF5C851E000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C851E000
Size:	16384

Details

Name:	00000006.00000002.627592152.00007FF56C849000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C849000
Size:	4096

Details

Name:	0000001E.00000002.766007338.00007FF5B32CE000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B32CE000
Size:	8192

Details

Name:	00000025.00000002.746216630.000001BBF38A0000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1BBF38A0000
Size:	102400

Details

Name:	00000022.00000002.732343228.00000256C8557000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8557000
Size:	32768

Details

Name:	00000006.00000003.626408181.000001E6981E0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E6981E0000
Size:	8192

Details

Name:	00000007.00000002.764752198.00000262D4267000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	262D4267000
Size:	4096

Details

Name:	00000022.00000003.721039908.00000256C8556000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8556000
Size:	36864

Details

Name:	00000022.00000002.732945766.00007FF5419E7000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5419E7000
Size:	4096

Details

Name:	00000022.00000002.733073222.00007FF541A33000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541A33000
Size:	12288

Details

Name:	00000022.00000002.732716083.00007FF54181A000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54181A000
Size:	4096

Details

Name:	00000002.00000003.412575988.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	00000022.00000003.712906028.00000256C8569000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8569000
Size:	98304

Details

Name:	0000001D.00000002.766383148.00007FF518FEF000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF518FEF000
Size:	20480

Details

Name:	00000006.00000002.626968619.000001E697A73000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E697A73000
Size:	4096

Details

Name:	00000022.00000002.732700546.00007FF541813000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541813000
Size:	4096

Details

Name:	00000009.00000002.766430616.00007FF5C7D72000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C7D72000
Size:	16384

Details

Name:	00000000.00000003.412057936.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000006.00000003.262210190.000001E69CF94000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69CF94000
Size:	4096

Details

Name:	0000001E.00000000.678948821.00007DF5D4F10000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5D4F10000
Size:	4096

Details

Name:	0000000D.00000002.765404086.00007DF5EB532000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EB532000
Size:	4096

Details

Name:	00000003.00000003.597652984.0000000003562000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3562000
Size:	69632

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000018.00000002.563307899.00007FF502584000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF502584000
Size:	16384

Details

Name:	0000000F.00000002.447206005.00000211BDA02000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	211BDA02000
Size:	4096

Details

Name:	00000006.00000002.626853644.000001E6978C0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E6978C0000
Size:	12288

Details

Name:	00000002.00000003.427112763.0000000002A39000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2A39000
Size:	53248

Details

Name:	00000006.00000002.627306350.000001E69D0FA000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D0FA000
Size:	8192

Details

Name:	00000022.00000003.698847339.00000256C8584000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8584000
Size:	45056

Details

Name:	0000000F.00000002.447583541.00007FF4F3F5B000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F3F5B000
Size:	8192

Details

Name:	00000004.00000002.435550432.0000000006850000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	6850000
Size:	8192

Details

Name:	00000002.00000003.399917432.0000000000850000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	850000
Size:	4096

Details

Name:	00000003.00000003.691328147.0000000003580000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3580000
Size:	16384

Details

Name:	00000005.00000003.402400284.0000000003340000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3340000
Size:	4096

Details

Name:	00000004.00000003.406982716.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000022.00000003.721168103.00000256C859A000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C859A000
Size:	8192

Details

Name:	00000000.00000003.442285184.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000022.00000003.713159065.00000256C856D000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C856D000
Size:	81920

Details

Name:	00000003.00000003.687481149.0000000003580000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3580000
Size:	16384

Details

Name:	00000022.00000003.698962905.00000256C8563000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8563000
Size:	40960

Details

Name:	00000003.00000002.765832951.00000000033AF000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	33AF000
Size:	4096

Details

Name:	00000002.00000003.413398321.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	0000000D.00000002.766036917.00007FF5D5B69000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D5B69000
Size:	20480

Details

Name:	00000004.00000003.409136281.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000003.00000002.765205924.00000000032D0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	32D0000
Size:	8192

Details

Name:	00000013.00000002.527504739.000002442F170000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2442F170000
Size:	16384

Details

Name:	00000007.00000002.766189066.00007FF5D8D49000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D8D49000
Size:	20480

Details

Name:	00000006.00000002.627632574.00007FF56C924000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C924000
Size:	16384

Details

Name:	0000000F.00000002.447128754.00000211BD269000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	211BD269000
Size:	20480

Details

Name:	00000006.00000002.626776397.000000C7584FA000.00000004.00000010.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	C7584FA000
Size:	24576

Details

Name:	00000003.00000003.413177992.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000013.00000002.527569278.000002442F229000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2442F229000
Size:	73728

Details

Name:	0000000B.00000002.434905303.00007FF504F6E000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF504F6E000
Size:	16384

Details

Name:	00000004.00000003.423260817.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000023.00000002.709678545.00007FF58C509000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58C509000
Size:	8192

Details

Name:	0000000A.00000002.765532898.00007DF5A8C52000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A8C52000
Size:	4096

Details

Name:	00000003.00000002.768136167.0000000005D9C000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5D9C000
Size:	16384

Details

Name:	00000000.00000000.239149152.000000007FCD0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FCD0000
Size:	4096

Details

Name:	0000000B.00000002.434099964.000000A95907E000.00000004.00000010.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A95907E000
Size:	8192

Details

Name:	00000007.00000002.765658560.00007FF5D8A9A000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D8A9A000
Size:	4096

Details

Name:	00000022.00000002.732682014.00007FF541803000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541803000
Size:	4096

Details

Name:	00000002.00000002.427406334.0000000002461000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2461000
Size:	32768

Details

Name:	00000004.00000003.434066419.00000000032A9000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	32A9000
Size:	12288

Details

Name:	00000000.00000003.413396071.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Found detection on Joe Sandbox Cloud Basic with higher score	System Summary

Details

Name:	00000003.00000003.735930228.0000000003573000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3573000
Size:	8192

Details

Name:	0000000D.00000002.764360645.000001E3C28E0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E3C28E0000
Size:	4096

Details

Name:	00000003.00000002.763777413.0000000002A8C000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A8C000
Size:	4096

Details

Name:	0000000A.00000002.764460902.0000022797980000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	22797980000
Size:	16384

Details

Name:	0000001D.00000002.765773845.00007FF518EF8000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF518EF8000
Size:	4096

Details

Name:	00000022.00000003.717799272.00000256C85A5000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C85A5000
Size:	200704

Details

Name:	00000000.00000002.767360278.000000000385F000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	385F000
Size:	4096

Details

Name:	00000022.00000002.732584613.00007FF5415B3000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5415B3000
Size:	20480

Details

Name:	00000003.00000003.738215935.00000000035FD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35FD000
Size:	8192

Details

Name:	00000003.00000003.597534779.00000000035F2000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35F2000
Size:	4096

Details

Name:	00000005.00000003.425851314.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	00000006.00000003.626426823.000001E697AFF000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E697AFF000
Size:	8192

Details

Name:	00000005.00000003.402366618.00000000034A5000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	34A5000
Size:	12288

Details

Name:	0000001E.00000000.679034964.00007DF5D4F22000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5D4F22000
Size:	4096

Details

Name:	00000003.00000003.406579652.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000009.00000002.767431355.00007FF5C84F6000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C84F6000
Size:	16384

Details

Name:	00000003.00000003.421921717.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000002.00000003.409446951.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	00000023.00000002.709510771.00007DF4A0510000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4A0510000
Size:	20480

Details

Name:	00000000.00000003.423971870.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	0000000D.00000002.764403325.000001E3C29E0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E3C29E0000
Size:	16384

Details

Name:	00000009.00000002.764789528.000002882BE3D000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2882BE3D000
Size:	192512

Details

Name:	00000018.00000002.562763365.00000003BC6FE000.00000004.00000010.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3BC6FE000
Size:	8192

Details

Name:	00000002.00000002.427253628.00000000001C0000.00000004.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1C0000
Size:	4096

Details

Name:	00000000.00000002.767279756.000000000337D000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	337D000
Size:	12288

Details

Name:	0000001D.00000002.764074481.0000020EADBB0000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	20EADBB0000
Size:	12288

Details

Name:	00000003.00000003.465138073.00000000035FB000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35FB000
Size:	49152

Details

Name:	00000006.00000002.626860786.000001E6978D0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E6978D0000
Size:	4096

Details

Name:	00000005.00000003.402168777.0000000003320000.00000040.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page execute and read and write
Base address:	3320000
Size:	4096

Details

Name:	00000000.00000002.767450839.0000000003C5C000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3C5C000
Size:	16384

Details

Name:	00000023.00000002.709142131.000001FA616E0000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FA616E0000
Size:	8192

Details

Name:	00000022.00000003.705514823.00000256C8586000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8586000
Size:	4096

Details

Name:	00000004.00000003.420618020.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000007.00000002.766896872.00007FF5D8DFB000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D8DFB000
Size:	8192

Details

Name:	00000013.00000002.527598703.000002442F24D000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2442F24D000
Size:	8192

Details

Name:	00000003.00000002.767688458.00000000035F1000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	35F1000
Size:	8192

Details

Name:	00000004.00000003.418189524.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000003.00000003.423851576.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	0000000D.00000002.763904882.000000623F3FE000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	623F3FE000
Size:	8192

Details

Name:	0000001E.00000003.694247665.0000021DF8290000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	21DF8290000
Size:	4096

Details

Name:	00000000.00000002.767298518.00000000033BD000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	33BD000
Size:	12288

Details

Name:	00000013.00000002.528125359.00007FF547AEE000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547AEE000
Size:	16384

Details

Name:	0000000F.00000002.447144526.00000211BD28B000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	211BD28B000
Size:	32768

Details

Name:	0000001D.00000002.766320434.00007FF518FDB000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF518FDB000
Size:	8192

Details

Name:	00000004.00000002.434905991.0000000003380000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3380000
Size:	36864

Details

Name:	00000002.00000003.412058932.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	00000006.00000002.627150138.000001E69D021000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D021000
Size:	49152

Details

Name:	0000001E.00000002.767063504.00007FF5BF604000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BF604000
Size:	4096

