Automated Malware Analysis IOC Report for

Details

Name:	00000003.00000003.911673409.00000000052DE000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	52DE000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.820969868.00000000055D8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55D8000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.820538892.00000000055D8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55D8000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.852440329.000000000328B000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	328B000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.820800198.00000000055D8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55D8000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.807447629.0000000003408000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3408000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.820928397.00000000055D8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55D8000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000004.00000003.768438914.0000000002E20000.00000040.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	2E20000
Size:	86016

Signature Hits	Behavior Group	Mitre Attack
Found malware configuration	AV Detection
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.820871297.00000000055D8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55D8000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.807370986.0000000003408000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3408000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000003.774767374.0000000004AE0000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	4AE0000
Size:	86016

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.820843003.00000000055D8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55D8000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.776199037.0000000000DD0000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	DD0000
Size:	86016

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.807394908.0000000003408000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3408000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000003.814551169.0000000004F49000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4F49000
Size:	57344

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.897729971.000000000310E000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	310E000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.866162005.000000000545B000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	545B000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.820951190.00000000055D8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55D8000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000002.1198570838.0000000002D29000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2D29000
Size:	57344

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.820567634.00000000055D8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55D8000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.821204428.00000000055D8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55D8000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.744739160.00000000030B0000.00000040.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	30B0000
Size:	86016

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.807504350.0000000003408000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3408000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.807420908.0000000003408000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3408000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000002.1199520690.00000000055D8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	55D8000
Size:	8192

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.807552406.0000000003408000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3408000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000002.00000003.745694916.0000000003270000.00000040.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page execute and read and write
Base address:	3270000
Size:	86016

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.807483154.0000000003408000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3408000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.807344671.0000000003408000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3408000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000002.1199142133.0000000004EA9000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4EA9000
Size:	57344

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.807495755.0000000003408000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3408000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000002.1198685377.0000000003408000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3408000
Size:	8192

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000013.00000003.955050755.000002D6C01A9000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C01A9000
Size:	32768

Details

Name:	00000003.00000003.784939973.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000000.00000003.807560204.000000000340C000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	340C000
Size:	4096

Details

Name:	00000005.00000000.704714470.000000007FD70000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FD70000
Size:	4096

Details

Name:	00000013.00000003.948840112.000002D6C0186000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0186000
Size:	20480

Details

Name:	00000009.00000002.809956695.00000218D3180000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	218D3180000
Size:	12288

Details

Name:	00000013.00000003.966056283.000002D6BF864000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6BF864000
Size:	4096

Details

Name:	00000003.00000003.911018842.0000000003069000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3069000
Size:	4096

Details

Name:	00000013.00000002.966866235.000002D6BF862000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6BF862000
Size:	8192

Details

Name:	00000003.00000003.1184086013.0000000003031000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3031000
Size:	4096

Details

Name:	00000013.00000003.950556952.000002D6C018A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C018A000
Size:	61440

Details

Name:	00000010.00000002.922571701.00007FF5A30CF000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A30CF000
Size:	8192

Details

Name:	00000004.00000002.808176958.000000007FE50000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FE50000
Size:	20480

Details

Name:	00000005.00000002.815246374.00000000030B0000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	30B0000
Size:	20480

Details

Name:	00000005.00000002.814945786.00000000029DA000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29DA000
Size:	16384

Details

Name:	00000004.00000002.807863867.0000000002A8A000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A8A000
Size:	24576

Details

Name:	00000002.00000003.802109476.0000000003304000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3304000
Size:	12288

Details

Name:	0000000D.00000002.889832624.00007DF5979B0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5979B0000
Size:	4096

Details

Name:	00000009.00000002.809881547.0000003CA1F7B000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3CA1F7B000
Size:	20480

Details

Name:	00000000.00000002.1197627492.0000000000760000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	760000
Size:	4096

Details

Name:	00000013.00000003.944801533.000002D6C019D000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C019D000
Size:	94208

Details

Name:	00000009.00000002.810072913.00000218D324D000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	218D324D000
Size:	12288

Details

Name:	00000003.00000002.1199623102.0000000005B70000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5B70000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000002.815349479.00000000031C0000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	31C0000
Size:	20480

Details

Name:	00000014.00000002.951575619.00007DF515620000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF515620000
Size:	12288

Details

Name:	00000010.00000002.921974168.000001FE9CF00000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE9CF00000
Size:	4096

Details

Name:	00000013.00000002.966383210.000000F42BAF7000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F42BAF7000
Size:	36864

Details

Name:	0000000D.00000000.874658349.00007DF5979A2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5979A2000
Size:	4096

Details

Name:	00000000.00000002.1199318435.000000007F692000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F692000
Size:	4096

Details

Name:	00000003.00000003.957960150.000000000304A000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	304A000
Size:	131072

Details

Name:	00000003.00000003.1093405558.00000000055DB000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55DB000
Size:	4096

Details

Name:	00000000.00000003.1077373447.0000000000EFE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	EFE000
Size:	4096

Details

Name:	00000002.00000003.783866399.0000000004B60000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	4B60000
Size:	4096

Details

Name:	00000009.00000002.810014448.00000218D3213000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	218D3213000
Size:	90112

Details

Name:	00000010.00000002.922046934.000001FE9D602000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE9D602000
Size:	4096

Details

Name:	00000004.00000002.807727280.0000000002509000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2509000
Size:	40960

Details

Name:	00000009.00000002.809966088.00000218D3190000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	218D3190000
Size:	4096

Details

Name:	00000013.00000002.968009556.00007FF4F8770000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F8770000
Size:	8192

Details

Name:	00000003.00000003.772547392.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000003.00000003.1182461614.000000000304D000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	304D000
Size:	32768

Details

Name:	00000009.00000000.798542730.00007DF5E3270000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E3270000
Size:	12288

Details

Name:	00000004.00000002.808196165.000000007FF62000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF62000
Size:	4096

Details

Name:	00000013.00000002.968797338.00007FF4F89DE000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F89DE000
Size:	16384

Details

Name:	00000005.00000002.815399578.0000000003620000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3620000
Size:	4096

Details

Name:	00000004.00000002.807977888.0000000002E30000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E30000
Size:	12288

Details

Name:	00000013.00000003.941277706.000002D6C015E000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C015E000
Size:	4096

Details

Name:	00000013.00000002.967298497.000002D6C0002000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0002000
Size:	4096

Details

Name:	00000002.00000003.762901624.0000000004CA0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CA0000
Size:	4096

Details

Name:	00000003.00000003.762266205.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000004.00000002.807683798.00000000024D2000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24D2000
Size:	8192

Details

Name:	00000013.00000003.950739957.000002D6C019B000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C019B000
Size:	212992

Details

Name:	00000013.00000003.947922246.000002D6C01AB000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C01AB000
Size:	65536

Details

Name:	00000002.00000002.802602389.0000000003137000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3137000
Size:	4096

Details

Name:	0000000D.00000002.889737257.0000029B47E00000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29B47E00000
Size:	4096

Details

Name:	00000013.00000003.943934470.000002D6C018F000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C018F000
Size:	32768

Details

Name:	00000000.00000002.1197916716.0000000000DDC000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	DDC000
Size:	4096

Details

Name:	00000003.00000002.1197908432.00000000028AB000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28AB000
Size:	8192

Details

Name:	00000013.00000000.937507474.00007DF50DAF0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50DAF0000
Size:	4096

Details

Name:	00000003.00000002.1198112955.0000000002916000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2916000
Size:	16384

Details

Name:	00000013.00000002.968443882.00007FF4F8923000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F8923000
Size:	4096

Details

Name:	00000013.00000002.967056266.000002D6BF902000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6BF902000
Size:	16384

Details

Name:	00000003.00000003.1001423314.0000000003040000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3040000
Size:	4096

Details

Name:	00000009.00000002.810117959.00000218D327D000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	218D327D000
Size:	8192

Details

Name:	00000010.00000002.922434489.00007FF5A3087000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A3087000
Size:	49152

Details

Name:	0000000D.00000002.889379846.000000FFE547E000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	FFE547E000
Size:	8192

Details

Name:	00000005.00000002.815280870.00000000030CA000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	30CA000
Size:	106496

Details

Name:	00000013.00000003.944778818.000002D6C018C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C018C000
Size:	61440

Details

Name:	00000013.00000003.954152268.000002D6C0194000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0194000
Size:	4096

Details

Name:	00000009.00000002.810602797.00007FF5CE124000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CE124000
Size:	4096

Details

Name:	00000004.00000003.785074460.0000000004740000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4740000
Size:	4096

Details

Name:	00000013.00000003.947031648.000002D6C0157000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0157000
Size:	32768

Details

Name:	0000000D.00000002.890013868.00007FF582711000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF582711000
Size:	4096

Details

Name:	00000003.00000003.761629200.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000009.00000002.810503260.00007FF5CE0CC000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CE0CC000
Size:	8192

Details

Name:	00000009.00000002.810185315.00000218D34D0000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	218D34D0000
Size:	4096

Details

Name:	00000003.00000003.911470055.000000000303D000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	303D000
Size:	4096

Details

Name:	00000003.00000002.1197752381.00000000027CE000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27CE000
Size:	8192

Details

Name:	00000010.00000002.921816628.000001FE9CC40000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FE9CC40000
Size:	4096

Details

Name:	00000013.00000002.967289086.000002D6BFF30000.00000004.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2D6BFF30000
Size:	8192

Details

Name:	00000003.00000003.1182596854.0000000003037000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3037000
Size:	40960

Details

Name:	00000013.00000002.966883960.000002D6BF86A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6BF86A000
Size:	12288

Details

Name:	00000003.00000003.1137306227.0000000002FD4000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FD4000
Size:	380928

Details

Name:	00000003.00000003.784505814.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000003.00000002.1200505132.000000007FAB2000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FAB2000
Size:	4096

Details

Name:	00000004.00000003.779963808.0000000004730000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4730000
Size:	4096

Details

Name:	00000003.00000002.1198779496.00000000032BD000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	32BD000
Size:	12288

Details

Name:	00000005.00000002.815013981.0000000002A45000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A45000
Size:	32768

Details

Name:	00000009.00000000.798502034.00000218D3160000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	218D3160000
Size:	102400

Details

Name:	00000005.00000002.815213581.0000000002F24000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2F24000
Size:	4096

Details

Name:	00000005.00000002.815437814.0000000004B70000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	4B70000
Size:	12288

Details

Name:	00000003.00000002.1199542257.00000000059AE000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	59AE000
Size:	8192

Details

Name:	00000009.00000000.798529570.00007DF5E3252000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E3252000
Size:	4096

Details

Name:	00000013.00000002.967874931.00007FF4F84D2000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F84D2000
Size:	4096

Details

Name:	00000013.00000002.968069229.00007FF4F87A6000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F87A6000
Size:	4096

Details

Name:	00000013.00000002.967426782.000002D6C0161000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0161000
Size:	61440

Details

Name:	00000013.00000003.944141456.000002D6C018C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C018C000
Size:	4096

Details

Name:	00000010.00000002.922019412.000001FE9D200000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FE9D200000
Size:	12288

Details

Name:	00000003.00000002.1197869148.000000000289C000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	289C000
Size:	16384

Details

Name:	00000004.00000002.807639902.00000000023C8000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	23C8000
Size:	12288

Details

Name:	00000010.00000002.921991973.000001FE9CF08000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE9CF08000
Size:	24576

Details

Name:	00000003.00000003.821060906.0000000003031000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3031000
Size:	24576

Details

Name:	00000009.00000002.809919054.00000218D3140000.00000004.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	218D3140000
Size:	4096

Details

Name:	00000013.00000003.946430138.000002D6C015F000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C015F000
Size:	4096

Details

Name:	00000013.00000003.966032323.000002D6BF868000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6BF868000
Size:	20480

Details

Name:	00000003.00000002.1198198231.0000000002982000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2982000
Size:	12288

Details

Name:	00000002.00000002.802463877.0000000002AF5000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AF5000
Size:	4096

Details

Name:	00000005.00000002.815421756.0000000004B0D000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4B0D000
Size:	12288

Details

Name:	00000013.00000003.945137693.000002D6C0193000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0193000
Size:	8192

Details

Name:	00000000.00000002.1198648541.0000000002FFE000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2FFE000
Size:	8192

Details

Name:	00000013.00000003.945117685.000002D6C018C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C018C000
Size:	8192

Details

Name:	00000002.00000000.678563379.000000007F902000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F902000
Size:	4096

Details

Name:	00000003.00000003.911452461.0000000003031000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3031000
Size:	24576

Details

Name:	00000009.00000002.810085733.00000218D3255000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	218D3255000
Size:	98304

Details

Name:	00000003.00000003.771910710.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000013.00000003.951109509.000002D6C018A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C018A000
Size:	425984

Details

Name:	00000014.00000002.952677774.00007FF500581000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF500581000
Size:	20480

Details

Name:	00000013.00000003.956780988.000002D6C0158000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0158000
Size:	98304

Details

Name:	00000005.00000002.815718071.000000007FD62000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FD62000
Size:	4096

Details

Name:	00000003.00000003.759083505.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000005.00000002.814856454.00000000029A3000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29A3000
Size:	28672

Details

Name:	00000003.00000003.757810983.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000013.00000003.945950600.000002D6C0602000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0602000
Size:	147456

Details

Name:	00000013.00000002.968145829.00007FF4F8813000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F8813000
Size:	24576

Details

Name:	00000005.00000003.774835081.00000000030F9000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30F9000
Size:	86016

Details

Name:	00000000.00000002.1198723678.000000000399F000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	399F000
Size:	4096

Details

Name:	00000002.00000003.760356656.00000000032B0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	32B0000
Size:	4096

Details

Name:	00000003.00000003.864224342.000000000303C000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	303C000
Size:	16384

Details

Name:	00000004.00000003.782747089.0000000004740000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4740000
Size:	4096

Details

Name:	00000014.00000002.951705998.00007FF500495000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF500495000
Size:	12288

Details

Name:	0000000D.00000002.890129667.00007FF582847000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF582847000
Size:	49152

Details

Name:	00000002.00000002.802548115.0000000002E8B000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2E8B000
Size:	4096

Details

Name:	00000013.00000003.954324580.000002D6C0182000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0182000
Size:	12288

Details

Name:	00000003.00000002.1198850432.0000000003320000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3320000
Size:	36864

Details

Name:	00000009.00000002.809846252.0000003CA1CFE000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3CA1CFE000
Size:	8192

Details

Name:	00000013.00000002.966960546.000002D6BF8CC000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6BF8CC000
Size:	24576

Details

Name:	00000000.00000003.897624839.000000000340B000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	340B000
Size:	4096

Details

Name:	00000005.00000002.814761461.000000000286D000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	286D000
Size:	32768

Details

Name:	00000013.00000003.946464874.000002D6C0186000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0186000
Size:	12288

Details

Name:	00000013.00000003.956860453.000002D6C015F000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C015F000
Size:	69632

Details

Name:	00000002.00000002.802785074.0000000006830000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6830000
Size:	733184

Details

Name:	0000000D.00000000.874666409.00007DF5979B0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5979B0000
Size:	4096

Details

Name:	00000003.00000003.760992561.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000003.00000003.1090970869.000000000303A000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	303A000
Size:	16384

Details

Name:	00000003.00000000.678972652.0000000002993000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2993000
Size:	16384

Details

Name:	00000014.00000002.951521654.00007DF4134D0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4134D0000
Size:	20480

Details

Name:	00000010.00000002.922327774.00007FF5A305C000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A305C000
Size:	8192

Details

Name:	00000004.00000002.807988218.0000000002E44000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2E44000
Size:	4096

Details

Name:	00000010.00000002.922604235.00007FF5A30E6000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A30E6000
Size:	8192

Details

Name:	00000014.00000002.951183433.0000023B95940000.00000004.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	23B95940000
Size:	4096

Details

Name:	00000009.00000002.809928181.00000218D3150000.00000004.00000040.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	218D3150000
Size:	4096

Details

Name:	00000003.00000002.1200380762.000000006E490000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6E490000
Size:	4096

Details

Name:	00000003.00000003.1093413733.00000000055DA000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55DA000
Size:	4096

Details

Name:	00000000.00000003.807564934.000000000340B000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	340B000
Size:	4096

Details

Name:	00000013.00000003.940999779.000002D6C0178000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0178000
Size:	45056

Details

Name:	00000004.00000003.781112713.0000000004730000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4730000
Size:	4096

Details

Name:	00000003.00000002.1197917249.00000000028B5000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28B5000
Size:	20480

Details

Name:	00000014.00000002.951429098.0000023B95B5F000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	23B95B5F000
Size:	12288

Details

Name:	00000013.00000003.939644080.000002D6BFF20000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6BFF20000
Size:	4096

Details

Name:	00000004.00000003.770302814.0000000002E30000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E30000
Size:	4096

Details

Name:	00000013.00000002.967446524.000002D6C0172000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0172000
Size:	32768

Details

Name:	00000000.00000002.1198485133.000000000291E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	291E000
Size:	8192

Details

Name:	00000013.00000003.943612586.000002D6C061F000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C061F000
Size:	126976

Details

Name:	00000004.00000002.807631904.00000000023BD000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	23BD000
Size:	32768

Details

Name:	00000003.00000003.911569251.0000000002FD4000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FD4000
Size:	380928

Details

Name:	00000013.00000002.968119536.00007FF4F87C1000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F87C1000
Size:	12288

Details

Name:	00000002.00000000.678559494.000000007F900000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F900000
Size:	4096

Details

Name:	00000013.00000002.968354748.00007FF4F88BD000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F88BD000
Size:	20480

Details

Name:	00000013.00000002.966371138.000000F42B9F8000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F42B9F8000
Size:	32768

Details

Name:	00000013.00000002.967480685.000002D6C0186000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0186000
Size:	28672

Details

Name:	00000004.00000002.807962071.0000000002E10000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2E10000
Size:	20480

Details

Name:	00000009.00000002.810049381.00000218D323C000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	218D323C000
Size:	40960

Details

Name:	00000013.00000002.968570282.00007FF4F8970000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F8970000
Size:	16384

Details

Name:	00000000.00000003.804924894.0000000003000000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3000000
Size:	4096

Details

Name:	0000000D.00000002.889939605.00007FF58207B000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58207B000
Size:	16384

Details

Name:	00000003.00000002.1199692351.000000006E411000.00000020.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	6E411000
Size:	8192

Details

Name:	0000000D.00000002.889515678.0000029B47C00000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	29B47C00000
Size:	73728

Details

Name:	00000013.00000002.967996722.00007FF4F8736000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F8736000
Size:	4096

Details

Name:	00000014.00000003.950428814.0000023B95B51000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	23B95B51000
Size:	53248

Details

Name:	00000005.00000002.815081643.0000000002CE0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CE0000
Size:	102400

Details

Name:	0000000D.00000002.890041845.00007FF582783000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF582783000
Size:	24576

Details

Name:	00000002.00000003.775761928.0000000004CA0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CA0000
Size:	4096

Details

Name:	00000013.00000002.966481471.000000F42C07F000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F42C07F000
Size:	4096

Details

Name:	00000003.00000003.781020293.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000003.00000003.1091005315.0000000002FC6000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FC6000
Size:	24576

Details

Name:	0000000D.00000002.890147247.00007FF58285C000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58285C000
Size:	4096

Details

Name:	00000003.00000003.770638215.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000002.00000002.802616011.0000000003160000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3160000
Size:	4096

Details

Name:	0000000D.00000002.890057921.00007FF58279C000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58279C000
Size:	8192

Details

Name:	00000002.00000002.802896592.00000000069D4000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	69D4000
Size:	4096

Details

Name:	0000000D.00000002.890305982.00007FF5828A6000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5828A6000
Size:	8192

Details

Name:	00000002.00000003.779010982.0000000004CA0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CA0000
Size:	4096

Details

Name:	00000000.00000002.1199359263.000000007F6B0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F6B0000
Size:	12288

Details

Name:	00000003.00000003.954691591.0000000003069000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3069000
Size:	4096

Details

Name:	00000013.00000003.946215762.000002D6C018C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C018C000
Size:	4096

Details

Name:	00000013.00000002.966562149.000002D6BF6B0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D6BF6B0000
Size:	102400

Details

Name:	00000010.00000002.922553700.00007FF5A30C4000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A30C4000
Size:	20480

Details

Name:	00000003.00000002.1198762864.00000000031F0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	31F0000
Size:	4096

Details

Name:	00000000.00000002.1198657694.0000000003010000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3010000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000009.00000002.809973822.00000218D31B0000.00000004.00000020.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	218D31B0000
Size:	8192

Details

Name:	00000005.00000002.815302809.00000000030E7000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	30E7000
Size:	45056

Details

Name:	00000014.00000003.950795998.0000023B95B5F000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	23B95B5F000
Size:	12288

Details

Name:	00000002.00000002.802479196.0000000002B03000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B03000
Size:	12288

Details

Name:	00000005.00000002.814915409.00000000029C7000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29C7000
Size:	12288

Details

Name:	00000004.00000002.807969409.0000000002E17000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2E17000
Size:	4096

Details

Name:	00000003.00000002.1199773948.000000006E413000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E413000
Size:	4096

Details

Name:	0000000D.00000002.889477525.0000029B47A10000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29B47A10000
Size:	4096

Details

Name:	00000013.00000000.937519766.00007DF50DAF2000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50DAF2000
Size:	4096

Details

Name:	00000002.00000003.766083823.0000000004CA0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CA0000
Size:	4096

Details

Name:	00000004.00000002.807812915.00000000025C3000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25C3000
Size:	16384

Details

Name:	0000000D.00000002.890185904.00007FF582867000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF582867000
Size:	28672

Details

Name:	00000002.00000003.785407281.0000000004B60000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	4B60000
Size:	4096

Details

Name:	00000002.00000003.775126141.0000000004CA0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CA0000
Size:	4096

Details

Name:	00000014.00000003.950553044.0000023B95B51000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	23B95B51000
Size:	53248

Details

Name:	0000000D.00000002.889989222.00007FF582681000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF582681000
Size:	12288

Details

Name:	0000000D.00000002.890089582.00007FF58282E000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58282E000
Size:	4096

Details

Name:	00000009.00000003.809652044.00000218D3250000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	218D3250000
Size:	118784

Details

Name:	00000009.00000000.798534946.00007DF5E3260000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E3260000
Size:	4096

Details

Name:	00000010.00000002.921722398.000000F74319E000.00000004.00000010.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F74319E000
Size:	8192

Details

Name:	00000005.00000002.815255064.00000000030B7000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	30B7000
Size:	8192

Details

Name:	00000009.00000002.810242262.00007DF5E3250000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E3250000
Size:	4096

Details

Name:	00000003.00000003.1047853377.0000000002FCE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FCE000
Size:	16384

Details

Name:	00000013.00000003.953478006.000002D6C01A3000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C01A3000
Size:	200704

Details

Name:	00000004.00000002.808164581.0000000006370000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6370000
Size:	4096

Details

Name:	0000000D.00000000.874676285.00007DF5979C0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5979C0000
Size:	12288

Details

Name:	00000013.00000002.968535808.00007FF4F896A000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F896A000
Size:	8192

Details

Name:	00000009.00000002.810355695.00007FF5CDE57000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CDE57000
Size:	8192

Details

Name:	00000000.00000003.1165426964.0000000000ED8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	ED8000
Size:	159744

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000002.807707398.00000000024EC000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24EC000
Size:	12288

Details

Name:	00000013.00000003.948873442.000002D6C018A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C018A000
Size:	4096

Details

Name:	00000014.00000002.951133529.000000B9467F9000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	B9467F9000
Size:	28672

Details

Name:	00000003.00000002.1197646687.0000000002763000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2763000
Size:	4096

Details

Name:	00000002.00000002.802952246.000000007F910000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F910000
Size:	4096

Details

Name:	00000009.00000002.810376304.00007FF5CDF31000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CDF31000
Size:	12288

Details

Name:	00000000.00000003.897690696.0000000000ED0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	ED0000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000013.00000002.966595107.000002D6BF6D0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D6BF6D0000
Size:	12288

Details

Name:	00000003.00000003.775125737.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000000.00000003.1077855193.0000000000E6C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E6C000
Size:	401408

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000002.1200459691.000000007FAA0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FAA0000
Size:	4096

Details

Name:	00000013.00000003.940972860.000002D6C0178000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0178000
Size:	45056

Details

Name:	00000005.00000002.815633351.0000000006C6D000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	6C6D000
Size:	12288

Details

Name:	00000004.00000002.807998273.0000000002E5A000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2E5A000
Size:	106496

Details

Name:	00000002.00000002.802912171.000000000759E000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	759E000
Size:	8192

Details

Name:	00000013.00000002.967945184.00007FF4F8587000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F8587000
Size:	4096

Details

Name:	00000002.00000000.678544112.0000000003010000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	3010000
Size:	102400

Details

Name:	00000014.00000002.951290893.0000023B95AD0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	23B95AD0000
Size:	16384

Details

Name:	00000002.00000002.802467434.0000000002AF7000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AF7000
Size:	12288

Details

Name:	00000013.00000002.966343104.000000F42B77E000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F42B77E000
Size:	8192

Details

Name:	00000004.00000002.807627297.000000000239C000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	239C000
Size:	4096

Details

Name:	00000014.00000002.951192383.0000023B95960000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	23B95960000
Size:	102400