Details

Name:	00000002.00000002.427534389.0000000002586000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2586000
Size:	4096

Details

Name:	00000023.00000003.708287274.000001FA61722000.00000004.00000001.sdmp
TargetID:	35
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FA61722000
Size:	102400

Details

Name:	00000005.00000003.428685650.0000000003360000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3360000
Size:	4096

Details

Name:	00000022.00000003.714843082.00000256C8590000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8590000
Size:	57344

Details

Name:	00000006.00000002.626995326.000001E697A8E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E697A8E000
Size:	16384

Details

Name:	00000022.00000002.731770505.00000256C7C13000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	256C7C13000
Size:	86016

Details

Name:	00000004.00000003.405976954.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000004.00000003.411137206.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	0000001D.00000002.764571418.0000020EADC3F000.00000004.00000001.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20EADC3F000
Size:	57344

Details

Name:	0000001D.00000000.678307991.00007DF52E8E0000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF52E8E0000
Size:	4096

Details

Name:	00000005.00000003.432102787.0000000003360000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3360000
Size:	4096

Details

Name:	00000005.00000002.447525990.0000000002F90000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2F90000
Size:	4096

Details

Name:	00000013.00000002.527688236.000002442F300000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2442F300000
Size:	4096

Details

Name:	00000022.00000002.732265033.00000256C8516000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8516000
Size:	4096

Details

Name:	00000003.00000003.552287694.00000000035F4000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35F4000
Size:	28672

Details

Name:	00000003.00000002.764373348.0000000002C05000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C05000
Size:	16384

Details

Name:	00000003.00000003.735849123.0000000003586000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3586000
Size:	421888

Details

Name:	00000007.00000002.765615666.00007FF5D8941000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D8941000
Size:	4096

Details

Name:	0000000A.00000002.765770238.00007FF592FEA000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF592FEA000
Size:	4096

Details

Name:	0000000D.00000002.765171308.000001E3C3060000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E3C3060000
Size:	4096

Details

Name:	00000000.00000002.766389250.0000000001023000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1023000
Size:	4096

Details

Name:	00000005.00000002.447915646.000000007F042000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F042000
Size:	4096

Details

Name:	00000000.00000002.764788523.0000000000F3C000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F3C000
Size:	16384

Details

Name:	0000001E.00000002.766253066.00007FF5BF449000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BF449000
Size:	4096

Details

Name:	00000006.00000003.626482896.000001E69D290000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D290000
Size:	4096

Details

Name:	00000002.00000002.427301991.000000000047B000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	47B000
Size:	20480

Details

Name:	00000022.00000002.732871164.00007FF5419A7000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5419A7000
Size:	4096

Details

Name:	00000004.00000003.432103194.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000006.00000002.626754269.000000C7582F7000.00000004.00000010.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	C7582F7000
Size:	36864

Details

Name:	00000005.00000002.447393067.0000000002C09000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C09000
Size:	8192

Details

Name:	0000000B.00000002.434917356.00007FF504F7B000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF504F7B000
Size:	4096

Details

Name:	0000000F.00000002.447620234.00007FF4F3F7B000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F3F7B000
Size:	8192

Details

Name:	00000025.00000003.745718211.000001BBF3A4A000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBF3A4A000
Size:	24576

Details

Name:	00000005.00000002.447277661.0000000002BB1000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BB1000
Size:	4096

Details

Name:	00000006.00000002.627238197.000001E69D0A3000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D0A3000
Size:	12288

Details

Name:	0000001D.00000002.764011622.0000020EADB90000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	20EADB90000
Size:	102400

Details

Name:	00000003.00000003.691691615.00000000035EE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35EE000
Size:	4096

Details

Name:	00000022.00000002.731448643.000000856ED0E000.00000004.00000010.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	856ED0E000
Size:	8192

Details

Name:	00000000.00000002.764493783.0000000000A00000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	A00000
Size:	16384

Details

Name:	0000001D.00000002.765520104.00007FF518E64000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF518E64000
Size:	4096

Details

Name:	00000003.00000003.403029656.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000006.00000002.627334954.00007DF5823A2000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5823A2000
Size:	4096

Details

Name:	00000005.00000002.447681814.00000000034A3000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	34A3000
Size:	20480

Details

Name:	0000000A.00000002.766276439.00007FF593268000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF593268000
Size:	4096

Details

Name:	0000001E.00000002.765018840.0000021DF82A9000.00000004.00000040.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	21DF82A9000
Size:	8192

Details

Name:	00000022.00000003.707872658.00000256C856C000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C856C000
Size:	8192

Details

Name:	0000001D.00000002.765067822.00007DF52E8E2000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF52E8E2000
Size:	4096

Details

Name:	00000005.00000000.259508661.000000007F042000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F042000
Size:	4096

Details

Name:	0000000F.00000002.447591002.00007FF4F3F60000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F3F60000
Size:	36864

Details

Name:	00000003.00000002.765018013.0000000002F9B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2F9B000
Size:	20480

Details

Name:	00000022.00000003.700080931.00000256C8560000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8560000
Size:	53248

Details

Name:	00000002.00000002.427674926.000000000264B000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	264B000
Size:	16384

Details

Name:	00000005.00000002.447755988.0000000004DCE000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4DCE000
Size:	8192

Details

Name:	00000004.00000003.434058564.00000000032BA000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	32BA000
Size:	53248

Details

Name:	00000002.00000002.427826069.0000000002A39000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A39000
Size:	4096

Details

Name:	00000003.00000002.767973241.00000000053FC000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	53FC000
Size:	16384

Details

Name:	00000018.00000002.563192695.0000010A85200000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	10A85200000
Size:	4096

Details

Name:	0000001E.00000002.763805001.00000049A727E000.00000004.00000010.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	49A727E000
Size:	8192

Details

Name:	00000009.00000002.765599346.000002882C000000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2882C000000
Size:	4096

Details

Name:	0000001E.00000000.679134246.00007FF5BF61F000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BF61F000
Size:	20480

Details

Name:	00000004.00000003.431374605.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000022.00000003.707765300.00000256C8A02000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8A02000
Size:	147456

Details

Name:	00000002.00000002.427635377.00000000025D9000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25D9000
Size:	8192

Details

Name:	00000006.00000003.626467135.000001E69D270000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D270000
Size:	4096

Details

Name:	00000006.00000002.627603707.00007FF56C863000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C863000
Size:	16384

Details

Name:	00000004.00000002.435579615.0000000006BA0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6BA0000
Size:	4096

Details

Name:	00000009.00000002.767544273.00007FF5C8514000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C8514000
Size:	4096

Details

Name:	00000023.00000002.709033981.000000E24497F000.00000004.00000010.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	E24497F000
Size:	4096

Details

Name:	00000004.00000003.408011143.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	0000000F.00000000.434945956.00007DF509880000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF509880000
Size:	4096

Details

Name:	00000000.00000003.651996153.000000000332A000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	332A000
Size:	4096

Details

Name:	00000003.00000002.764770118.0000000002CA1000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CA1000
Size:	8192

Details

Name:	00000004.00000003.434077654.00000000032B1000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	32B1000
Size:	28672

Details

Name:	00000006.00000003.626444090.000001E698970000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E698970000
Size:	4096

Details

Name:	00000022.00000002.732386366.00000256C8570000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8570000
Size:	73728

Details

Name:	00000023.00000002.709422158.000001FA61BB0000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FA61BB0000
Size:	69632

Details

Name:	00000005.00000002.447353821.0000000002BF1000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BF1000
Size:	12288

Details

Name:	00000023.00000002.709958221.00007FF58CD20000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58CD20000
Size:	36864

Details

Name:	00000025.00000002.747015789.00007FF5CC53F000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC53F000
Size:	20480

Details

Name:	0000001D.00000002.765236915.00007FF518737000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF518737000
Size:	4096

Details

Name:	00000000.00000002.767314849.00000000033FE000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	33FE000
Size:	8192

Details

Name:	0000000A.00000002.766996589.00007FF59335D000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59335D000
Size:	4096

Details

Name:	00000005.00000003.432536506.0000000003360000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3360000
Size:	4096

Details

Name:	00000003.00000003.738282776.0000000003578000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3578000
Size:	24576

Details

Name:	00000002.00000003.420681349.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	00000007.00000002.766650584.00007FF5D8DDB000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D8DDB000
Size:	4096

Details

Name:	00000006.00000002.626790162.000000C7585FF000.00000004.00000010.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	C7585FF000
Size:	4096

Details

Name:	00000007.00000002.765712783.00007FF5D8B5A000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D8B5A000
Size:	8192

Details

Name:	00000002.00000002.427347717.000000000061A000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	61A000
Size:	12288

Details

Name:	00000003.00000002.764404387.0000000002C0B000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C0B000
Size:	8192

Details

Name:	00000003.00000003.415505849.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	0000001D.00000002.765211927.00007FF51872F000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51872F000
Size:	16384

Details

Name:	00000000.00000002.767869557.000000007FCC0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FCC0000
Size:	4096

Details

Name:	0000000B.00000002.434868042.00007FF504F4B000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF504F4B000
Size:	8192

Details

Name:	0000000B.00000002.434610437.00007DF51A872000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51A872000
Size:	4096

Details

Name:	00000007.00000002.765326792.00007DF5EE700000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EE700000
Size:	4096

Details

Name:	00000003.00000003.429320642.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000003.00000002.764059768.0000000002BD1000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BD1000
Size:	4096

Details

Name:	00000009.00000002.764571959.000002882BE00000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2882BE00000
Size:	73728

Details

Name:	00000013.00000002.527928028.00007FF5478CE000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5478CE000
Size:	12288

Details

Name:	00000009.00000002.764076992.000000DBEDC7B000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DBEDC7B000
Size:	20480

Details

Name:	00000013.00000002.528114944.00007FF547AE4000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547AE4000
Size:	4096

Details

Name:	0000000B.00000000.411673387.00007DF51A880000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51A880000
Size:	4096