Details

Name:	00000010.00000000.909998691.00007DF5B81E2000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5B81E2000
Size:	4096

Details

Name:	00000000.00000003.1167057898.0000000000EFE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	EFE000
Size:	4096

Details

Name:	00000009.00000002.809910632.0000003CA227F000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3CA227F000
Size:	4096

Details

Name:	00000003.00000002.1199499118.00000000051E0000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	51E0000
Size:	4096

Details

Name:	00000003.00000003.1001402783.0000000003037000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3037000
Size:	8192

Details

Name:	0000000D.00000002.890154729.00007FF58285F000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58285F000
Size:	16384

Details

Name:	00000002.00000002.802619522.0000000003170000.00000040.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	3170000
Size:	4096

Details

Name:	00000003.00000003.1137260281.0000000003041000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3041000
Size:	20480

Details

Name:	00000014.00000002.951533810.00007DF515600000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF515600000
Size:	4096

Details

Name:	00000003.00000002.1198321039.0000000002EA0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2EA0000
Size:	16384

Details

Name:	00000003.00000003.911644695.000000000303D000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	303D000
Size:	4096

Details

Name:	00000013.00000002.968775883.00007FF4F89D8000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F89D8000
Size:	12288

Details

Name:	0000000D.00000002.890214895.00007FF582874000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF582874000
Size:	4096

Details

Name:	00000009.00000002.810497035.00007FF5CE0CA000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CE0CA000
Size:	4096

Details

Name:	00000014.00000002.951670587.00007FF500137000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF500137000
Size:	4096

Details

Name:	00000002.00000003.769365737.0000000004CA0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CA0000
Size:	4096

Details

Name:	00000000.00000003.1032562756.0000000000ED1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	ED1000
Size:	8192

Details

Name:	00000003.00000003.911486634.0000000003040000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3040000
Size:	24576

Details

Name:	00000009.00000002.810654535.00007FF5CE14E000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CE14E000
Size:	16384

Details

Name:	00000005.00000002.815061748.0000000002A73000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A73000
Size:	16384

Details

Name:	0000000D.00000002.890069935.00007FF58281A000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58281A000
Size:	4096

Details

Name:	00000010.00000003.921387669.000001FE9CE4F000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE9CE4F000
Size:	4096

Details

Name:	00000013.00000002.969005479.00007FF4F8A61000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F8A61000
Size:	20480

Details

Name:	00000005.00000002.815710650.000000007FD60000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FD60000
Size:	4096

Details

Name:	00000003.00000003.777972976.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000000.00000002.1197791327.0000000000C50000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	C50000
Size:	16384

Details

Name:	00000005.00000002.814909429.00000000029C5000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29C5000
Size:	4096

Details

Name:	00000009.00000002.810364869.00007FF5CDE94000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CDE94000
Size:	4096

Details

Name:	00000003.00000003.1182493254.0000000002FC0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FC0000
Size:	12288

Details

Name:	00000003.00000003.1182506997.0000000002FC6000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FC6000
Size:	24576

Details

Name:	00000003.00000003.821171267.0000000005559000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5559000
Size:	45056

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000002.807695223.00000000024DB000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24DB000
Size:	4096

Details

Name:	00000013.00000002.967882842.00007FF4F84DE000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F84DE000
Size:	12288

Details

Name:	00000013.00000003.953801963.000002D6C0663000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0663000
Size:	397312

Details

Name:	00000013.00000003.946442998.000002D6C017A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C017A000
Size:	8192

Details

Name:	00000003.00000003.767423327.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	0000000D.00000002.889997212.00007FF5826D3000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5826D3000
Size:	8192

Details

Name:	00000000.00000002.1198091258.0000000000E50000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	E50000
Size:	69632

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000002.00000002.802365093.0000000002A82000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A82000
Size:	4096

Details

Name:	00000003.00000003.911529735.0000000002FC6000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FC6000
Size:	24576

Details

Name:	00000002.00000002.802475340.0000000002AFF000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AFF000
Size:	8192

Details

Name:	00000000.00000003.1165194818.0000000003011000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3011000
Size:	462848

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.816909758.0000000004B10000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B10000
Size:	4096

Details

Name:	00000000.00000002.1198595509.0000000002DA8000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2DA8000
Size:	4096

Details

Name:	00000002.00000002.802406725.0000000002ACC000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2ACC000
Size:	12288

Details

Name:	00000003.00000003.779345483.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	0000000D.00000002.890106925.00007FF582835000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF582835000
Size:	12288

Details

Name:	00000003.00000003.765446855.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000014.00000002.952418318.00007FF5004E4000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5004E4000
Size:	20480

Details

Name:	00000014.00000002.952599455.00007FF50050D000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50050D000
Size:	16384

Details

Name:	00000009.00000003.809623314.00000218D327F000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	218D327F000
Size:	32768

Details

Name:	00000000.00000002.1198138417.0000000000E6C000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	E6C000
Size:	421888

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000000.676934205.000000007F6A0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F6A0000
Size:	4096

Details

Name:	00000000.00000002.1198464785.00000000027D0000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	27D0000
Size:	16384

Details

Name:	00000003.00000002.1198407560.0000000002F70000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2F70000
Size:	36864

Details

Name:	00000013.00000002.966333253.000000F42B6FD000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F42B6FD000
Size:	12288

Details

Name:	00000003.00000003.1002922261.0000000003046000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3046000
Size:	40960

Details

Name:	00000005.00000002.815443566.0000000004B80000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4B80000
Size:	8192

Details

Name:	00000004.00000003.783375619.0000000004740000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4740000
Size:	4096

Details

Name:	00000013.00000003.941287606.000002D6C018D000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C018D000
Size:	49152

Details

Name:	00000002.00000002.802346741.00000000029B7000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29B7000
Size:	12288

Details

Name:	00000000.00000003.807516528.0000000000ED0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	ED0000
Size:	40960

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000009.00000002.810607233.00007FF5CE12A000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CE12A000
Size:	20480

Details

Name:	00000005.00000002.815601734.00000000067F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	67F0000
Size:	4096

Details

Name:	00000003.00000003.1001384401.0000000003041000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3041000
Size:	36864

Details

Name:	00000004.00000002.808023713.0000000002E8B000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2E8B000
Size:	49152

Details

Name:	00000005.00000002.815701138.000000007FC60000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FC60000
Size:	20480

Details

Name:	00000000.00000003.987364456.0000000003011000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3011000
Size:	40960

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000013.00000003.947246166.000002D6C018F000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C018F000
Size:	16384

Details

Name:	00000005.00000002.815412142.0000000004ABF000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4ABF000
Size:	4096

Details

Name:	00000004.00000002.807755588.000000000252A000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	252A000
Size:	16384

Details

Name:	00000003.00000002.1198235227.0000000002BF0000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2BF0000
Size:	4096

Details

Name:	00000013.00000002.966396012.000000F42BBFF000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F42BBFF000
Size:	4096

Details

Name:	00000003.00000003.865958870.0000000005B71000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B71000
Size:	696320

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.1198609633.0000000002EBB000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2EBB000
Size:	20480

Details

Name:	0000000D.00000002.889297830.000000FFE4E7B000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FFE4E7B000
Size:	20480

Details

Name:	00000002.00000003.782962276.0000000004B60000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	4B60000
Size:	4096

Details

Name:	00000002.00000002.802748789.0000000003740000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3740000
Size:	4096

Details

Name:	00000003.00000002.1197653990.000000000276C000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	276C000
Size:	4096

Details

Name:	00000013.00000003.939524381.000002D6BF89E000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6BF89E000
Size:	4096

Details

Name:	00000004.00000002.807885698.0000000002C00000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C00000
Size:	4096

Details

Name:	00000013.00000003.951583966.000002D6C015B000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C015B000
Size:	81920

Details

Name:	00000002.00000002.802631340.0000000003280000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3280000
Size:	12288

Details

Name:	00000003.00000003.1045928504.000000000304C000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	304C000
Size:	16384

Details

Name:	00000004.00000002.808011697.0000000002E7B000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2E7B000
Size:	16384

Details

Name:	00000005.00000002.815034615.0000000002A54000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A54000
Size:	28672

Details

Name:	00000010.00000002.922647627.00007FF5A3154000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A3154000
Size:	20480

Details

Name:	00000005.00000002.815183786.0000000002D90000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D90000
Size:	4096

Details

Name:	00000009.00000002.810524108.00007FF5CE0E0000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CE0E0000
Size:	16384

Details

Name:	00000009.00000002.810319864.00007FF5CDCA0000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CDCA0000
Size:	20480

Details

Name:	00000013.00000003.947900767.000002D6C01AB000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C01AB000
Size:	65536

Details

Name:	00000003.00000002.1198665764.00000000030BC000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	30BC000
Size:	4096

Details

Name:	00000000.00000003.807511308.000000000340D000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	340D000
Size:	4096

Details

Name:	00000004.00000003.779033843.0000000004730000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4730000
Size:	4096

Details

Name:	00000002.00000002.802917836.00000000075DE000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	75DE000
Size:	8192

Details

Name:	00000014.00000002.951268499.0000023B95A90000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	23B95A90000
Size:	4096

Details

Name:	00000013.00000002.967782797.00007FF4F8272000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F8272000
Size:	4096

Details

Name:	00000002.00000002.802901007.0000000006D5E000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	6D5E000
Size:	8192

Details

Name:	00000010.00000002.922590124.00007FF5A30DE000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A30DE000
Size:	16384

Details

Name:	00000004.00000002.807767893.0000000002542000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2542000
Size:	8192

Details

Name:	00000002.00000002.802513728.0000000002B71000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B71000
Size:	12288

Details

Name:	00000003.00000003.1137226862.0000000003069000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3069000
Size:	4096

Details

Name:	0000000D.00000002.889686963.0000029B47D00000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	29B47D00000
Size:	4096

Details

Name:	00000003.00000003.1045983391.0000000002FC6000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FC6000
Size:	24576

Details

Name:	00000005.00000002.815220140.0000000003000000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3000000
Size:	16384

Details

Name:	00000002.00000002.802876222.00000000068F0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	68F0000
Size:	4096

Details

Name:	00000003.00000003.956595236.0000000005B71000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B71000
Size:	942080

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000003.781493669.0000000004730000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4730000
Size:	4096

Details

Name:	00000000.00000003.987384468.0000000003081000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3081000
Size:	4096

Details

Name:	00000013.00000002.966427291.000000F42BDFB000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F42BDFB000
Size:	20480

Details

Name:	00000013.00000003.955071440.000002D6C01BA000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C01BA000
Size:	61440

Details

Name:	00000000.00000002.1197955345.0000000000DF0000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	DF0000
Size:	4096

Details

Name:	00000003.00000003.1047705165.0000000005B71000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B71000
Size:	466944

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000002.889971334.00007FF582405000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF582405000
Size:	4096

Details

Name:	00000013.00000003.956957416.000002D6C01A5000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C01A5000
Size:	16384

Details

Name:	00000002.00000002.802551410.0000000003000000.00000004.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	3000000
Size:	4096

Details

Name:	00000002.00000003.778575939.0000000004CA0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CA0000
Size:	4096

Details

Name:	00000000.00000002.1198300541.0000000000F00000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	F00000
Size:	36864

Details

Name:	00000004.00000002.808038542.000000000459E000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	459E000
Size:	8192

Details

Name:	00000003.00000003.864233755.0000000003031000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3031000
Size:	20480

Details

Name:	00000003.00000003.1001417676.000000000303D000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	303D000
Size:	4096

Details

Name:	00000004.00000003.770168896.0000000002E89000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E89000
Size:	86016

Details

Name:	00000002.00000002.802768806.0000000004C5E000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4C5E000
Size:	8192

Details

Name:	00000005.00000002.815484590.0000000004BBF000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	4BBF000
Size:	4096

Details

Name:	00000003.00000003.1047835938.0000000002FC0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FC0000
Size:	12288

Details

Name:	00000005.00000002.815449671.0000000004B84000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4B84000
Size:	4096

Details

Name:	00000000.00000003.1077809316.0000000000EFE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	EFE000
Size:	4096

Details

Name:	00000013.00000003.966096820.000002D6BF85C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6BF85C000
Size:	4096

Details

Name:	00000003.00000002.1198309778.0000000002E9B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2E9B000
Size:	20480

Details

Name:	00000003.00000003.1182327139.00000000055DB000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55DB000
Size:	4096

Details

Name:	00000010.00000003.921396994.000001FE9CE4E000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE9CE4E000
Size:	4096

Details

Name:	00000000.00000003.1167116246.000000000340A000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	340A000
Size:	4096

Details

Name:	00000010.00000000.910070919.00007DF5B8200000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5B8200000
Size:	12288

Details

Name:	00000003.00000003.911404600.00000000055DB000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55DB000
Size:	4096

Details

Name:	00000003.00000003.1045945900.0000000003069000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3069000
Size:	4096

Details

Name:	00000003.00000002.1199634078.0000000005BE2000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5BE2000
Size:	4096

Details

Name:	00000003.00000003.784136573.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000010.00000003.921414654.000001FE9CE4B000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE9CE4B000
Size:	4096

Details

Name:	00000013.00000003.944086161.000002D6C015F000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C015F000
Size:	49152

Details

Name:	00000003.00000002.1198216377.0000000002993000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2993000
Size:	16384

Details

Name:	00000013.00000002.968080410.00007FF4F87B1000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F87B1000
Size:	4096

Details

Name:	00000010.00000002.922664502.00007FF5A315A000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A315A000
Size:	12288

Details

Name:	00000003.00000003.779037118.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000003.00000002.1198490982.0000000002FCE000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2FCE000
Size:	16384

Details

Name:	00000003.00000003.785408218.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000000.00000003.942604289.0000000000ECE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	ECE000
Size:	200704

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.1093376423.0000000003038000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3038000
Size:	57344

Details

Name:	00000002.00000003.783263660.0000000004B60000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	4B60000
Size:	4096

Details

Name:	00000013.00000003.965999915.000002D6BF86D000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6BF86D000
Size:	110592

Details

Name:	00000004.00000003.807344738.0000000004750000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4750000
Size:	4096

Details

Name:	00000013.00000002.967959036.00007FF4F864A000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F864A000
Size:	4096

Details

Name:	00000003.00000002.1199186118.0000000004F28000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4F28000
Size:	4096

Details

Name:	00000002.00000003.771911136.0000000004CA0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CA0000
Size:	4096

Details

Name:	00000013.00000002.966622861.000002D6BF6E0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D6BF6E0000
Size:	4096

Details

Name:	00000000.00000002.1198528031.00000000029B0000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	29B0000
Size:	4096

Details

Name:	00000003.00000003.957756027.0000000005C71000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C71000
Size:	516096

Details

Name:	00000009.00000002.810459273.00007FF5CE033000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CE033000
Size:	24576

Details

Name:	00000009.00000000.798524295.00007DF5E3250000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E3250000
Size:	4096

Details

Name:	00000004.00000002.807882241.0000000002AE0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AE0000
Size:	4096

Details

Name:	00000003.00000002.1199577449.0000000005AAD000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5AAD000
Size:	12288

Details

Name:	0000000D.00000002.889331322.000000FFE517B000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	FFE517B000
Size:	20480

Details

Name:	00000009.00000002.809981465.00000218D31C0000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	218D31C0000
Size:	16384

Details

Name:	0000000D.00000002.889600983.0000029B47C3C000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	29B47C3C000
Size:	73728

Details

Name:	00000004.00000003.807409217.0000000002E80000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E80000
Size:	36864

Details

Name:	00000013.00000002.967098659.000002D6BF916000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6BF916000
Size:	8192

Details

Name:	00000014.00000002.951860323.00007FF5004BF000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5004BF000
Size:	16384

Details

Name:	00000010.00000002.921731675.000000F7435FB000.00000004.00000010.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F7435FB000
Size:	20480

Details

Name:	00000005.00000002.815338876.0000000003103000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	3103000
Size:	40960

Details

Name:	00000013.00000002.967538916.00007DF50DAE0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50DAE0000
Size:	4096

Details

Name:	00000004.00000002.807666624.00000000024B9000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B9000
Size:	12288

Details

Name:	00000000.00000002.1197700592.00000000007E0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7E0000
Size:	4096

Details

Name:	00000014.00000002.952584249.00007FF500509000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF500509000
Size:	12288

Details

Name:	00000003.00000003.911546686.0000000002FCE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FCE000
Size:	16384

Details

Name:	0000000D.00000002.889313605.000000FFE4F7D000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	FFE4F7D000
Size:	12288

Details

Name:	00000014.00000000.938825803.00007FF500582000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF500582000
Size:	16384

Details

Name:	00000002.00000002.802487773.0000000002B0F000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B0F000
Size:	4096

Details

Name:	00000013.00000003.948828858.000002D6C0182000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0182000
Size:	8192

Details

Name:	00000002.00000003.770637863.0000000004CA0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CA0000
Size:	4096

Details

Name:	00000003.00000002.1198708986.00000000030E0000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	30E0000
Size:	16384

Details

Name:	00000002.00000003.771274501.0000000004CA0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CA0000
Size:	4096

Details

Name:	00000009.00000002.810220545.00000218D3850000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	218D3850000
Size:	4096

Details

Name:	00000004.00000003.776937278.0000000004730000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4730000
Size:	4096

Details

Name:	00000002.00000003.784134413.0000000004B60000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	4B60000
Size:	4096

Details

Name:	00000013.00000002.967461043.000002D6C017B000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C017B000
Size:	12288

Details

Name:	00000003.00000002.1198151372.0000000002961000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2961000
Size:	12288

Details

Name:	00000009.00000002.810574620.00007FF5CE10C000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CE10C000
Size:	4096

Details

Name:	00000000.00000002.1199201227.000000006E481000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6E481000
Size:	8192

Details

Name:	00000013.00000002.967523513.00007DF40B9B0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF40B9B0000
Size:	20480

Details

Name:	00000000.00000003.807523642.0000000000ECE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	ECE000
Size:	8192

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000013.00000002.966551529.000002D6BF6A0000.00000004.00000040.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2D6BF6A0000
Size:	4096

Details

Name:	00000003.00000003.1047796810.0000000003031000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3031000
Size:	32768

Details

Name:	00000013.00000003.955028177.000002D6C017E000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C017E000
Size:	4096

Details

Name:	00000003.00000002.1197765039.00000000027D2000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27D2000
Size:	4096

Details

Name:	0000000D.00000002.889793039.0000029B48202000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	29B48202000
Size:	4096

Details

Name:	00000003.00000002.1199511675.0000000005251000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5251000
Size:	4096

Details

Name:	00000003.00000002.1197728666.00000000027C5000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27C5000
Size:	16384

Details

Name:	00000010.00000002.922412179.00007FF5A307B000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A307B000
Size:	45056

Details

Name:	00000002.00000003.780216036.0000000004B60000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	4B60000
Size:	4096

Details

Name:	00000010.00000002.922127590.00007FF5A28BB000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A28BB000
Size:	16384

Details

Name:	00000000.00000003.1075566831.000000000340B000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	340B000
Size:	4096

Details

Name:	00000009.00000002.810034063.00000218D322A000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	218D322A000
Size:	69632

Details

Name:	00000002.00000002.802417646.0000000002ADC000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2ADC000
Size:	8192

Details

Name:	00000002.00000003.784704964.0000000004B60000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	4B60000
Size:	4096

Details

Name:	00000013.00000002.968580673.00007FF4F8975000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F8975000
Size:	12288

Details

Name:	00000013.00000003.948172826.000002D6C0191000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0191000
Size:	16384

Details

Name:	00000005.00000002.815345673.000000000310E000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	310E000
Size:	4096

Details

Name:	00000009.00000002.810414991.00007FF5CDFDB000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CDFDB000
Size:	8192

Details

Name:	0000000D.00000000.874670961.00007DF5979B2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5979B2000
Size:	4096

Details

Name:	00000005.00000002.815156552.0000000002D7B000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D7B000
Size:	20480

Details

Name:	00000014.00000000.938782726.00007DF515610000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF515610000
Size:	4096

Details

Name:	0000000D.00000002.889959379.00007FF5823F6000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5823F6000
Size:	32768

Details

Name:	00000000.00000002.1198366040.0000000001280000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1280000
Size:	4096

Details

Name:	00000003.00000003.1182531615.0000000002FD4000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FD4000
Size:	380928

Details

Name:	00000002.00000002.802610672.0000000003140000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3140000
Size:	16384

Details

Name:	00000004.00000003.807472891.0000000002E8A000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E8A000
Size:	53248

Details

Name:	00000013.00000003.951606615.000002D6C017C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C017C000
Size:	4096

Details

Name:	0000000D.00000002.889838841.00007DF5979B2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5979B2000
Size:	4096

Details

Name:	00000002.00000002.802530889.0000000002B92000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B92000
Size:	12288

Details

Name:	00000013.00000003.943418241.000002D6C018D000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C018D000
Size:	57344

Details

Name:	00000003.00000003.777304874.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	0000000D.00000002.889799049.00007DF495870000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF495870000
Size:	20480

Details

Name:	00000009.00000000.798538698.00007DF5E3262000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E3262000
Size:	4096

Details

Name:	00000003.00000003.1090952100.0000000003069000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3069000
Size:	4096

Details

Name:	00000014.00000000.938796545.00007DF515620000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF515620000
Size:	12288

Details

Name:	00000000.00000003.804917107.0000000003000000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3000000
Size:	4096

Details

Name:	00000010.00000002.921754978.000000F743777000.00000004.00000010.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F743777000
Size:	36864

Details

Name:	00000002.00000002.802628373.0000000003260000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3260000
Size:	4096

Details

Name:	00000013.00000002.967085019.000002D6BF913000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6BF913000
Size:	8192

Details

Name:	00000003.00000003.1001181718.0000000002FD4000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FD4000
Size:	380928

Details

Name:	00000003.00000003.911462616.0000000003038000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3038000
Size:	4096

Details

Name:	0000000D.00000002.889845812.00007DF5979C0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5979C0000
Size:	12288

Details

Name:	00000000.00000003.776178939.0000000000C70000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	C70000
Size:	4096

Details

Name:	00000004.00000002.807734680.0000000002515000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2515000
Size:	4096

Details

Name:	00000003.00000002.1198934547.00000000036A0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	36A0000
Size:	4096

Details

Name:	00000013.00000002.967510194.000002D6C0600000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0600000
Size:	8192

Details

Name:	00000002.00000003.802057467.0000000003307000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3307000
Size:	4096

Details

Name:	00000002.00000002.802592705.0000000003110000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3110000
Size:	4096

Details

Name:	00000005.00000002.815168648.0000000002D80000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D80000
Size:	16384

Details

Name:	00000003.00000000.679000150.000000007FAA2000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FAA2000
Size:	4096

Details

Name:	00000002.00000000.678574326.000000007F912000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F912000
Size:	4096

Details

Name:	00000005.00000002.814936645.00000000029D3000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29D3000
Size:	12288

Details

Name:	00000005.00000002.815260239.00000000030BA000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	30BA000
Size:	12288

Details

Name:	00000002.00000002.802430766.0000000002AE9000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AE9000
Size:	40960

Details

Name:	00000003.00000003.820995027.00000000055DD000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55DD000
Size:	4096

Details

Name:	00000002.00000002.802778421.0000000004C9F000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4C9F000
Size:	4096

Details

Name:	00000003.00000003.909100993.0000000003069000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3069000
Size:	4096

Details

Name:	00000003.00000003.1002971068.00000000055DC000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55DC000
Size:	40960

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.1032522062.0000000000ED3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	ED3000
Size:	180224

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000002.00000002.802605808.000000000313A000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	313A000
Size:	12288

Details

Name:	00000002.00000002.802400671.0000000002AC5000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AC5000
Size:	20480

Details

Name:	00000014.00000002.952549114.00007FF5004FE000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5004FE000
Size:	16384

Details

Name:	00000000.00000000.676945362.000000007F6B0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F6B0000
Size:	12288

Details

Name:	00000000.00000002.1198904796.000000006E411000.00000020.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	6E411000
Size:	8192

Details

Name:	00000005.00000002.815269708.00000000030C0000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	30C0000
Size:	32768

Details

Name:	00000002.00000002.802762571.0000000004C1E000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4C1E000
Size:	8192

Details

Name:	00000010.00000002.922200462.00007FF5A2F31000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A2F31000
Size:	8192

Details

Name:	00000004.00000003.770181619.0000000002E82000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E82000
Size:	28672

Details

Name:	00000002.00000003.784000414.0000000004B60000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	4B60000
Size:	4096

Details

Name:	00000002.00000002.802725913.00000000035C0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	35C0000
Size:	69632

Details

Name:	00000003.00000002.1198567834.0000000003033000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	3033000
Size:	86016

Details

Name:	00000010.00000002.922085023.00007DF5B81F2000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5B81F2000
Size:	4096

Details

Name:	00000000.00000003.1077799134.0000000000ED4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	ED4000
Size:	8192

Details

Name:	00000000.00000002.1197736633.0000000000AFB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	AFB000
Size:	20480

Details

Name:	00000000.00000002.1198738093.00000000039DD000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	39DD000
Size:	12288

Details

Name:	00000000.00000003.1075482738.0000000003011000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3011000
Size:	462848

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000002.814805860.000000000297C000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	297C000
Size:	16384

Details

Name:	00000013.00000003.946957362.000002D6C01AC000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C01AC000
Size:	151552

Details

Name:	00000005.00000002.814788133.00000000028B5000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28B5000
Size:	12288