Details

Name:	0000000F.00000003.446726325.00000211BD24C000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	211BD24C000
Size:	4096

Details

Name:	00000022.00000000.695730577.00007FF541AEF000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541AEF000
Size:	20480

Details

Name:	0000000F.00000002.446890314.000000595B95E000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	595B95E000
Size:	8192

Details

Name:	0000000D.00000002.766128209.00007FF5D5B7A000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D5B7A000
Size:	16384

Details

Name:	00000004.00000002.434562023.000000000295D000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	295D000
Size:	73728

Details

Name:	00000022.00000002.733105108.00007FF541A55000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541A55000
Size:	12288

Details

Name:	00000009.00000002.766843379.00007FF5C82CD000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C82CD000
Size:	16384

Details

Name:	00000005.00000003.421252686.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	00000003.00000002.765489501.0000000003360000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3360000
Size:	12288

Details

Name:	00000018.00000002.563258941.00007DF518722000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF518722000
Size:	4096

Details

Name:	00000023.00000002.709730181.00007FF58CC7D000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58CC7D000
Size:	28672

Details

Name:	00000022.00000003.708106302.00000256C855D000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C855D000
Size:	8192

Details

Name:	00000002.00000002.427874201.00000000045CF000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	45CF000
Size:	4096

Details

Name:	00000005.00000003.429424591.0000000003360000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3360000
Size:	4096

Details

Name:	0000000A.00000002.766233536.00007FF593253000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF593253000
Size:	4096

Details

Name:	0000001D.00000002.765619786.00007FF518EB5000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF518EB5000
Size:	4096

Details

Name:	0000000A.00000002.766252715.00007FF593257000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF593257000
Size:	4096

Details

Name:	00000003.00000003.421053159.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000003.00000003.738598695.000000000358B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	358B000
Size:	385024

Details

Name:	00000003.00000003.398006421.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000022.00000002.732847166.00007FF541964000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541964000
Size:	16384

Details

Name:	0000000F.00000002.447573102.00007FF4F3F56000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F3F56000
Size:	16384

Details

Name:	00000018.00000002.563682301.00007FF502DE6000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF502DE6000
Size:	16384

Details

Name:	0000001E.00000002.766775387.00007FF5BF5D8000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BF5D8000
Size:	12288

Details

Name:	0000000B.00000003.433940304.000001B344A41000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B344A41000
Size:	16384

Details

Name:	00000004.00000002.434896040.00000000032CD000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	32CD000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Found detection on Joe Sandbox Cloud Basic with higher score	System Summary

Details

Name:	00000003.00000002.764501183.0000000002C19000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C19000
Size:	8192

Details

Name:	00000002.00000002.427364337.0000000000660000.00000004.00000020.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	660000
Size:	20480

Details

Name:	00000018.00000002.562732686.00000003BC4F7000.00000004.00000010.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3BC4F7000
Size:	36864

Details

Name:	00000005.00000002.447555668.00000000032F0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	32F0000
Size:	4096

Details

Name:	00000006.00000002.626903650.000001E697A13000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E697A13000
Size:	86016

Details

Name:	00000005.00000002.447743831.0000000004D4D000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4D4D000
Size:	12288

Details

Name:	00000003.00000003.409660969.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000003.00000003.404034466.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000003.00000003.416999839.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000005.00000003.422488047.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	00000025.00000002.747148188.00007FF5CC625000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC625000
Size:	8192

Details

Name:	00000003.00000003.404536923.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000004.00000003.413664528.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000005.00000003.421785709.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	00000000.00000003.431073693.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000000.00000003.437727283.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000006.00000002.627569504.00007FF56C7D1000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C7D1000
Size:	4096

Details

Name:	00000006.00000002.626920115.000001E697A29000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E697A29000
Size:	90112

Details

Name:	00000003.00000003.554542052.00000000035EE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35EE000
Size:	32768

Details

Name:	00000013.00000002.528056815.00007FF547A65000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547A65000
Size:	12288

Details

Name:	00000006.00000002.627317435.000001E69D100000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D100000
Size:	4096

Details

Name:	00000002.00000002.427791946.0000000002A0A000.00000004.00000020.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2A0A000
Size:	110592

Details

Name:	00000002.00000002.427521601.0000000002581000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2581000
Size:	4096

Details

Name:	00000022.00000003.713276148.00000256C8594000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8594000
Size:	8192

Details

Name:	00000023.00000002.709205750.000001FA61727000.00000004.00000020.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1FA61727000
Size:	61440

Details

Name:	0000000B.00000002.434414859.000001B344A42000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B344A42000
Size:	8192

Details

Name:	00000005.00000003.417275867.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	0000001E.00000002.764261287.0000021DF7FB0000.00000004.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	21DF7FB0000
Size:	4096

Details

Name:	00000003.00000002.764098605.0000000002BD9000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BD9000
Size:	16384

Details

Name:	00000002.00000002.427697999.000000000265C000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	265C000
Size:	4096

Details

Name:	0000001E.00000002.764593396.0000021DF8048000.00000004.00000020.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	21DF8048000
Size:	421888

Details

Name:	0000001D.00000002.764955418.0000020EAE402000.00000004.00000001.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20EAE402000
Size:	4096

Details

Name:	00000002.00000003.397404470.0000000000850000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	850000
Size:	4096

Details

Name:	00000022.00000003.708127237.00000256C8566000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8566000
Size:	24576

Details

Name:	00000002.00000003.422492974.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	00000025.00000002.747240078.00007FF5CC655000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC655000
Size:	12288

Details

Name:	00000002.00000003.413089053.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	00000003.00000003.402527382.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000025.00000002.747125287.00007FF5CC608000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC608000
Size:	49152

Details

Name:	00000023.00000002.708973020.000000E24439A000.00000004.00000001.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E24439A000
Size:	24576

Details

Name:	00000006.00000002.627065931.000001E697B07000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E697B07000
Size:	24576

Details

Name:	00000004.00000002.434601961.00000000029BC000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29BC000
Size:	4096

Details

Name:	00000000.00000003.444458750.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	0000000F.00000002.447364733.00007FF4F3D7E000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F3D7E000
Size:	4096

Details

Name:	00000000.00000003.412576397.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000022.00000002.732928460.00007FF5419E3000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5419E3000
Size:	4096

Details

Name:	00000003.00000002.767755763.00000000039A0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	39A0000
Size:	4096

Details

Name:	0000000A.00000002.764135645.0000008597C7E000.00000004.00000010.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8597C7E000
Size:	8192

Details

Name:	00000013.00000000.511641352.00007DF55D410000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55D410000
Size:	12288

Details

Name:	00000005.00000002.447442074.0000000002C7B000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C7B000
Size:	16384

Details

Name:	0000000A.00000002.764654954.0000022797A13000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22797A13000
Size:	86016

Details

Name:	00000022.00000003.705524531.00000256C8588000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8588000
Size:	4096

Details

Name:	00000000.00000002.767809000.000000006EEC5000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6EEC5000
Size:	8192

Details

Name:	00000003.00000002.768505843.000000007FCB2000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FCB2000
Size:	4096

Details

Name:	00000009.00000002.763804693.000000DBED6FF000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DBED6FF000
Size:	4096

Details

Name:	00000022.00000003.716037850.00000256C8560000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8560000
Size:	57344

Details

Name:	00000002.00000002.427831965.0000000002A3B000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A3B000
Size:	45056

Details

Name:	00000002.00000002.427321880.00000000005E0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	5E0000
Size:	4096

Details

Name:	0000000F.00000002.447246841.00007DF5098A0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5098A0000
Size:	12288

Details

Name:	00000013.00000002.527676593.000002442F28E000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2442F28E000
Size:	16384

Details

Name:	00000006.00000002.627609698.00007FF56C868000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C868000
Size:	4096

Details

Name:	00000000.00000002.764201041.000000000095C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	95C000
Size:	16384

Details

Name:	0000000B.00000002.434782844.00007FF504EB5000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF504EB5000
Size:	8192

Details

Name:	0000001E.00000002.766277216.00007FF5BF457000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BF457000
Size:	12288

Details

Name:	00000009.00000002.766214641.00007DF4DBCF0000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4DBCF0000
Size:	20480

Details

Name:	00000004.00000003.429830662.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000000.00000002.764396991.00000000009FC000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	9FC000
Size:	4096

Details

Name:	00000003.00000002.764600184.0000000002C25000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C25000
Size:	12288

Details

Name:	00000004.00000002.434766540.000000000318D000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	318D000
Size:	12288

Details

Name:	00000002.00000002.427662239.00000000025FD000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25FD000
Size:	73728

Details

Name:	00000002.00000002.427772193.0000000002A00000.00000004.00000020.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2A00000
Size:	32768

Details

Name:	00000003.00000003.395500491.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000003.00000003.735749931.00000000035F3000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35F3000
Size:	4096

Details

Name:	00000022.00000003.712081748.00000256C8568000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8568000
Size:	102400

Details

Name:	00000003.00000003.691306380.0000000003578000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3578000
Size:	24576

Details

Name:	00000022.00000002.732081109.00000256C7D02000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	256C7D02000
Size:	12288

Details

Name:	00000022.00000002.731518818.000000856F377000.00000004.00000010.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	856F377000
Size:	36864

Details

Name:	00000003.00000003.599439369.0000000003586000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3586000
Size:	421888

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000A.00000002.764571583.0000022797A02000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22797A02000
Size:	65536

Details

Name:	0000000F.00000002.447096735.00000211BD23C000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	211BD23C000
Size:	65536

Details

Name:	00000005.00000002.447458109.0000000002C85000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C85000
Size:	24576

Details

Name:	00000003.00000003.420824677.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000022.00000003.715183159.00000256C8A02000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8A02000
Size:	851968

Details

Name:	00000002.00000002.427438669.000000000247B000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	247B000
Size:	12288

Details

Name:	00000013.00000002.527754191.000002442FA02000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2442FA02000
Size:	4096

Details

Name:	00000000.00000003.605248695.0000000001026000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1026000
Size:	4096

Details

Name:	00000003.00000003.687299091.00000000035F3000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35F3000
Size:	4096