Details

Name:	00000013.00000003.948041126.000002D6C0189000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0189000
Size:	4096

Details

Name:	00000014.00000000.938765981.00007DF515602000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF515602000
Size:	4096

Details

Name:	00000003.00000003.776398156.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000004.00000002.808069408.0000000004730000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4730000
Size:	4096

Details

Name:	00000003.00000003.864315259.0000000002FCE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FCE000
Size:	16384

Details

Name:	00000003.00000002.1200493936.000000007FAB0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FAB0000
Size:	4096

Details

Name:	00000000.00000002.1198824648.0000000003DAD000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3DAD000
Size:	12288

Details

Name:	00000003.00000002.1198595535.0000000003069000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	3069000
Size:	4096

Details

Name:	00000002.00000002.802589000.00000000030C0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	30C0000
Size:	4096

Details

Name:	00000013.00000003.939529587.000002D6BF8A5000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6BF8A5000
Size:	16384

Details

Name:	00000013.00000003.946493925.000002D6C0188000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0188000
Size:	4096

Details

Name:	00000013.00000002.968192212.00007FF4F881A000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F881A000
Size:	4096

Details

Name:	00000014.00000002.951368308.0000023B95B2E000.00000004.00000020.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	23B95B2E000
Size:	12288

Details

Name:	00000000.00000003.985609214.000000000340B000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	340B000
Size:	4096

Details

Name:	00000003.00000003.779646660.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000003.00000003.777034441.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000002.00000002.802683026.00000000032F2000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	32F2000
Size:	28672

Details

Name:	00000009.00000002.810265016.00007DF5E3262000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E3262000
Size:	4096

Details

Name:	00000003.00000003.1182474801.0000000003031000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3031000
Size:	114688

Details

Name:	00000005.00000000.704706270.000000007FD60000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FD60000
Size:	4096

Details

Name:	00000013.00000003.953303841.000002D6C01A3000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C01A3000
Size:	176128

Details

Name:	00000004.00000002.808073338.0000000004B9D000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4B9D000
Size:	12288

Details

Name:	00000000.00000002.1198884241.0000000003FB2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3FB2000
Size:	4096

Details

Name:	00000009.00000002.809871016.0000003CA1E7C000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3CA1E7C000
Size:	16384

Details

Name:	00000013.00000002.966351472.000000F42B87B000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F42B87B000
Size:	20480

Details

Name:	00000004.00000002.807957738.0000000002E00000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2E00000
Size:	4096

Details

Name:	00000003.00000003.1090959554.0000000003031000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3031000
Size:	32768

Details

Name:	00000013.00000003.954251159.000002D6C0197000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0197000
Size:	32768

Details

Name:	00000010.00000002.921878533.000001FE9CE29000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE9CE29000
Size:	73728

Details

Name:	00000009.00000002.809935520.00000218D3160000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	218D3160000
Size:	102400

Details

Name:	00000004.00000002.807797559.00000000025A4000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25A4000
Size:	28672

Details

Name:	00000002.00000003.779312104.0000000004CA0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CA0000
Size:	4096

Details

Name:	00000005.00000003.776834460.0000000004BA0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4BA0000
Size:	4096

Details

Name:	00000003.00000002.1198832466.0000000003317000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3317000
Size:	8192

Details

Name:	00000010.00000002.922227788.00007FF5A2F6E000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A2F6E000
Size:	4096

Details

Name:	0000000D.00000002.889727766.0000029B47D13000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	29B47D13000
Size:	12288

Details

Name:	00000004.00000002.807785760.0000000002591000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2591000
Size:	12288

Details

Name:	00000003.00000003.816893876.0000000004B10000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B10000
Size:	4096

Details

Name:	00000003.00000002.1198046329.00000000028ED000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28ED000
Size:	4096

Details

Name:	00000005.00000000.704718122.000000007FD72000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FD72000
Size:	4096

Details

Name:	00000004.00000002.807871100.0000000002ACB000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2ACB000
Size:	20480

Details

Name:	00000013.00000003.948818556.000002D6C017A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C017A000
Size:	8192

Details

Name:	00000003.00000003.1137247995.0000000003034000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3034000
Size:	12288

Details

Name:	00000002.00000003.768729391.0000000004CA0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CA0000
Size:	4096

Details

Name:	00000003.00000002.1198361877.0000000002F20000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2F20000
Size:	16384

Details

Name:	00000013.00000003.955096080.000002D6C01DB000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C01DB000
Size:	61440

Details

Name:	00000000.00000003.1165268983.000000000340B000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	340B000
Size:	4096

Details

Name:	00000009.00000002.810440422.00007FF5CE02D000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CE02D000
Size:	20480

Details

Name:	00000004.00000000.691567242.0000000002A30000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A30000
Size:	102400

Details

Name:	00000013.00000000.937605718.00007FF4F8A62000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F8A62000
Size:	16384

Details

Name:	00000000.00000003.1077920453.000000000340A000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	340A000
Size:	4096

Details

Name:	00000013.00000003.941261504.000002D6C015C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C015C000
Size:	4096

Details

Name:	00000002.00000002.802354837.00000000029CC000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29CC000
Size:	4096

Details

Name:	00000003.00000003.777671732.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000009.00000002.810397289.00007FF5CDFA1000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CDFA1000
Size:	8192

Details

Name:	00000005.00000002.814833617.000000000298B000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	298B000
Size:	4096

Details

Name:	00000013.00000003.943595453.000002D6C0602000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0602000
Size:	4096

Details

Name:	00000013.00000003.947001934.000002D6C019A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C019A000
Size:	73728

Details

Name:	00000002.00000002.802422275.0000000002AE0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AE0000
Size:	32768

Details

Name:	00000013.00000002.968647524.00007FF4F899C000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F899C000
Size:	4096

Details

Name:	00000004.00000002.808053345.000000000465F000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	465F000
Size:	4096

Details

Name:	00000013.00000003.943661490.000002D6C0176000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0176000
Size:	69632

Details

Name:	00000004.00000002.808016420.0000000002E80000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2E80000
Size:	36864

Details

Name:	00000005.00000000.704710465.000000007FD62000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FD62000
Size:	4096

Details

Name:	00000005.00000002.814930864.00000000029CF000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29CF000
Size:	8192

Details

Name:	00000010.00000000.909936642.000001FE9CC10000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FE9CC10000
Size:	102400

Details

Name:	00000000.00000002.1198754562.0000000003ADC000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3ADC000
Size:	16384

Details

Name:	00000013.00000003.949956289.000002D6C019B000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C019B000
Size:	176128

Details

Name:	00000005.00000002.815675384.00000000071C8000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	71C8000
Size:	8192

Details

Name:	00000005.00000002.815687875.00000000071E0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	71E0000
Size:	4096

Details

Name:	00000003.00000003.762902006.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000003.00000003.1001396069.000000000304C000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	304C000
Size:	4096

Details

Name:	00000013.00000002.968405007.00007FF4F88DC000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F88DC000
Size:	8192

Details

Name:	00000002.00000003.802122877.0000000003304000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3304000
Size:	12288

Details

Name:	00000014.00000003.950035059.0000023B95B31000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	23B95B31000
Size:	126976

Details

Name:	00000000.00000003.985520608.0000000003011000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3011000
Size:	462848

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.852311298.000000000320C000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	320C000
Size:	466944

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000013.00000003.947019632.000002D6C0182000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0182000
Size:	8192

Details

Name:	00000004.00000003.776040341.0000000004730000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4730000
Size:	4096

Details

Name:	00000004.00000002.807763059.0000000002531000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2531000
Size:	16384

Details

Name:	00000004.00000002.808056665.000000000469D000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	469D000
Size:	12288

Details

Name:	00000013.00000002.968602094.00007FF4F897B000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F897B000
Size:	45056

Details

Name:	00000004.00000002.807657029.0000000002405000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2405000
Size:	12288

Details

Name:	00000013.00000003.954956304.000002D6C01C9000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C01C9000
Size:	61440

Details

Name:	00000004.00000002.807991920.0000000002E50000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2E50000
Size:	32768

Details

Name:	00000003.00000000.678979283.0000000002E00000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E00000
Size:	102400

Details

Name:	00000003.00000003.911636709.0000000003038000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3038000
Size:	4096

Details

Name:	00000005.00000002.815068655.0000000002CD0000.00000004.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2CD0000
Size:	4096

Details

Name:	00000013.00000003.943858671.000002D6C017F000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C017F000
Size:	16384

Details

Name:	00000003.00000003.773215334.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000009.00000002.810347004.00007FF5CDCB5000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CDCB5000
Size:	4096

Details

Name:	00000010.00000002.921782117.000001FE9CBF0000.00000004.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1FE9CBF0000
Size:	4096

Details

Name:	00000003.00000002.1198795983.00000000032FE000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	32FE000
Size:	8192

Details

Name:	00000005.00000002.815454873.0000000004B90000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4B90000
Size:	4096

Details

Name:	00000003.00000003.1182520543.0000000002FCE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FCE000
Size:	16384

Details

Name:	00000003.00000002.1198070944.00000000028FA000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28FA000
Size:	16384

Details

Name:	00000002.00000002.802327587.000000000297C000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	297C000
Size:	4096

Details

Name:	00000013.00000002.968454830.00007FF4F893B000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F893B000
Size:	8192

Details

Name:	00000002.00000003.782292508.0000000004B60000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	4B60000
Size:	4096

Details

Name:	00000004.00000002.807973904.0000000002E1A000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2E1A000
Size:	12288

Details

Name:	00000013.00000002.968682848.00007FF4F89A7000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F89A7000
Size:	28672

Details

Name:	00000004.00000003.781790263.0000000004740000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4740000
Size:	4096

Details

Name:	00000013.00000002.966821424.000002D6BF84A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6BF84A000
Size:	65536

Details

Name:	00000013.00000003.947876627.000002D6C018A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C018A000
Size:	61440

Details

Name:	00000010.00000000.909989312.00007DF5B81E0000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5B81E0000
Size:	4096

Details

Name:	00000003.00000002.1198036533.00000000028E7000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28E7000
Size:	12288

Details

Name:	00000010.00000002.921827334.000001FE9CD40000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FE9CD40000
Size:	16384

Details

Name:	00000013.00000003.943509408.000002D6C0603000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0603000
Size:	241664

Details

Name:	00000013.00000002.968630101.00007FF4F8987000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F8987000
Size:	49152

Details

Name:	00000013.00000003.946371326.000002D6C0160000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0160000
Size:	57344

Details

Name:	00000003.00000002.1197813649.0000000002872000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2872000
Size:	4096

Details

Name:	00000013.00000002.967577705.00007DF50DAF2000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50DAF2000
Size:	4096

Details

Name:	00000013.00000003.942254655.000002D6C0176000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0176000
Size:	12288

Details

Name:	00000013.00000002.968302391.00007FF4F886E000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F886E000
Size:	4096

Details

Name:	00000004.00000003.778107933.0000000004730000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4730000
Size:	4096

Details

Name:	00000000.00000000.676926916.000000007F692000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F692000
Size:	4096

Details

Name:	0000000D.00000002.889697326.0000029B47D02000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	29B47D02000
Size:	12288

Details

Name:	00000000.00000003.1077826828.0000000000E50000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E50000
Size:	69632

Details

Name:	00000013.00000002.968511414.00007FF4F895C000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F895C000
Size:	8192

Details

Name:	0000000D.00000000.874653935.00007DF5979A0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5979A0000
Size:	4096

Details

Name:	00000004.00000002.808065843.00000000046E0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	46E0000
Size:	4096

Details

Name:	00000005.00000002.814896390.00000000029B9000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29B9000
Size:	40960

Details

Name:	00000000.00000003.987298238.000000000340D000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	340D000
Size:	4096

Details

Name:	00000005.00000002.814952088.00000000029DF000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29DF000
Size:	4096

Details

Name:	00000010.00000002.922012354.000001FE9D000000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FE9D000000
Size:	4096

Details

Name:	00000009.00000002.810235271.00007DF4E1120000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4E1120000
Size:	20480

Details

Name:	00000005.00000002.815191114.0000000002DE0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2DE0000
Size:	4096

Details

Name:	00000014.00000002.951438453.0000023B95C20000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	23B95C20000
Size:	69632

Details

Name:	00000013.00000003.951619900.000002D6C066A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C066A000
Size:	425984

Details

Name:	00000014.00000002.951379051.0000023B95B36000.00000004.00000020.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	23B95B36000
Size:	65536

Details

Name:	00000004.00000002.808200555.000000007FF70000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF70000
Size:	12288

Details

Name:	00000013.00000002.967038882.000002D6BF8F5000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6BF8F5000
Size:	49152

Details

Name:	00000003.00000003.1091027932.0000000002FD4000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FD4000
Size:	380928