Details

Name:	0000001D.00000000.678402238.00007FF518FEF000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF518FEF000
Size:	20480

Details

Name:	00000003.00000002.764870455.0000000002EF0000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2EF0000
Size:	4096

Details

Name:	00000022.00000003.706957672.00000256C8560000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8560000
Size:	73728

Details

Name:	00000022.00000002.732448952.00007DF5573E0000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5573E0000
Size:	4096

Details

Name:	00000025.00000002.747095192.00007FF5CC5F7000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC5F7000
Size:	8192

Details

Name:	0000000D.00000002.765212547.000001E3C3202000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E3C3202000
Size:	4096

Details

Name:	00000005.00000002.447790043.000000000536E000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	536E000
Size:	8192

Details

Name:	00000007.00000002.764250358.00000262D41B0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	262D41B0000
Size:	4096

Details

Name:	0000000F.00000002.447414579.00007FF4F3E04000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F3E04000
Size:	16384

Details

Name:	0000000D.00000002.766004513.00007FF5D5B65000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D5B65000
Size:	8192

Details

Name:	00000022.00000002.731852428.00000256C7C62000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	256C7C62000
Size:	167936

Details

Name:	0000000D.00000002.765657192.00007FF5D5928000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D5928000
Size:	8192

Details

Name:	00000006.00000002.626816279.000000C758CFE000.00000004.00000010.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	C758CFE000
Size:	8192

Details

Name:	00000022.00000002.733025760.00007FF541A25000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541A25000
Size:	8192

Details

Name:	00000000.00000003.605255855.000000000102B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	102B000
Size:	16384

Details

Name:	00000022.00000002.731724712.00000256C7B90000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	256C7B90000
Size:	4096

Details

Name:	00000003.00000003.644053662.00000000035F7000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35F7000
Size:	45056

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000002.00000003.421251178.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	0000001E.00000002.763969399.00000049A73F9000.00000004.00000010.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	49A73F9000
Size:	28672

Details

Name:	0000000A.00000000.410189641.00007DF5A8C50000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A8C50000
Size:	4096

Details

Name:	00000022.00000003.713302973.00000256C8594000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8594000
Size:	8192

Details

Name:	00000003.00000003.420469754.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000022.00000002.732913153.00007FF5419DC000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5419DC000
Size:	4096

Details

Name:	00000009.00000002.766113557.000002882C713000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2882C713000
Size:	32768

Details

Name:	00000000.00000003.424905163.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000022.00000003.713100864.00000256C856D000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C856D000
Size:	81920

Details

Name:	00000000.00000003.420683471.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000003.00000002.767678191.00000000035EA000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	35EA000
Size:	24576

Details

Name:	0000001D.00000002.765188174.00007FF51872A000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51872A000
Size:	12288

Details

Name:	00000000.00000002.764135679.000000000085C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	85C000
Size:	16384

Details

Name:	0000000B.00000003.433949996.000001B344A44000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B344A44000
Size:	4096

Details

Name:	0000001E.00000003.679666237.0000021DF8090000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	21DF8090000
Size:	8192

Details

Name:	00000004.00000003.430762861.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000000.00000003.740652598.0000000001025000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1025000
Size:	12288

Details

Name:	00000005.00000002.447920897.000000007F050000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F050000
Size:	4096

Details

Name:	00000023.00000002.709613956.00007DF5A2652000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A2652000
Size:	4096

Details

Name:	0000000F.00000002.447299607.00007FF4F3A53000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F3A53000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
Found detection on Joe Sandbox Cloud Basic with higher score	System Summary

Details

Name:	00000025.00000002.746136914.0000009B7867F000.00000004.00000010.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	9B7867F000
Size:	4096

Details

Name:	0000000D.00000002.765713534.00007FF5D59CD000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D59CD000
Size:	16384

Details

Name:	00000022.00000003.701646498.00000256C85A6000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C85A6000
Size:	4096

Details

Name:	0000001E.00000002.764499917.0000021DF8020000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	21DF8020000
Size:	8192

Details

Name:	00000006.00000002.627677725.00007FF56C988000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C988000
Size:	8192

Details

Name:	00000003.00000003.687370982.00000000035EF000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35EF000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000001D.00000002.765796707.00007FF518EFD000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF518EFD000
Size:	16384

Details

Name:	00000022.00000003.718659555.00000256C856C000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C856C000
Size:	90112

Details

Name:	00000025.00000002.746962190.00007FF5CC48D000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC48D000
Size:	16384

Details

Name:	00000004.00000003.415075962.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000025.00000002.746677191.000001BBF3B08000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBF3B08000
Size:	24576

Details

Name:	0000000A.00000002.763985698.000000859787D000.00000004.00000010.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	859787D000
Size:	12288

Details

Name:	0000000B.00000002.434633148.00007DF51A890000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51A890000
Size:	12288

Details

Name:	0000000A.00000002.764178066.0000008597D7F000.00000004.00000010.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8597D7F000
Size:	4096

Details

Name:	0000001D.00000002.763918746.000000537F8FE000.00000004.00000010.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	537F8FE000
Size:	8192

Details

Name:	0000000A.00000002.764383481.0000022797940000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	22797940000
Size:	12288

Details

Name:	0000000F.00000000.434951364.00007DF509882000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF509882000
Size:	4096

Details

Name:	00000006.00000002.627651988.00007FF56C967000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C967000
Size:	4096

Details

Name:	00000007.00000002.765083082.00000262D4400000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	262D4400000
Size:	4096

Details

Name:	00000018.00000002.563366745.00007FF5028F8000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5028F8000
Size:	4096

Details

Name:	00000003.00000003.736040521.00000000035A4000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35A4000
Size:	299008

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000002.00000002.427594994.00000000025C1000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25C1000
Size:	12288

Details

Name:	00000009.00000002.765500041.000002882BF02000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2882BF02000
Size:	32768

Details

Name:	00000025.00000002.746814142.00007DF5E1FF0000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E1FF0000
Size:	4096

Details

Name:	00000013.00000002.528029076.00007FF547A35000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547A35000
Size:	8192

Details

Name:	00000003.00000002.768536938.000000007FCC2000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FCC2000
Size:	4096

Details

Name:	00000009.00000002.764230911.000000DBEE07F000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DBEE07F000
Size:	4096

Details

Name:	0000000F.00000002.447435726.00007FF4F3E97000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F3E97000
Size:	8192

Details

Name:	00000022.00000003.701669173.00000256C8A1E000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8A1E000
Size:	114688

Details

Name:	00000003.00000003.738240041.00000000035F7000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35F7000
Size:	4096

Details

Name:	00000000.00000003.605305277.0000000002F31000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	2F31000
Size:	462848

Details

Name:	00000003.00000002.768249608.000000006EDF0000.00000020.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	6EDF0000
Size:	450560

Signature Hits	Behavior Group	Mitre Attack
Found detection on Joe Sandbox Cloud Basic with higher score	System Summary

Details

Name:	00000023.00000002.709289741.000001FA619A0000.00000004.00000040.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1FA619A0000
Size:	12288

Details

Name:	00000022.00000002.731758665.00000256C7C00000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	256C7C00000
Size:	73728

Details

Name:	00000022.00000003.719609198.00000256C85BE000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C85BE000
Size:	122880

Signature Hits	Behavior Group	Mitre Attack
Found detection on Joe Sandbox Cloud Basic with higher score	System Summary

Details

Name:	00000003.00000003.413278632.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000007.00000002.765189802.00000262D4790000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	262D4790000
Size:	16384

Details

Name:	00000025.00000002.746894305.00007FF5CC1B9000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC1B9000
Size:	32768

Details

Name:	00000022.00000000.695671231.00007DF5573E0000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5573E0000
Size:	4096

Details

Name:	00000002.00000002.427849917.0000000002B00000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B00000
Size:	36864

Details

Name:	0000000A.00000002.766320589.00007FF59326C000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59326C000
Size:	45056

Details

Name:	00000006.00000003.264671631.000001E69D2E0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D2E0000
Size:	4096

Details

Name:	00000022.00000003.731138842.00000256C7C5C000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C7C5C000
Size:	4096

Details

Name:	00000025.00000002.746167083.000001BBF3880000.00000004.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1BBF3880000
Size:	4096

Details

Name:	0000001E.00000002.764955608.0000021DF8280000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	21DF8280000
Size:	4096

Details

Name:	00000005.00000002.447737439.00000000038F0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	38F0000
Size:	4096

Details

Name:	00000002.00000002.427353380.0000000000630000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	630000
Size:	12288

Details

Name:	00000006.00000003.623891840.000001E69D3A0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D3A0000
Size:	4096

Details

Name:	0000001E.00000002.764202965.00000049A7579000.00000004.00000010.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	49A7579000
Size:	28672

Details

Name:	00000023.00000002.710017615.00007FF58CD3E000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58CD3E000
Size:	16384

Details

Name:	00000022.00000003.700115398.00000256C856C000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C856C000
Size:	4096

Details

Name:	00000005.00000003.416920258.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	0000000D.00000002.764948211.000001E3C2A5E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E3C2A5E000
Size:	28672

Details

Name:	00000025.00000002.746313774.000001BBF39F0000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBF39F0000
Size:	4096

Details

Name:	00000003.00000003.427719093.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000022.00000003.701791495.00000256C8A02000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8A02000
Size:	114688

Details

Name:	00000003.00000002.768229484.000000006EDE6000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6EDE6000
Size:	40960

Details

Name:	00000003.00000002.768012123.00000000054BE000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	54BE000
Size:	8192

Details

Name:	0000000A.00000002.765741332.00007FF592AF0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF592AF0000
Size:	4096

Details

Name:	00000000.00000003.740678004.0000000000FA6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	FA6000
Size:	12288

Details

Name:	00000003.00000003.397504044.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000007.00000002.765353070.00007DF5EE702000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EE702000
Size:	4096

Details

Name:	00000000.00000003.429819339.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	0000001D.00000002.763797898.000000537F34F000.00000004.00000010.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	537F34F000
Size:	4096

Details

Name:	00000025.00000002.747363340.00007FF5CC6CD000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC6CD000
Size:	16384

Details

Name:	00000013.00000000.511633116.00007DF55D402000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55D402000
Size:	4096

Details

Name:	00000005.00000003.447068631.00000000034AA000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	34AA000
Size:	4096

Details

Name:	00000005.00000002.447930638.000000007F060000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F060000
Size:	12288

Details

Name:	00000000.00000002.767023363.00000000028A0000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	28A0000
Size:	4096

Details

Name:	00000007.00000002.764209131.00000262D4190000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	262D4190000
Size:	16384

Details

Name:	00000002.00000003.417804153.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	00000009.00000002.765568257.000002882BF13000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2882BF13000
Size:	4096

Details

Name:	00000003.00000003.738200606.000000000591A000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	591A000
Size:	4096

Details

Name:	0000001E.00000002.766860171.00007FF5BF5E6000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BF5E6000
Size:	12288

Details

Name:	00000007.00000002.764937382.00000262D4302000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	262D4302000
Size:	49152

Details

Name:	00000000.00000003.651899717.0000000001020000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1020000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000A.00000002.765403202.0000022798060000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	22798060000
Size:	12288

Details

Name:	00000004.00000002.434783061.00000000031E0000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	31E0000
Size:	20480

Details

Name:	0000000A.00000002.764262032.0000022797920000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	22797920000
Size:	102400

Details

Name:	00000000.00000001.239889761.000000006F070000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	6F070000
Size:	4096

Details

Name:	00000000.00000003.415495452.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000005.00000002.447773214.0000000004E8F000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4E8F000
Size:	4096

Details

Name:	00000022.00000003.698898748.00000256C85A1000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C85A1000
Size:	45056

Details

Name:	00000002.00000003.422705301.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	0000001E.00000002.767098181.00007FF5BF60E000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BF60E000
Size:	16384

Details

Name:	0000000A.00000002.766142339.00007FF593234000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF593234000
Size:	4096

Details

Name:	00000003.00000002.765002126.0000000002F5C000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2F5C000
Size:	16384

Details

Name:	00000018.00000002.562910442.0000010A85000000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	10A85000000
Size:	4096

Details

Name:	0000000F.00000002.446954509.00000211BD160000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	211BD160000
Size:	102400

Details

Name:	00000005.00000003.423359061.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	00000007.00000002.765902127.00007FF5D8CC7000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D8CC7000
Size:	4096

Details

Name:	00000013.00000002.527894694.00007FF547663000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547663000
Size:	8192

Details

Name:	00000006.00000002.627764784.00007FF56C9E9000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C9E9000
Size:	20480

Details

Name:	0000000A.00000002.764403929.0000022797950000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	22797950000
Size:	4096

Details

Name:	00000022.00000003.708218258.00000256C8598000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8598000
Size:	4096

Details

Name:	00000003.00000002.764789063.0000000002CA5000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CA5000
Size:	24576

Details

Name:	00000003.00000003.428686280.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000013.00000002.527376200.000000A83C67E000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A83C67E000
Size:	8192

Details

Name:	00000009.00000002.764111320.000000DBEDD7C000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DBEDD7C000
Size:	16384

Details

Name:	0000000F.00000002.447287736.00007FF4F3703000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F3703000
Size:	16384

Details

Name:	00000000.00000002.767193418.0000000002EEE000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2EEE000
Size:	8192

Details

Name:	00000005.00000003.402383966.00000000034A1000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	34A1000
Size:	4096

Details

Name:	00000006.00000002.627540724.00007FF56C7A1000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C7A1000
Size:	4096

Details

Name:	00000009.00000002.767062608.00007FF5C8404000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C8404000
Size:	4096

Details

Name:	00000000.00000003.427068659.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000000.00000003.445128245.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000009.00000002.766795714.00007FF5C8208000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C8208000
Size:	4096

Details

Name:	00000022.00000002.732620213.00007FF541694000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541694000
Size:	4096

Details

Name:	00000022.00000003.698935955.00000256C8595000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8595000
Size:	49152

Details

Name:	00000006.00000002.627782406.00007FF56C9FA000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C9FA000
Size:	16384

Details

Name:	00000025.00000002.747070484.00007FF5CC5E7000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC5E7000
Size:	4096

Details

Name:	00000023.00000002.708985233.000000E24467F000.00000004.00000010.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	E24467F000
Size:	4096

Details

Name:	00000007.00000002.764816084.00000262D427B000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	262D427B000
Size:	12288

Details

Name:	00000006.00000002.627495689.00007FF56C653000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C653000
Size:	8192

Details

Name:	00000003.00000000.241172233.000000007FCB2000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FCB2000
Size:	4096

Details

Name:	0000000D.00000002.765442442.00007DF5EB540000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EB540000
Size:	12288

Details

Name:	00000004.00000003.421115816.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000005.00000002.447761545.0000000004E0E000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4E0E000
Size:	8192

Details

Name:	00000002.00000002.427867767.000000000414E000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	414E000
Size:	8192

Details

Name:	0000000B.00000000.411684743.00007DF51A882000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51A882000
Size:	4096

Details

Name:	00000013.00000002.527745846.000002442F780000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2442F780000
Size:	4096

Details

Name:	00000004.00000002.435482704.000000000680E000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	680E000
Size:	8192

Details

Name:	00000009.00000002.764468201.000002882BCF0000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2882BCF0000
Size:	4096

Details

Name:	00000006.00000002.627687312.00007FF56C992000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C992000
Size:	16384

Details

Name:	00000003.00000002.767933334.000000000537B000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	537B000
Size:	20480

Details

Name:	00000023.00000003.708447333.000001FA6174B000.00000004.00000001.sdmp
TargetID:	35
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FA6174B000
Size:	20480

Details

Name:	00000004.00000002.435568047.0000000006854000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	6854000
Size:	4096

Details

Name:	00000000.00000003.408283287.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000022.00000003.712113334.00000256C85A7000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C85A7000
Size:	65536

Details

Name:	00000013.00000002.527916000.00007FF54789D000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54789D000
Size:	16384

Details

Name:	00000003.00000002.765587122.00000000033A0000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	33A0000
Size:	4096

Details

Name:	00000000.00000002.767144725.0000000002C98000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2C98000
Size:	4096

Details

Name:	00000004.00000000.250115997.0000000002E10000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E10000
Size:	102400

Details

Name:	0000000B.00000003.433908532.000001B344A58000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B344A58000
Size:	4096

Details

Name:	00000022.00000002.732674808.00007FF541800000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541800000
Size:	8192

Details

Name:	00000009.00000002.766653735.00007FF5C81EE000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C81EE000
Size:	4096

Details

Name:	00000003.00000003.415074602.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000006.00000002.627704849.00007FF56C9A7000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C9A7000
Size:	4096

Details

Name:	00000022.00000003.713065514.00000256C8592000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8592000
Size:	4096

Details

Name:	00000005.00000003.423966063.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	00000003.00000003.431072059.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000013.00000002.527948193.00007FF547913000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547913000
Size:	4096

Details

Name:	00000004.00000000.250132174.000000007FA10000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FA10000
Size:	4096

Details

Name:	00000000.00000002.767732750.000000006EE5E000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6EE5E000
Size:	385024

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000006.00000002.627671034.00007FF56C984000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C984000
Size:	4096

Details

Name:	00000005.00000001.261917410.000000006EDE0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	6EDE0000
Size:	4096

Details

Name:	00000000.00000002.764608376.0000000000D60000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	D60000
Size:	24576

Details

Name:	00000005.00000002.447483507.0000000002EE0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2EE0000
Size:	102400

Details

Name:	00000005.00000002.447578142.0000000003320000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3320000
Size:	4096

Details

Name:	00000003.00000003.425651293.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	0000000F.00000002.447357181.00007FF4F3D5E000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F3D5E000
Size:	12288

Details

Name:	00000000.00000003.472007195.00000000032A9000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	32A9000
Size:	45056

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.472050721.000000000332A000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	332A000
Size:	4096

Details

Name:	0000000F.00000000.435025209.00007FF4F3F8F000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F3F8F000
Size:	20480

Details

Name:	00000003.00000003.424900932.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000004.00000002.434730471.0000000003060000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3060000
Size:	4096

Details

Name:	00000025.00000002.746983949.00007FF5CC4BE000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC4BE000
Size:	12288

Details

Name:	00000022.00000002.732094333.00000256C7D08000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	256C7D08000
Size:	28672

Details

Name:	00000006.00000002.627223193.000001E69D086000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D086000
Size:	110592

Details

Name:	00000022.00000002.732823184.00007FF541903000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541903000
Size:	4096

Details

Name:	00000003.00000002.768123122.0000000005D5D000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5D5D000
Size:	12288

Details

Name:	0000000F.00000002.446925413.000000595BEF7000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	595BEF7000
Size:	36864

Details

Name:	0000001E.00000002.764468979.0000021DF8000000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	21DF8000000
Size:	4096

Details

Name:	00000005.00000003.424531203.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	00000000.00000003.417274417.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000002.00000003.420956763.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	0000000F.00000002.447222635.00007DF509880000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF509880000
Size:	4096

Details

Name:	00000004.00000003.425653400.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000003.00000003.422703503.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000005.00000002.447881728.0000000006B50000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	6B50000
Size:	8192

Details

Name:	00000025.00000002.747380417.00007FF5CC6D4000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC6D4000
Size:	4096

Details

Name:	00000009.00000002.767029377.00007FF5C83AE000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C83AE000
Size:	8192

Details

Name:	0000001D.00000002.766043682.00007FF518FAF000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF518FAF000
Size:	8192

Details

Name:	00000005.00000002.447532519.0000000002FE0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2FE0000
Size:	4096

Details

Name:	00000002.00000002.427547084.0000000002590000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2590000
Size:	12288

Details

Name:	00000003.00000002.765932971.00000000033D0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	33D0000
Size:	733184

Details

Name:	0000001E.00000002.766357562.00007FF5BF52C000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BF52C000
Size:	12288