Details

Name:	00000013.00000003.948399313.000002D6C017C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C017C000
Size:	8192

Details

Name:	00000009.00000002.810229039.00000218D3A02000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	218D3A02000
Size:	4096

Details

Name:	00000003.00000002.1199900588.000000006E416000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E416000
Size:	40960

Details

Name:	00000003.00000002.1198391329.0000000002F50000.00000040.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	2F50000
Size:	4096

Details

Name:	00000013.00000002.967069326.000002D6BF908000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6BF908000
Size:	32768

Details

Name:	00000010.00000002.922457866.00007FF5A309C000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A309C000
Size:	4096

Details

Name:	00000003.00000002.1198086484.0000000002901000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2901000
Size:	16384

Details

Name:	00000013.00000003.945867551.000002D6C019D000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C019D000
Size:	147456

Details

Name:	0000000D.00000002.890363533.00007FF582921000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF582921000
Size:	20480

Details

Name:	00000004.00000002.807889488.0000000002C20000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C20000
Size:	16384

Details

Name:	00000003.00000003.758447196.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000003.00000003.1047844023.0000000002FC6000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FC6000
Size:	24576

Details

Name:	00000014.00000002.951087214.000000B9466FE000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	B9466FE000
Size:	8192

Details

Name:	00000002.00000003.781019942.0000000004B60000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	4B60000
Size:	4096

Details

Name:	00000013.00000002.967917858.00007FF4F8536000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F8536000
Size:	32768

Details

Name:	00000013.00000003.951283078.000002D6C0602000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0602000
Size:	851968

Details

Name:	0000000D.00000002.890246420.00007FF582884000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF582884000
Size:	20480

Details

Name:	00000003.00000002.1200327195.000000006E483000.00000040.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute and read and write
Base address:	6E483000
Size:	8192

Details

Name:	00000013.00000003.948256641.000002D6C018A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C018A000
Size:	4096

Details

Name:	00000002.00000003.776398542.0000000004CA0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CA0000
Size:	4096

Details

Name:	00000013.00000003.941022309.000002D6C015B000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C015B000
Size:	57344

Details

Name:	00000000.00000002.1199306704.000000007F690000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F690000
Size:	4096

Details

Name:	00000013.00000002.968500245.00007FF4F895A000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F895A000
Size:	4096

Details

Name:	00000002.00000002.802331976.000000000299D000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	299D000
Size:	32768

Details

Name:	00000002.00000002.802707170.0000000003304000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3304000
Size:	12288

Details

Name:	00000004.00000002.807790266.0000000002595000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2595000
Size:	32768

Details

Name:	00000000.00000002.1197820017.0000000000C80000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	C80000
Size:	24576

Details

Name:	00000013.00000002.967931833.00007FF4F8545000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F8545000
Size:	4096

Details

Name:	00000000.00000002.1198771356.0000000003B1D000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3B1D000
Size:	12288

Details

Name:	00000000.00000002.1199293277.000000007F590000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F590000
Size:	20480

Details

Name:	00000004.00000002.807773015.0000000002546000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2546000
Size:	16384

Details

Name:	00000004.00000002.807807988.00000000025B8000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25B8000
Size:	12288

Details

Name:	00000004.00000002.807751364.0000000002523000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2523000
Size:	12288

Details

Name:	00000013.00000003.946928875.000002D6C01AC000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C01AC000
Size:	73728

Details

Name:	00000013.00000002.967153771.000002D6BFC00000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D6BFC00000
Size:	12288

Details

Name:	00000002.00000002.802317742.0000000002973000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2973000
Size:	4096

Details

Name:	00000014.00000002.951302993.0000023B95B20000.00000004.00000020.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	23B95B20000
Size:	24576

Details

Name:	00000003.00000003.909089500.000000000303D000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	303D000
Size:	16384

Details

Name:	00000000.00000002.1197891512.0000000000DD1000.00000020.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	DD1000
Size:	45056

Details

Name:	0000000D.00000000.874726784.00007FF582922000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF582922000
Size:	16384

Details

Name:	00000005.00000002.814870161.00000000029AC000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29AC000
Size:	8192

Details

Name:	00000009.00000002.809997641.00000218D3200000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	218D3200000
Size:	73728

Details

Name:	00000003.00000003.782834080.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000013.00000003.942264847.000002D6C017A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C017A000
Size:	40960

Details

Name:	00000005.00000002.815616277.0000000006C2D000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	6C2D000
Size:	12288

Details

Name:	00000004.00000002.807844328.0000000002A20000.00000004.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2A20000
Size:	4096

Details

Name:	00000013.00000002.966443151.000000F42BE7F000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F42BE7F000
Size:	4096

Details

Name:	0000000D.00000002.889307312.000000FFE4EFE000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	FFE4EFE000
Size:	8192

Details

Name:	00000000.00000002.1198993731.000000006E415000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6E415000
Size:	4096

Details

Name:	00000004.00000003.779648671.0000000004730000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4730000
Size:	4096

Details

Name:	00000002.00000002.802518185.0000000002B75000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B75000
Size:	32768

Details

Name:	00000004.00000002.807662137.00000000024A2000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24A2000
Size:	4096

Details

Name:	00000013.00000002.966634638.000002D6BF700000.00000004.00000020.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2D6BF700000
Size:	12288

Details

Name:	00000013.00000002.967966556.00007FF4F86E7000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F86E7000
Size:	8192

Details

Name:	00000009.00000002.809890887.0000003CA2077000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3CA2077000
Size:	36864

Details

Name:	00000002.00000002.802693591.00000000032FB000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	32FB000
Size:	32768

Details

Name:	00000005.00000002.815230712.000000000305E000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	305E000
Size:	8192

Details

Name:	00000000.00000003.1077784750.000000000340B000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	340B000
Size:	4096

Details

Name:	00000013.00000003.953383276.000002D6C0602000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0602000
Size:	159744

Details

Name:	00000013.00000003.943477195.000002D6C0602000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0602000
Size:	122880

Details

Name:	00000014.00000002.951174275.000000B9468FF000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	B9468FF000
Size:	4096

Details

Name:	00000004.00000003.777470671.0000000004730000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4730000
Size:	4096

Details

Name:	00000002.00000003.802095375.00000000032FA000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	32FA000
Size:	36864

Details

Name:	00000010.00000002.922511393.00007FF5A30B4000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A30B4000
Size:	4096

Details

Name:	00000003.00000003.1047760926.0000000003046000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3046000
Size:	147456

Details

Name:	00000014.00000002.951726531.00007FF50049B000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50049B000
Size:	20480

Details

Name:	00000013.00000003.953435751.000002D6C0192000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0192000
Size:	65536

Details

Name:	00000000.00000003.1167067380.0000000000ED3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	ED3000
Size:	45056

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.768729947.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000013.00000002.966539319.000002D6BF690000.00000004.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2D6BF690000
Size:	4096

Details

Name:	00000013.00000002.966799288.000002D6BF83C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6BF83C000
Size:	53248

Details

Name:	00000005.00000003.814562742.0000000004FC8000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4FC8000
Size:	4096

Details

Name:	0000000D.00000002.889496571.0000029B47A30000.00000004.00000020.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	29B47A30000
Size:	8192

Details

Name:	00000000.00000003.897679873.0000000000ECE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	ECE000
Size:	4096

Details

Name:	00000003.00000003.1001159004.0000000002FC6000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FC6000
Size:	24576

Details

Name:	00000003.00000002.1198420585.0000000002F7A000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2F7A000
Size:	299008

Details

Name:	00000014.00000002.952308809.00007FF5004DA000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5004DA000
Size:	20480

Details

Name:	00000009.00000002.810584274.00007FF5CE10F000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CE10F000
Size:	16384

Details

Name:	00000000.00000003.987394879.000000000340B000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	340B000
Size:	8192

Details

Name:	00000003.00000002.1197661167.0000000002787000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2787000
Size:	4096

Details

Name:	00000000.00000002.1197971023.0000000000E00000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	E00000
Size:	40960

Details

Name:	00000013.00000003.966064546.000002D6BF861000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6BF861000
Size:	12288

Details

Name:	00000002.00000003.770001991.0000000004CA0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CA0000
Size:	4096

Details

Name:	00000013.00000003.952276613.000002D6C0191000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0191000
Size:	8192

Details

Name:	00000002.00000002.802538919.0000000002BA3000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BA3000
Size:	16384

Details

Name:	00000013.00000002.967005064.000002D6BF8E6000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6BF8E6000
Size:	57344

Details

Name:	00000000.00000002.1198811109.0000000003D6F000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3D6F000
Size:	4096

Details

Name:	00000013.00000002.967242494.000002D6BFEB0000.00000008.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page write copy
Base address:	2D6BFEB0000
Size:	266240

Details

Name:	0000000D.00000002.889751592.0000029B48000000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29B48000000
Size:	12288

Details

Name:	00000002.00000003.777671099.0000000004CA0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CA0000
Size:	4096

Details

Name:	00000002.00000003.781991107.0000000004B60000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	4B60000
Size:	4096

Details

Name:	00000003.00000003.911502231.0000000003041000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3041000
Size:	20480

Details

Name:	00000003.00000002.1199600226.0000000005AF0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5AF0000
Size:	4096

Details

Name:	00000013.00000003.954274120.000002D6C017C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C017C000
Size:	36864

Details

Name:	00000013.00000003.942230875.000002D6C01AB000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C01AB000
Size:	114688

Details

Name:	00000003.00000003.954702365.0000000003031000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3031000
Size:	24576

Details

Name:	00000003.00000002.1197956877.00000000028C3000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28C3000
Size:	28672

Details

Name:	00000003.00000002.1198292634.0000000002E5C000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2E5C000
Size:	16384

Details

Name:	00000002.00000003.774489852.0000000004CA0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CA0000
Size:	4096

Details

Name:	00000005.00000002.814970896.00000000029F2000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29F2000
Size:	8192

Details

Name:	00000009.00000002.810698693.00007FF5CE1C4000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CE1C4000
Size:	20480

Details

Name:	00000003.00000002.1200353284.000000006E48E000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6E48E000
Size:	4096

Details

Name:	0000000D.00000002.889651419.0000029B47C70000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	29B47C70000
Size:	86016

Details

Name:	00000005.00000002.815241489.00000000030A0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	30A0000
Size:	4096

Details

Name:	00000003.00000002.1197858654.0000000002889000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2889000
Size:	8192

Details

Name:	00000004.00000003.777788448.0000000004730000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4730000
Size:	4096

Details

Name:	00000003.00000002.1198252877.0000000002CAE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CAE000
Size:	4096

Details

Name:	00000003.00000003.1090912720.00000000055DB000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55DB000
Size:	4096

Details

Name:	00000000.00000002.1198700879.000000000385E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	385E000
Size:	8192

Details

Name:	00000002.00000002.802938392.000000007F900000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F900000
Size:	4096

Details

Name:	00000003.00000003.1137274297.0000000002FC0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FC0000
Size:	12288

Details

Name:	00000004.00000003.783699676.0000000004740000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4740000
Size:	4096

Details

Name:	0000000D.00000002.890272922.00007FF58288F000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58288F000
Size:	8192

Details

Name:	0000000D.00000002.889716371.0000029B47D08000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	29B47D08000
Size:	24576

Details

Name:	00000003.00000003.768059108.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000013.00000002.967938157.00007FF4F8585000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F8585000
Size:	4096

Details

Name:	00000014.00000003.950472440.0000023B95B46000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	23B95B46000
Size:	40960

Details

Name:	00000003.00000003.866046811.0000000003039000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3039000
Size:	200704

Details

Name:	00000000.00000002.1198118227.0000000000E62000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	E62000
Size:	36864

Details

Name:	00000003.00000002.1198609417.0000000003080000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3080000
Size:	12288

Details

Name:	00000013.00000002.967952132.00007FF4F8617000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F8617000
Size:	4096

Details

Name:	00000003.00000002.1198206999.0000000002988000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2988000
Size:	20480

Details

Name:	0000000D.00000002.889673094.0000029B47C87000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	29B47C87000
Size:	40960

Details

Name:	00000000.00000002.1199046537.000000006E420000.00000020.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	6E420000
Size:	253952

Details

Name:	00000013.00000003.966085492.000002D6BF85D000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6BF85D000
Size:	8192

Details

Name:	00000013.00000002.966321435.000000F42B67C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F42B67C000
Size:	16384

Details

Name:	00000005.00000002.814849767.000000000299C000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	299C000
Size:	12288

Details

Name:	00000004.00000002.807928130.0000000002C60000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C60000
Size:	69632

Details

Name:	00000013.00000002.966983696.000002D6BF8D7000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6BF8D7000
Size:	49152

Details

Name:	00000010.00000002.921788079.000001FE9CC00000.00000004.00000040.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1FE9CC00000
Size:	4096

Details

Name:	00000002.00000002.802341004.00000000029A8000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29A8000
Size:	12288

Details

Name:	00000003.00000002.1198623778.00000000030B0000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	30B0000
Size:	4096

Details

Name:	00000010.00000002.922396486.00007FF5A3075000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A3075000
Size:	12288

Details

Name:	00000004.00000001.696056148.000000006E410000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E410000
Size:	4096

Details

Name:	00000010.00000000.910110363.00007FF5A3162000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A3162000
Size:	16384

Details

Name:	00000009.00000002.810144432.00000218D3300000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	218D3300000
Size:	4096

Details

Name:	00000002.00000003.779613272.0000000004CA0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CA0000
Size:	4096

Details

Name:	00000002.00000003.761629775.00000000032B0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	32B0000
Size:	4096

Details

Name:	00000013.00000002.966362409.000000F42B8FE000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F42B8FE000
Size:	8192

Details

Name:	00000003.00000002.1197994555.00000000028D0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28D0000
Size:	32768

Details

Name:	00000003.00000002.1197939073.00000000028BC000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28BC000
Size:	12288

Details

Name:	00000003.00000003.778274390.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000002.00000002.802534960.0000000002B98000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B98000
Size:	12288

Details

Name:	00000009.00000002.810199670.00000218D36D0000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	218D36D0000
Size:	12288

Details

Name:	0000000D.00000002.889983863.00007FF5825A7000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5825A7000
Size:	8192

Details

Name:	00000000.00000002.1198497592.000000000295B000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	295B000
Size:	20480

Details

Name:	00000013.00000003.956803931.000002D6C015B000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C015B000
Size:	86016

Details

Name:	00000005.00000003.774864410.0000000004B70000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B70000
Size:	4096

Details

Name:	00000002.00000002.802500344.0000000002B26000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B26000
Size:	16384

Details

Name:	00000003.00000003.779948030.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000013.00000000.937444713.000002D6BF6B0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D6BF6B0000
Size:	102400

Details

Name:	00000004.00000002.807737847.0000000002517000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2517000
Size:	12288

Details

Name:	00000003.00000003.1137238115.0000000003031000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3031000
Size:	8192

Details

Name:	00000000.00000002.1197939708.0000000000DDF000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	DDF000
Size:	4096

Details

Name:	00000003.00000002.1198993948.00000000036B0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	36B0000
Size:	344064

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	00000013.00000002.967684455.00007FF4F81BB000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F81BB000
Size:	16384

Details

Name:	00000009.00000002.810486300.00007FF5CE04C000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CE04C000
Size:	8192

Details

Name:	00000003.00000003.1090995409.0000000002FC1000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FC1000
Size:	8192

Details

Name:	00000003.00000003.1045965746.0000000003041000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3041000
Size:	20480

Details

Name:	00000005.00000003.776200137.0000000004BA0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4BA0000
Size:	4096

Details

Name:	00000009.00000002.810276234.00007DF5E3270000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E3270000
Size:	12288

Details

Name:	00000013.00000002.967118183.000002D6BFA00000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D6BFA00000
Size:	4096

Details

Name:	00000003.00000003.764811141.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000013.00000003.947974503.000002D6C01BC000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C01BC000
Size:	65536

Details

Name:	00000005.00000002.815054824.0000000002A68000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A68000
Size:	20480

Details

Name:	00000014.00000000.938753106.00007DF515600000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF515600000
Size:	4096

Details

Name:	00000013.00000003.943641634.000002D6C015B000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C015B000
Size:	65536

Details

Name:	00000002.00000002.802638409.00000000032B0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	32B0000
Size:	4096

Details

Name:	00000000.00000003.1167105864.000000000340B000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	340B000
Size:	8192

Details

Name:	00000003.00000003.864243881.0000000002FD2000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FD2000
Size:	389120

Details

Name:	00000014.00000002.951276537.0000023B95AC0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	23B95AC0000
Size:	8192

Details

Name:	00000010.00000002.922287448.00007FF5A2FDC000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A2FDC000
Size:	8192

Details

Name:	00000004.00000002.807721944.0000000002500000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2500000
Size:	32768

Details

Name:	00000004.00000000.693889189.000000007FF60000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF60000
Size:	4096

Details

Name:	00000010.00000002.921913536.000001FE9CE52000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE9CE52000
Size:	118784

Details

Name:	00000000.00000003.897708799.000000000340A000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	340A000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000002.00000002.802491284.0000000002B11000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B11000
Size:	16384

Details

Name:	00000004.00000002.808186918.000000007FF52000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52000
Size:	4096

Details

Name:	00000002.00000002.802715621.00000000033C0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	33C0000
Size:	36864

Details

Name:	00000009.00000002.810533575.00007FF5CE0E5000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CE0E5000
Size:	12288

Details

Name:	00000010.00000002.922260760.00007FF5A2FC3000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A2FC3000
Size:	24576

Details

Name:	00000013.00000003.941040251.000002D6C016C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C016C000
Size:	49152

Details

Name:	00000005.00000002.814775771.0000000002884000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2884000
Size:	24576

Details

Name:	00000000.00000003.1165452156.0000000000ED3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	ED3000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000013.00000003.966119716.000002D6BF849000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6BF849000
Size:	69632

Details

Name:	00000002.00000002.802641936.00000000032C0000.00000004.00000020.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	32C0000
Size:	32768

Details

Name:	00000003.00000003.1002985569.00000000055DB000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55DB000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000013.00000002.967192265.000002D6BFD80000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D6BFD80000
Size:	4096

Details

Name:	00000003.00000003.821032001.000000000303A000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	303A000
Size:	40960

Details

Name:	00000003.00000003.1182354397.0000000005B71000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B71000
Size:	458752

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000002.1198730500.00000000030E5000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	30E5000
Size:	12288

Details

Name:	00000000.00000002.1198797088.0000000003C6E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3C6E000
Size:	8192

Details

Name:	00000009.00000002.810705364.00007FF5CE1CA000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CE1CA000
Size:	12288

Details

Name:	00000003.00000002.1198693688.00000000030BF000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	30BF000
Size:	4096

Details

Name:	00000004.00000002.808062189.00000000046DE000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	46DE000
Size:	8192

Details

Name:	00000013.00000002.966846854.000002D6BF85B000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6BF85B000
Size:	4096

Details

Name:	00000003.00000003.1001078704.0000000003031000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3031000
Size:	32768

Details

Name:	00000002.00000003.773215929.0000000004CA0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CA0000
Size:	4096

Details

Name:	00000010.00000002.922209731.00007FF5A2F51000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A2F51000
Size:	4096

Details

Name:	00000003.00000002.1198012210.00000000028D9000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28D9000
Size:	40960

Details

Name:	00000003.00000003.866106930.00000000053DC000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	53DC000
Size:	462848

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000002.890350353.00007FF58291A000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58291A000
Size:	12288

Details

Name:	00000013.00000002.966891538.000002D6BF86E000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6BF86E000
Size:	106496

Details

Name:	00000013.00000002.967347957.000002D6C011F000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C011F000
Size:	176128

Details

Name:	00000013.00000003.939715909.000002D6BF8E8000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6BF8E8000
Size:	28672

Details

Name:	00000013.00000003.944838645.000002D6C0602000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0602000
Size:	94208

Details

Name:	00000013.00000002.967563460.00007DF50DAF0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50DAF0000
Size:	4096

Details

Name:	00000004.00000003.807377109.0000000004B48000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4B48000
Size:	4096

Details

Name:	00000003.00000003.1091111221.0000000003040000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3040000
Size:	4096

Details

Name:	00000002.00000002.802906334.0000000006D60000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6D60000
Size:	4096

Details

Name:	00000003.00000003.778575387.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000013.00000002.967907719.00007FF4F8530000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F8530000
Size:	20480

Details

Name:	00000005.00000000.704680241.0000000002A73000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A73000
Size:	16384

Details

Name:	00000013.00000002.968929524.00007FF4F8A54000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F8A54000
Size:	20480

Details

Name:	00000014.00000002.952647226.00007FF500574000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF500574000
Size:	20480

Details

Name:	00000014.00000002.951544629.00007DF515602000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF515602000
Size:	4096

Details

Name:	00000013.00000002.966776937.000002D6BF829000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6BF829000
Size:	73728

Details

Name:	00000010.00000002.921894041.000001FE9CE3C000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE9CE3C000
Size:	53248

Details

Name:	00000004.00000002.807742023.000000000251D000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	251D000
Size:	4096

Details

Name:	00000000.00000002.1198666367.0000000003081000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3081000
Size:	4096

Details

Name:	00000004.00000002.807953853.0000000002DF0000.00000040.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	2DF0000
Size:	4096

Details

Name:	00000010.00000000.910025748.00007DF5B81F0000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5B81F0000
Size:	4096

Details

Name:	00000010.00000002.922376161.00007FF5A306E000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A306E000
Size:	4096

Details

Name:	00000004.00000003.807417543.0000000002E8A000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E8A000
Size:	53248

Details

Name:	00000013.00000002.967895526.00007FF4F84E2000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F84E2000
Size:	4096

Details

Name:	00000000.00000002.1198633344.0000000002FBF000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2FBF000
Size:	4096

Details

Name:	00000003.00000002.1198505308.0000000002FD4000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2FD4000
Size:	380928

Details

Name:	00000003.00000003.1184121792.00000000055DB000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55DB000
Size:	49152

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000002.00000003.802115402.00000000032FA000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	32FA000
Size:	36864

Details

Name:	00000000.00000002.1199227913.000000006E483000.00000040.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute and read and write
Base address:	6E483000
Size:	8192

Details

Name:	00000000.00000002.1197806700.0000000000C60000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	C60000
Size:	4096

Details

Name:	00000005.00000002.815310630.00000000030F3000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	30F3000
Size:	61440

Details

Name:	00000003.00000003.909106917.0000000003031000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3031000
Size:	24576

Details

Name:	00000010.00000002.922091099.00007DF5B8200000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5B8200000
Size:	12288

Details

Name:	00000000.00000003.1167045159.0000000000EDE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	EDE000
Size:	45056

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000002.00000003.784938151.0000000004B60000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	4B60000
Size:	4096

Details

Name:	00000013.00000002.967335385.000002D6C0116000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0116000
Size:	32768

Details

Name:	00000010.00000002.922218791.00007FF5A2F6B000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A2F6B000
Size:	8192

Details

Name:	00000000.00000003.1032428096.0000000003F41000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3F41000
Size:	540672

Details

Name:	00000003.00000002.1199472284.000000000512D000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	512D000
Size:	12288

Details

Name:	00000002.00000003.768059494.0000000004CA0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CA0000
Size:	4096

Details

Name:	00000003.00000003.1001122796.0000000003040000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3040000
Size:	40960

Details

Name:	00000002.00000002.802966742.000000007F920000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F920000
Size:	12288

Details

Name:	00000013.00000002.968464060.00007FF4F893F000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F893F000
Size:	4096

Details

Name:	00000003.00000002.1200469476.000000007FAA2000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FAA2000
Size:	4096

Details

Name:	00000002.00000002.802371629.0000000002A99000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A99000
Size:	12288

Details

Name:	00000010.00000002.921957430.000001FE9CE81000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE9CE81000
Size:	65536

Details

Name:	00000013.00000003.966073407.000002D6BF85F000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6BF85F000
Size:	8192

Details

Name:	00000005.00000002.815195586.0000000002F14000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2F14000
Size:	12288

Details

Name:	00000002.00000003.777369627.0000000004CA0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CA0000
Size:	4096

Details

Name:	00000000.00000002.1198920852.000000006E413000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E413000
Size:	4096

Details

Name:	00000004.00000002.808082188.00000000062B0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	62B0000
Size:	733184

Details

Name:	00000000.00000002.1199024614.000000006E416000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E416000
Size:	40960

Details

Name:	00000005.00000002.815417070.0000000004AC0000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	4AC0000
Size:	4096

Details

Name:	00000005.00000002.815464868.0000000004BB1000.00000020.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	4BB1000
Size:	45056

Details

Name:	00000000.00000003.1077818206.0000000000E4B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E4B000
Size:	8192

Details

Name:	00000014.00000002.951352021.0000023B95B2A000.00000004.00000020.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	23B95B2A000
Size:	12288

Details

Name:	00000013.00000003.944736246.000002D6C01B4000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C01B4000
Size:	90112

Details

Name:	00000014.00000002.951063326.000000B9463DA000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	B9463DA000
Size:	24576

Details

Name:	00000003.00000002.1197982308.00000000028CB000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28CB000
Size:	12288

Details

Name:	00000004.00000003.807438398.0000000002E77000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E77000
Size:	32768

Details

Name:	00000000.00000000.676903188.0000000000770000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	770000
Size:	102400

Details

Name:	00000005.00000002.815725005.000000007FD70000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FD70000
Size:	4096