Details

Name:	00000004.00000002.434688525.0000000002EC0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2EC0000
Size:	4096

Details

Name:	00000022.00000003.710926020.00000256C8592000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8592000
Size:	4096

Details

Name:	00000022.00000003.713269469.00000256C8592000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8592000
Size:	4096

Details

Name:	00000005.00000003.410266684.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	0000000F.00000002.447021098.00000211BD1E0000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	211BD1E0000
Size:	4096

Details

Name:	00000013.00000002.527715989.000002442F400000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2442F400000
Size:	4096

Details

Name:	00000003.00000002.765353342.0000000003330000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3330000
Size:	4096

Details

Name:	00000022.00000002.732661306.00007FF5417ED000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5417ED000
Size:	8192

Details

Name:	00000022.00000002.732854787.00007FF54199D000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54199D000
Size:	8192

Details

Name:	00000007.00000002.766401636.00007FF5D8D75000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D8D75000
Size:	12288

Details

Name:	00000006.00000002.627322851.00007DF480270000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF480270000
Size:	20480

Details

Name:	0000000B.00000002.434095480.000000A958EFE000.00000004.00000010.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A958EFE000
Size:	8192

Details

Name:	00000004.00000002.434556902.0000000002954000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2954000
Size:	4096

Details

Name:	00000000.00000003.423332124.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000022.00000003.712032208.00000256C85B7000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C85B7000
Size:	65536

Details

Name:	00000025.00000000.733843359.000001BBF38A0000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1BBF38A0000
Size:	102400

Details

Name:	00000009.00000002.765688525.000002882C390000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2882C390000
Size:	16384

Details

Name:	0000000B.00000002.434617889.00007DF51A880000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51A880000
Size:	4096

Details

Name:	00000003.00000003.411168017.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000003.00000003.408154225.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000009.00000002.764663863.000002882BE13000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2882BE13000
Size:	86016

Details

Name:	00000000.00000003.651982903.000000000332B000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	332B000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000023.00000002.709048557.000001FA61630000.00000004.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1FA61630000
Size:	4096

Details

Name:	0000000D.00000002.764075620.000000623F7FC000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	623F7FC000
Size:	16384

Details

Name:	00000023.00000002.709691957.00007FF58CA7A000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58CA7A000
Size:	4096

Details

Name:	0000000F.00000002.447135279.00000211BD26F000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	211BD26F000
Size:	65536

Details

Name:	00000005.00000003.427070768.0000000003360000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3360000
Size:	4096

Details

Name:	00000002.00000003.427129940.0000000002A29000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2A29000
Size:	28672

Details

Name:	00000003.00000002.763929085.0000000002BA0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BA0000
Size:	8192

Details

Name:	00000004.00000003.433980650.0000000004FA8000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4FA8000
Size:	4096

Details

Name:	0000000D.00000000.414980135.00007DF5EB540000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EB540000
Size:	12288

Details

Name:	00000022.00000002.732641292.00007FF5417A3000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5417A3000
Size:	4096

Details

Name:	0000000D.00000002.766216170.00007FF5D5BE8000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D5BE8000
Size:	12288

Details

Name:	00000003.00000002.768204967.000000006EDE3000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6EDE3000
Size:	4096

Details

Name:	00000002.00000002.427748024.000000000297F000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	297F000
Size:	4096

Details

Name:	0000000F.00000002.447200307.00000211BD850000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	211BD850000
Size:	4096

Details

Name:	0000000A.00000002.765633273.00007DF5A8C70000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A8C70000
Size:	12288

Details

Name:	00000004.00000003.422588664.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000003.00000003.431934367.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000005.00000002.447612691.00000000033D7000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	33D7000
Size:	4096

Details

Name:	00000022.00000003.706015744.00000256C8597000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8597000
Size:	32768

Details

Name:	00000022.00000002.733313691.00007FF541AEF000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541AEF000
Size:	20480

Details

Name:	0000001D.00000002.765713705.00007FF518EE5000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF518EE5000
Size:	4096

Details

Name:	00000004.00000003.409633871.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	0000000D.00000002.766637988.00007FF5D5C14000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D5C14000
Size:	4096

Details

Name:	00000022.00000003.713203652.00000256C858F000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C858F000
Size:	8192

Details

Name:	0000001E.00000002.765088227.0000021DF84C0000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	21DF84C0000
Size:	4096

Details

Name:	00000003.00000003.738252323.00000000035F9000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35F9000
Size:	4096

Details

Name:	00000004.00000003.432535685.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	0000000D.00000002.765137008.000001E3C2F90000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E3C2F90000
Size:	16384

Details

Name:	0000000B.00000002.434518136.000001B344A84000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B344A84000
Size:	32768

Details

Name:	0000000B.00000002.434625477.00007DF51A882000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51A882000
Size:	4096

Details

Name:	00000002.00000002.427427535.000000000246D000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	246D000
Size:	8192

Details

Name:	00000003.00000003.552299363.0000000003573000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3573000
Size:	8192

Details

Name:	00000000.00000001.266355172.000000006EDE0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	6EDE0000
Size:	4096

Details

Name:	00000002.00000002.427331138.0000000000600000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	600000
Size:	4096

Details

Name:	00000006.00000002.627287478.000001E69D0EF000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D0EF000
Size:	20480

Details

Name:	00000006.00000003.623423050.000001E69D3E0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D3E0000
Size:	4096

Details

Name:	0000001D.00000002.764973351.0000020EAE415000.00000004.00000001.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20EAE415000
Size:	4096

Details

Name:	00000005.00000002.447597925.00000000033A0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	33A0000
Size:	4096

Details

Name:	00000022.00000002.731799862.00000256C7C3C000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	256C7C3C000
Size:	102400

Details

Name:	00000005.00000003.415455741.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	00000004.00000002.434723472.0000000003050000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3050000
Size:	12288

Details

Name:	00000004.00000003.401456284.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	0000001D.00000002.766003569.00007FF518FA8000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF518FA8000
Size:	12288

Details

Name:	00000025.00000002.747202771.00007FF5CC63A000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC63A000
Size:	16384

Details

Name:	00000023.00000002.709979187.00007FF58CD2D000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58CD2D000
Size:	16384

Details

Name:	00000005.00000003.421052228.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	00000000.00000003.444193941.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000025.00000000.733948905.00007DF5E2000000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E2000000
Size:	12288

Details

Name:	00000002.00000002.427807508.0000000002A2C000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A2C000
Size:	16384

Details

Name:	00000000.00000003.438296794.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000005.00000002.447795998.00000000053AE000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	53AE000
Size:	8192

Details

Name:	00000025.00000002.746296491.000001BBF39D0000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1BBF39D0000
Size:	16384

Details

Name:	00000023.00000000.696938878.00007DF5A2650000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A2650000
Size:	4096

Details

Name:	0000000A.00000002.764430744.0000022797970000.00000004.00000020.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	22797970000
Size:	8192

Details

Name:	00000022.00000003.712997516.00000256C8569000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8569000
Size:	98304

Details

Name:	00000005.00000002.447709504.0000000003570000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3570000
Size:	36864

Details

Name:	00000018.00000002.563452124.00007FF502C6F000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF502C6F000
Size:	20480

Details

Name:	0000001E.00000002.766968430.00007FF5BF5F0000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BF5F0000
Size:	36864

Details

Name:	00000004.00000002.434340384.00000000028C6000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28C6000
Size:	4096

Details

Name:	0000001D.00000002.764936585.0000020EAE400000.00000004.00000001.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20EAE400000
Size:	4096

Details

Name:	00000018.00000002.563234731.00007DF4165E0000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4165E0000
Size:	20480

Details

Name:	00000018.00000000.551069867.0000010A84DC0000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	10A84DC0000
Size:	102400

Details

Name:	00000004.00000003.410133905.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000003.00000002.764000186.0000000002BB6000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BB6000
Size:	4096

Details

Name:	00000004.00000003.397312029.00000000032B8000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	32B8000
Size:	90112

Details

Name:	00000004.00000002.434500733.0000000002925000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2925000
Size:	8192

Details

Name:	00000005.00000003.413044010.00000000033B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	4096

Details

Name:	00000022.00000003.713673335.00000256C8595000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8595000
Size:	32768

Details

Name:	00000003.00000003.421251792.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000018.00000002.563484013.00007FF502C94000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF502C94000
Size:	16384

Details

Name:	00000004.00000003.397320688.00000000032B2000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	32B2000
Size:	8192

Details

Name:	0000000F.00000002.447078308.00000211BD229000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	211BD229000
Size:	73728

Details

Name:	0000000F.00000002.447492019.00007FF4F3EBD000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F3EBD000
Size:	28672

Details

Name:	00000003.00000002.764701309.0000000002C4D000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C4D000
Size:	73728

Details

Name:	00000018.00000002.562920797.0000010A85002000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	10A85002000
Size:	65536

Details

Name:	0000000F.00000002.447164886.00000211BD308000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	211BD308000
Size:	24576

Details

Name:	00000009.00000002.766246272.00007DF5DDE20000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5DDE20000
Size:	4096

Details

Name:	00000025.00000002.746536066.000001BBF3A74000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBF3A74000
Size:	12288

Details

Name:	00000022.00000002.731625318.000000856F5FF000.00000004.00000010.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	856F5FF000
Size:	4096

Details

Name:	00000025.00000002.746248705.000001BBF38C0000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1BBF38C0000
Size:	12288

Details

Name:	00000022.00000002.731481040.000000856F0FB000.00000004.00000010.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	856F0FB000
Size:	20480

Details

Name:	00000000.00000003.428616939.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000003.00000003.552415091.00000000035A5000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35A5000
Size:	294912

Details

Name:	00000003.00000003.425850630.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	0000000A.00000002.766892176.00007FF59334B000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59334B000
Size:	8192

Details

Name:	0000000D.00000002.765605226.00007FF5D58E6000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D58E6000
Size:	8192

Details

Name:	00000004.00000003.423852236.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000004.00000000.250151731.000000007FA22000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FA22000
Size:	4096

Details

Name:	00000018.00000002.562720819.00000003BC3FB000.00000004.00000010.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3BC3FB000
Size:	20480

Details

Name:	00000013.00000002.527460553.000002442F040000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2442F040000
Size:	102400

Details

Name:	00000007.00000002.766490060.00007FF5D8DC8000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D8DC8000
Size:	12288

Details

Name:	00000018.00000002.563605411.00007FF502D59000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF502D59000
Size:	20480

Details

Name:	00000022.00000003.717773240.00000256C8594000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8594000
Size:	57344

Details

Name:	00000006.00000002.627107330.000001E698200000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E698200000
Size:	4096

Details

Name:	00000002.00000002.428149995.00000000061A0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	61A0000
Size:	4096

Details

Name:	00000000.00000003.469834301.0000000000D30000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D30000
Size:	4096

Details

Name:	00000002.00000002.427649473.00000000025ED000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25ED000
Size:	8192

Details

Name:	00000022.00000003.702718530.00000256C856D000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C856D000
Size:	4096

Details

Name:	0000000F.00000000.434957608.00007DF509890000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF509890000
Size:	4096

Details

Name:	00000022.00000002.732114511.00000256C7D16000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	256C7D16000
Size:	4096

Details

Name:	00000003.00000002.768181762.000000006EDE0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6EDE0000
Size:	4096

Details

Name:	00000003.00000002.763733476.0000000002A82000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A82000
Size:	20480

Details

Name:	00000006.00000002.627012629.000001E697AA0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E697AA0000
Size:	45056

Details

Name:	00000023.00000002.709278589.000001FA6174F000.00000004.00000001.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FA6174F000
Size:	4096

Details

Name:	00000006.00000002.626983093.000001E697A7C000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E697A7C000
Size:	4096

Details

Name:	00000022.00000003.713240851.00000256C858F000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C858F000
Size:	8192

Details

Name:	00000009.00000000.408288820.00007DF5DDE40000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5DDE40000
Size:	12288

Details

Name:	00000005.00000002.447232979.0000000002A9D000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A9D000
Size:	8192

Details

Name:	00000003.00000003.422496298.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000025.00000002.746804614.00007DF5E1FE2000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E1FE2000
Size:	4096

Details

Name:	00000003.00000003.599346260.0000000005521000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5521000
Size:	462848

Details

Name:	00000009.00000002.765753385.000002882C4B0000.00000008.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page write copy
Base address:	2882C4B0000
Size:	266240

Details

Name:	00000000.00000002.767828578.000000006EEDC000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6EEDC000
Size:	32768

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000022.00000003.708117796.00000256C857F000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C857F000
Size:	12288

Details

Name:	00000022.00000002.731997456.00000256C7CCC000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	256C7CCC000
Size:	45056

Details

Name:	00000004.00000002.434982164.0000000006710000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6710000
Size:	733184

Details

Name:	00000005.00000003.402380436.000000000349E000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	349E000
Size:	8192

Details

Name:	00000025.00000002.746108876.0000009B7847E000.00000004.00000010.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	9B7847E000
Size:	8192

Details

Name:	00000005.00000003.402338578.00000000034A2000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	34A2000
Size:	8192

Details

Name:	00000004.00000002.434526710.0000000002935000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2935000
Size:	12288

Details

Name:	00000000.00000002.767532638.000000006EDE0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6EDE0000
Size:	4096

Details

Name:	00000013.00000000.511622031.00007DF55D3F2000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55D3F2000
Size:	4096

Details

Name:	00000006.00000000.260045039.00007FF56CAAF000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56CAAF000
Size:	20480

Details

Name:	00000003.00000003.692058986.00000000035EE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35EE000
Size:	4096

Details

Name:	00000004.00000002.434587476.00000000029B1000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29B1000
Size:	8192

Details

Name:	00000022.00000002.733217298.00007FF541ACD000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541ACD000
Size:	16384

Details

Name:	00000009.00000002.764531588.000002882BDF0000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2882BDF0000
Size:	16384

Details

Name:	00000022.00000003.713247552.00000256C8592000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8592000
Size:	4096

Details

Name:	00000022.00000002.732648149.00007FF5417E1000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5417E1000
Size:	4096

Details

Name:	0000001E.00000002.765539497.0000021DF8F20000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	21DF8F20000
Size:	4096

Details

Name:	0000000F.00000002.447537068.00007FF4F3EDA000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F3EDA000
Size:	16384

Details

Name:	00000006.00000003.290614393.000001E698359000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E698359000
Size:	4096

Details

Name:	00000022.00000002.732797855.00007FF5418BE000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5418BE000
Size:	12288

Details

Name:	00000003.00000002.768403618.000000006EEBC000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6EEBC000
Size:	4096

Details

Name:	00000022.00000003.713220347.00000256C8594000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8594000
Size:	8192

Details

Name:	00000003.00000003.738175466.00000000035FD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35FD000
Size:	8192

Details

Name:	00000005.00000000.259512713.000000007F050000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F050000
Size:	4096

Details

Name:	00000003.00000003.735821382.0000000003580000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3580000
Size:	16384

Details

Name:	00000022.00000003.708156016.00000256C8586000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8586000
Size:	57344

Details

Name:	00000003.00000002.764644434.0000000002C2D000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C2D000
Size:	8192

Details

Name:	00000002.00000002.427342185.0000000000617000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	617000
Size:	4096

Details

Name:	0000000B.00000003.412119547.000001B344A31000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B344A31000
Size:	45056

Details

Name:	00000018.00000003.562374794.0000010A8504C000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10A8504C000
Size:	4096

Details

Name:	00000002.00000003.421058000.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	00000022.00000003.713086110.00000256C8592000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8592000
Size:	4096

Details

Name:	0000000D.00000002.763814146.000000623F27E000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	623F27E000
Size:	8192

Details

Name:	00000004.00000003.417814138.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000002.00000002.428174939.000000007FB30000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FB30000
Size:	20480

Details

Name:	00000018.00000003.562387011.0000010A8504B000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10A8504B000
Size:	4096

Details

Name:	00000022.00000002.732688467.00007FF541811000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541811000
Size:	4096

Details

Name:	00000003.00000003.599488354.00000000035EE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35EE000
Size:	4096

Details

Name:	00000023.00000002.710037575.00007FF58CD4F000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58CD4F000
Size:	20480

Details

Name:	00000006.00000003.261965129.000001E69D221000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D221000
Size:	4096

Details

Name:	00000022.00000003.731094597.00000256C7C61000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C7C61000
Size:	172032

Details

Name:	00000003.00000003.412976616.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000000.00000002.767500058.0000000003E9D000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3E9D000
Size:	12288

Details

Name:	00000004.00000003.403967450.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	0000000D.00000002.765190070.000001E3C30A0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E3C30A0000
Size:	4096

Details

Name:	00000018.00000002.562967432.0000010A85029000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	10A85029000
Size:	73728

Details

Name:	00000018.00000002.563076787.0000010A85070000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	10A85070000
Size:	61440

Details

Name:	0000000F.00000002.447236003.00007DF509890000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF509890000
Size:	4096

Details

Name:	00000025.00000002.746331416.000001BBF3A00000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBF3A00000
Size:	73728

Details

Name:	00000004.00000002.434484934.000000000291B000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	291B000
Size:	8192

Details

Name:	00000000.00000003.740165762.0000000001020000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1020000
Size:	8192

Details

Name:	00000002.00000003.415073826.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	00000018.00000002.562780555.0000010A84DA0000.00000004.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	10A84DA0000
Size:	4096

Details

Name:	00000005.00000003.426380070.0000000003360000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3360000
Size:	4096

Details

Name:	00000007.00000000.279980716.00007DF5EE710000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EE710000
Size:	4096

Details

Name:	00000003.00000003.462251614.0000000005C80000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C80000
Size:	4096

Details

Name:	00000005.00000002.447249696.0000000002AC4000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AC4000
Size:	8192

Details

Name:	0000000F.00000002.447026684.00000211BD200000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	211BD200000
Size:	73728

Details

Name:	00000000.00000003.428196439.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000022.00000003.707613244.00000256C859F000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C859F000
Size:	147456

Details

Name:	00000002.00000002.427610124.00000000025C9000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25C9000
Size:	8192

Details

Name:	00000022.00000003.719021431.00000256C8596000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8596000
Size:	28672

Signature Hits	Behavior Group	Mitre Attack
Found detection on Joe Sandbox Cloud Basic with higher score	System Summary

Details

Name:	00000005.00000002.447517640.0000000002F80000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2F80000
Size:	16384

Details

Name:	00000003.00000002.763950324.0000000002BAD000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BAD000
Size:	24576

Details

Name:	00000009.00000000.408222467.000002882BCC0000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2882BCC0000
Size:	102400

Details

Name:	00000013.00000002.527807074.00007DF55D400000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55D400000
Size:	4096

Details

Name:	00000006.00000003.623939447.000001E69D240000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D240000
Size:	4096

Details

Name:	00000006.00000003.290605994.000001E698318000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E698318000
Size:	4096

Details

Name:	00000022.00000002.731890469.00000256C7C8C000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	256C7C8C000
Size:	94208

Details

Name:	00000003.00000003.599327502.00000000035FB000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35FB000
Size:	12288

Details

Name:	0000001E.00000000.678966645.00007DF5D4F12000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5D4F12000
Size:	4096

Details

Name:	00000003.00000002.763847419.0000000002AE4000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AE4000
Size:	36864

Details

Name:	0000001E.00000000.679112239.00007FF5B32CE000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B32CE000
Size:	8192

Details

Name:	00000013.00000003.527211681.000002442F24A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2442F24A000
Size:	20480

Details

Name:	00000006.00000003.626538600.000001E698304000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E698304000
Size:	16384

Details

Name:	00000003.00000003.412173209.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	0000000F.00000002.447178564.00000211BD4D0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	211BD4D0000
Size:	4096

Details

Name:	00000006.00000002.627311763.000001E69D0FD000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D0FD000
Size:	4096

Details

Name:	00000002.00000003.421922630.0000000000800000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	00000023.00000002.709110280.000001FA61690000.00000004.00000001.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FA61690000
Size:	8192

Details

Name:	00000006.00000003.626603841.000001E69D040000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D040000
Size:	12288

Details

Name:	0000000B.00000002.434705459.00007FF504C3E000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF504C3E000
Size:	4096

Details

Name:	00000023.00000003.708482268.000001FA61736000.00000004.00000001.sdmp
TargetID:	35
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FA61736000
Size:	20480

Details

Name:	00000000.00000003.420464029.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000002.00000002.427395614.0000000000840000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	0000000A.00000002.763931850.000000859767F000.00000004.00000010.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	859767F000
Size:	4096

Details

Name:	00000000.00000003.411526364.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	0000000F.00000002.447052190.00000211BD213000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	211BD213000
Size:	86016

Details

Name:	00000009.00000002.767305277.00007FF5C847A000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5C847A000
Size:	16384

Details

Name:	0000001D.00000002.764995590.00007DF42C7B0000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF42C7B0000
Size:	20480

Details

Name:	00000002.00000002.427764440.00000000029FE000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	29FE000
Size:	8192

Details

Name:	00000023.00000002.709716437.00007FF58CC5D000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58CC5D000
Size:	8192

Details

Name:	00000025.00000002.746661741.000001BBF3B02000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBF3B02000
Size:	12288

Details

Name:	00000004.00000002.434406379.00000000028E1000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28E1000
Size:	4096

Details

Name:	0000001E.00000002.766682524.00007FF5BF563000.00000002.00020000.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BF563000
Size:	12288

Details

Name:	00000025.00000002.747033758.00007FF5CC545000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CC545000
Size:	24576

Details

Name:	00000005.00000002.447403217.0000000002C0D000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C0D000
Size:	8192

Details

Name:	00000025.00000002.746435261.000001BBF3A3C000.00000004.00000001.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBF3A3C000
Size:	57344

Details

Name:	00000002.00000003.392882271.0000000000850000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	850000
Size:	4096

Details

Name:	00000022.00000002.733287095.00007FF541AEB000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541AEB000
Size:	4096

Details

Name:	00000004.00000002.435702468.000000007FA30000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FA30000
Size:	12288

Details

Name:	00000022.00000002.732429466.00000256C8A00000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8A00000
Size:	8192

Details

Name:	00000003.00000003.465199156.000000000591C000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	591C000
Size:	4096

Details

Name:	00000007.00000002.765784312.00007FF5D8BDE000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D8BDE000
Size:	4096

Details

Name:	00000003.00000003.642401622.00000000035F3000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35F3000
Size:	4096

Details

Name:	00000004.00000002.434925220.0000000003580000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3580000
Size:	69632

Details

Name:	00000005.00000003.431071554.0000000003360000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3360000
Size:	4096

Details

Name:	0000000A.00000002.764775956.0000022797A3D000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22797A3D000
Size:	114688

Details

Name:	00000000.00000003.651888750.000000000104E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	104E000
Size:	4096

Details

Name:	00000000.00000002.764822168.0000000000F50000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	F50000
Size:	40960

Details

Name:	00000003.00000002.767486209.000000000358C000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	358C000
Size:	380928

Details

Name:	00000018.00000002.563416672.00007FF502BEE000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF502BEE000
Size:	12288

Details

Name:	00000013.00000002.527440764.000002442F020000.00000004.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2442F020000
Size:	4096

Details

Name:	00000000.00000003.413087784.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000004.00000003.423193907.0000000003080000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3080000
Size:	4096

Details

Name:	00000003.00000003.432101818.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000003.00000003.644041816.00000000035F3000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35F3000
Size:	8192

Details

Name:	00000013.00000002.528076169.00007FF547ABF000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547ABF000
Size:	8192

Details

Name:	0000001D.00000002.766301243.00007FF518FD4000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF518FD4000
Size:	4096

Details

Name:	00000018.00000002.562660387.00000003BBF7E000.00000004.00000010.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3BBF7E000
Size:	8192

Details

Name:	00000003.00000003.508245959.0000000003573000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3573000
Size:	8192

Details

Name:	00000022.00000002.732286665.00000256C851C000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	256C851C000
Size:	200704

Details

Name:	00000006.00000002.627465046.00007FF56C62A000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C62A000
Size:	20480

Details

Name:	00000005.00000002.447888785.0000000006B54000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	6B54000
Size:	4096

Details

Name:	00000009.00000002.766321124.00007DF5DDE32000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5DDE32000
Size:	4096

Details

Name:	00000022.00000002.732862411.00007FF5419A0000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5419A0000
Size:	20480

Details

Name:	00000022.00000002.732013510.00000256C7CDA000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	256C7CDA000
Size:	45056

Details

Name:	00000018.00000002.563114731.0000010A85090000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	10A85090000
Size:	16384

Details

Name:	00000000.00000003.422704406.00000000009D0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D0000
Size:	4096

Details

Name:	00000004.00000003.434084663.00000000032B9000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	32B9000
Size:	4096

Details

Name:	0000000B.00000000.411659166.00007DF51A872000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51A872000
Size:	4096

Details

Name:	0000000B.00000002.434724122.00007FF504E77000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF504E77000
Size:	4096

Details

Name:	00000003.00000003.735772182.0000000003614000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3614000
Size:	4096

Details

Name:	0000000D.00000000.415007292.00007FF5D5C2F000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D5C2F000
Size:	20480

Details

Name:	00000000.00000000.239152880.000000007FCD2000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FCD2000
Size:	4096

Details

Name:	00000006.00000002.627041190.000001E697AFF000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E697AFF000
Size:	8192

Details

Name:	0000001D.00000002.764683427.0000020EAE0D0000.00000002.00020000.sdmp
TargetID:	29
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	20EAE0D0000
Size:	12288

Details

Name:	00000022.00000003.717981494.00000256C8A02000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8A02000
Size:	794624

Details

Name:	00000022.00000003.698952274.00000256C7CC5000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C7CC5000
Size:	24576

Details

Name:	00000003.00000002.768172171.0000000005E94000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5E94000
Size:	4096

Details

Name:	00000022.00000003.721121114.00000256C8568000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8568000
Size:	106496

Details

Name:	00000022.00000003.704320764.00000256C8A21000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8A21000
Size:	118784

Details

Name:	00000018.00000002.563031592.0000010A85054000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	10A85054000
Size:	110592

Details

Name:	0000000B.00000002.434576009.000001B345050000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B345050000
Size:	4096

Details

Name:	00000022.00000003.713132846.00000256C856D000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C856D000
Size:	81920

Details

Name:	00000006.00000002.627638712.00007FF56C95D000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C95D000
Size:	8192

Details

Name:	00000005.00000002.447300368.0000000002BC4000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BC4000
Size:	40960

Details

Name:	0000000B.00000002.434430052.000001B344A4E000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B344A4E000
Size:	32768

Details

Name:	00000006.00000002.627429572.00007FF56C265000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56C265000
Size:	12288

Details

Name:	0000000D.00000002.766277979.00007FF5D5BEF000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D5BEF000
Size:	20480

Details

Name:	00000022.00000003.713091698.00000256C8594000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8594000
Size:	8192

Details

Name:	00000002.00000003.392368940.0000000000840000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	0000001E.00000002.763758169.00000049A6FFC000.00000004.00000001.sdmp
TargetID:	30
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	49A6FFC000
Size:	16384

Details

Name:	00000022.00000003.716210940.00000256C856F000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C856F000
Size:	77824

Details

Name:	00000006.00000002.626766161.000000C7583FB000.00000004.00000010.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	C7583FB000
Size:	20480

Details

Name:	00000004.00000002.434864771.00000000032AD000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	32AD000
Size:	12288

Details

Name:	00000000.00000003.651932685.0000000001017000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1017000
Size:	36864

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000002.00000002.427511568.0000000002571000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2571000
Size:	12288

Details

Name:	0000000D.00000002.766814907.00007FF5D5C2F000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5D5C2F000
Size:	20480

Details

Name:	00000022.00000003.713013253.00000256C8569000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8569000
Size:	98304

Details

Name:	00000022.00000002.732627975.00007FF541774000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541774000
Size:	12288

Details

Name:	00000022.00000003.717717952.00000256C8A02000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C8A02000
Size:	159744

Details

Name:	00000022.00000003.721136939.00000256C856C000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C856C000
Size:	90112

Details

Name:	00000000.00000003.651967074.000000000332C000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	332C000
Size:	40960

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000022.00000003.704233059.00000256C85A9000.00000004.00000001.sdmp
TargetID:	34
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	256C85A9000
Size:	90112

Details

Name:	00000025.00000002.746268150.000001BBF38D0000.00000002.00020000.sdmp
TargetID:	37
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1BBF38D0000
Size:	4096

Details

Name:	00000000.00000002.765295080.0000000000F94000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	F94000
Size:	73728

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery
URLs found in memory or binary data	Networking

Details

Name:	00000023.00000002.709908375.00007FF58CD0F000.00000002.00020000.sdmp
TargetID:	35
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58CD0F000
Size:	8192

Details

Name:	00000003.00000003.599511674.00000000035E9000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	35E9000
Size:	16384

Details

Name:	00000002.00000002.428229171.000000007FC42000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FC42000
Size:	4096

Details

Name:	00000003.00000003.644069329.0000000003614000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3614000
Size:	4096

Details

Name:	00000022.00000002.732732955.00007FF541840000.00000002.00020000.sdmp
TargetID:	34
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541840000
Size:	4096

Details

Name:	00000003.00000003.644089344.000000000591B000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	591B000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.554532495.000000000591B000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	591B000
Size:	4096

Details

Name:	00000003.00000003.738294861.0000000003580000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3580000
Size:	16384

Details

Name:	00000003.00000003.395996555.0000000003380000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000006.00000003.300393005.000001E69D0F7000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E69D0F7000
Size:	20480

Details

Name:	00000000.00000002.764760398.0000000000EF0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	EF0000
Size:	4096

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

IOC Report

Processes

URLs

Domains

IPs

Memdumps