Details

Name:	00000003.00000003.1182585098.0000000003041000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3041000
Size:	49152

Details

Name:	00000003.00000003.1045974681.0000000002FC0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FC0000
Size:	12288

Details

Name:	00000004.00000003.807464634.0000000002E80000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E80000
Size:	36864

Details

Name:	00000013.00000003.953514423.000002D6C0192000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0192000
Size:	397312

Details

Name:	00000003.00000002.1197686595.00000000027A9000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27A9000
Size:	4096

Details

Name:	00000010.00000002.922001824.000001FE9CF13000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE9CF13000
Size:	12288

Details

Name:	00000013.00000002.966853837.000002D6BF860000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6BF860000
Size:	4096

Details

Name:	00000003.00000003.1045954779.0000000003031000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3031000
Size:	24576

Details

Name:	0000000D.00000002.889785960.0000029B48190000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	29B48190000
Size:	4096

Details

Name:	00000005.00000002.814881370.00000000029B0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29B0000
Size:	32768

Details

Name:	00000000.00000002.1198893029.000000006E410000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E410000
Size:	4096

Details

Name:	00000013.00000002.968737044.00007FF4F89C4000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F89C4000
Size:	20480

Details

Name:	00000005.00000002.814828606.0000000002986000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2986000
Size:	4096

Details

Name:	00000014.00000002.952495608.00007FF5004EE000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5004EE000
Size:	12288

Details

Name:	00000000.00000002.1198868343.0000000003F40000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3F40000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000002.889806914.00007DF5979A0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5979A0000
Size:	4096

Details

Name:	00000000.00000003.987405770.000000000340A000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	340A000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000002.814838477.0000000002995000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2995000
Size:	20480

Details

Name:	00000003.00000002.1198079737.00000000028FF000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28FF000
Size:	4096

Details

Name:	00000003.00000002.1198104525.0000000002912000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2912000
Size:	8192

Details

Name:	00000010.00000002.922150328.00007FF5A2C36000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A2C36000
Size:	32768

Details

Name:	00000003.00000003.1002951743.000000000303A000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	303A000
Size:	16384

Details

Name:	00000003.00000003.909128123.0000000002FC6000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FC6000
Size:	24576

Details

Name:	00000014.00000002.951410589.0000023B95B51000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	23B95B51000
Size:	53248

Details

Name:	00000003.00000003.1045995544.0000000002FCE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FCE000
Size:	16384

Details

Name:	00000013.00000003.955001922.000002D6C0180000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0180000
Size:	8192

Details

Name:	00000002.00000001.678892524.000000006E410000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E410000
Size:	4096

Details

Name:	00000003.00000002.1198243897.0000000002CAA000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CAA000
Size:	8192

Details

Name:	00000010.00000002.921942159.000001FE9CE70000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE9CE70000
Size:	24576

Details

Name:	00000009.00000002.810250242.00007DF5E3252000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E3252000
Size:	4096

Details

Name:	00000004.00000003.784838856.0000000004740000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4740000
Size:	4096

Details

Name:	00000014.00000002.951485420.0000023B95E15000.00000004.00000040.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	23B95E15000
Size:	8192

Details

Name:	00000013.00000002.967551357.00007DF50DAE2000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50DAE2000
Size:	4096

Details

Name:	00000002.00000003.781388512.0000000004B60000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	4B60000
Size:	4096

Details

Name:	00000005.00000000.704722201.000000007FD80000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FD80000
Size:	12288

Details

Name:	00000004.00000003.774749478.0000000004730000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4730000
Size:	4096

Details

Name:	00000004.00000002.808077574.0000000004BDE000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4BDE000
Size:	8192

Details

Name:	00000009.00000002.810679556.00007FF5CE159000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CE159000
Size:	12288

Details

Name:	00000000.00000002.1198475467.000000000281D000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	281D000
Size:	12288

Details

Name:	00000002.00000002.802647303.00000000032CA000.00000004.00000020.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	32CA000
Size:	106496

Details

Name:	00000004.00000003.784236807.0000000004740000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4740000
Size:	4096

Details

Name:	0000000D.00000002.889412793.0000029B479D0000.00000004.00000040.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	29B479D0000
Size:	4096

Details

Name:	00000010.00000002.921861368.000001FE9CE13000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE9CE13000
Size:	86016

Details

Name:	00000003.00000002.1199552307.00000000059EE000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	59EE000
Size:	8192

Details

Name:	00000003.00000003.1182273794.00000000051E1000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	51E1000
Size:	462848

Details

Name:	00000003.00000003.783185955.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000003.00000003.1047862854.0000000002FD4000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FD4000
Size:	380928

Details

Name:	00000014.00000002.951933416.00007FF5004C8000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5004C8000
Size:	24576

Details

Name:	00000003.00000000.679003294.000000007FAB0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FAB0000
Size:	4096

Details

Name:	00000013.00000003.947944950.000002D6C019B000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C019B000
Size:	65536

Details

Name:	00000013.00000003.953673684.000002D6C0602000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0602000
Size:	794624

Details

Name:	00000003.00000003.1182432239.0000000005BE2000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BE2000
Size:	4096

Details

Name:	00000013.00000002.968852686.00007FF4F89E9000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F89E9000
Size:	32768

Details

Name:	00000000.00000003.1077842376.0000000000E62000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E62000
Size:	36864

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000002.00000003.748215501.00000000032F2000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	32F2000
Size:	28672

Details

Name:	00000003.00000003.785173818.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000003.00000002.1199570101.0000000005A6F000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5A6F000
Size:	4096

Details

Name:	00000010.00000002.922159107.00007FF5A2C45000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A2C45000
Size:	4096

Details

Name:	00000000.00000003.897639771.0000000000EFE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	EFE000
Size:	4096

Details

Name:	00000005.00000002.815494145.0000000006730000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6730000
Size:	733184

Details

Name:	00000013.00000002.968486043.00007FF4F894F000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F894F000
Size:	8192

Details

Name:	00000014.00000002.951809032.00007FF5004BC000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5004BC000
Size:	4096

Details

Name:	00000013.00000003.946230544.000002D6C0193000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0193000
Size:	16384

Details

Name:	00000005.00000002.815048378.0000000002A62000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A62000
Size:	12288

Details

Name:	00000003.00000002.1198055022.00000000028EF000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28EF000
Size:	8192

Details

Name:	00000004.00000003.779348487.0000000004730000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4730000
Size:	4096

Details

Name:	00000014.00000002.951101461.000000B94677A000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	B94677A000
Size:	24576

Details

Name:	00000009.00000002.810630851.00007FF5CE13F000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CE13F000
Size:	8192

Details

Name:	00000010.00000002.922070773.00007DF5B81E2000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5B81E2000
Size:	4096

Details

Name:	00000013.00000002.967497329.000002D6C0191000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0191000
Size:	12288

Details

Name:	00000013.00000002.968826618.00007FF4F89E6000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F89E6000
Size:	8192

Details

Name:	00000004.00000000.694482753.000000007FF70000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF70000
Size:	12288

Details

Name:	00000014.00000002.951476615.0000023B95E10000.00000004.00000040.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	23B95E10000
Size:	12288

Details

Name:	00000013.00000002.968388898.00007FF4F88D4000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F88D4000
Size:	4096

Details

Name:	00000010.00000002.921981845.000001FE9CF02000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE9CF02000
Size:	16384

Details

Name:	00000003.00000003.1093320506.0000000003046000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3046000
Size:	4096

Details

Name:	00000010.00000002.922053848.00007DF4B60B0000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4B60B0000
Size:	20480

Details

Name:	00000000.00000003.1032411463.000000000340C000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	340C000
Size:	4096

Details

Name:	00000003.00000002.1197629642.000000000275A000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	275A000
Size:	24576

Details

Name:	00000002.00000002.802946844.000000007F902000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F902000
Size:	4096

Details

Name:	00000014.00000002.952241952.00007FF5004D4000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5004D4000
Size:	4096

Details

Name:	00000004.00000003.807402252.0000000002E77000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E77000
Size:	32768

Details

Name:	00000010.00000002.922621814.00007FF5A30E9000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A30E9000
Size:	12288

Details

Name:	00000010.00000002.922630193.00007FF5A30ED000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A30ED000
Size:	16384

Details

Name:	00000013.00000003.942099961.000002D6C018A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C018A000
Size:	106496

Details

Name:	00000000.00000002.1197995188.0000000000E0B000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	E0B000
Size:	270336

Details

Name:	00000009.00000002.810104112.00000218D326E000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	218D326E000
Size:	57344

Details

Name:	00000002.00000003.777068007.0000000004CA0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CA0000
Size:	4096

Details

Name:	00000005.00000003.774748078.0000000004AD0000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	4AD0000
Size:	4096

Details

Name:	00000003.00000003.1137210097.000000000304C000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	304C000
Size:	36864

Details

Name:	00000004.00000003.785313255.0000000004740000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4740000
Size:	4096

Details

Name:	00000000.00000000.676940449.000000007F6A2000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F6A2000
Size:	4096

Details

Name:	00000003.00000003.1137295815.0000000002FCE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FCE000
Size:	16384

Details

Name:	00000002.00000003.777973712.0000000004CA0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CA0000
Size:	4096

Details

Name:	00000003.00000002.1199462516.00000000050EC000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	50EC000
Size:	16384

Details

Name:	00000013.00000002.968668980.00007FF4F899F000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F899F000
Size:	16384

Details

Name:	00000003.00000002.1199648944.0000000005C70000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5C70000
Size:	4096

Details

Name:	00000003.00000003.1091016252.0000000002FCE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FCE000
Size:	16384

Details

Name:	00000013.00000003.946477396.000002D6C018B000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C018B000
Size:	32768

Details

Name:	00000013.00000002.966505724.000000F42C178000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F42C178000
Size:	32768

Details

Name:	00000003.00000003.1184072163.0000000003069000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3069000
Size:	4096

Details

Name:	0000000D.00000002.890081880.00007FF58282A000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58282A000
Size:	8192

Details

Name:	00000002.00000002.802570352.000000000306A000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	306A000
Size:	24576

Details

Name:	0000000D.00000002.889504276.0000029B47B10000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29B47B10000
Size:	16384

Details

Name:	00000000.00000002.1197724310.0000000000968000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	968000
Size:	4096

Details

Name:	00000004.00000002.807914381.0000000002C40000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C40000
Size:	4096

Details

Name:	00000000.00000002.1197676727.00000000007CC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7CC000
Size:	16384

Details

Name:	00000014.00000002.951495577.0000023B95E20000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	23B95E20000
Size:	36864

Details

Name:	00000013.00000003.943439405.000002D6C019D000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C019D000
Size:	126976

Details

Name:	00000003.00000003.866072721.0000000003037000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3037000
Size:	8192

Details

Name:	00000003.00000003.866081482.0000000003033000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3033000
Size:	16384

Details

Name:	00000009.00000002.810643690.00007FF5CE148000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CE148000
Size:	12288

Details

Name:	00000013.00000003.947235101.000002D6C0188000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0188000
Size:	4096

Details

Name:	00000013.00000002.968759226.00007FF4F89CF000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F89CF000
Size:	8192

Details

Name:	00000003.00000002.1198875794.0000000003520000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3520000
Size:	69632

Details

Name:	00000003.00000002.1200207074.000000006E481000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6E481000
Size:	8192

Details

Name:	00000000.00000002.1198271445.0000000000ED4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	ED4000
Size:	40960

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000002.00000002.802504423.0000000002B2B000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B2B000
Size:	49152

Details

Name:	0000000D.00000003.889088502.0000029B47C4E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	29B47C4E000
Size:	135168

Details

Name:	00000010.00000003.921336867.000001FE9CE77000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE9CE77000
Size:	32768

Details

Name:	00000010.00000002.921698214.000000F74309B000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F74309B000
Size:	20480

Details

Name:	00000003.00000000.678996929.000000007FAA0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FAA0000
Size:	4096

Details

Name:	00000014.00000002.951467132.0000023B95DA0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	23B95DA0000
Size:	4096

Details

Name:	00000003.00000003.1002958936.0000000003040000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3040000
Size:	24576

Details

Name:	00000013.00000003.954341761.000002D6C0194000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0194000
Size:	4096

Details

Name:	00000013.00000000.937487238.00007DF50DAE0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50DAE0000
Size:	4096

Details

Name:	00000003.00000003.742737500.0000000002F60000.00000040.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	2F60000
Size:	4096

Details

Name:	00000010.00000002.922038021.000001FE9D380000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FE9D380000
Size:	4096

Details

Name:	00000003.00000003.821231271.00000000055DC000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55DC000
Size:	4096

Details

Name:	00000014.00000002.951553897.00007DF515610000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF515610000
Size:	4096

Details

Name:	00000013.00000003.942278979.000002D6C0187000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0187000
Size:	12288

Details

Name:	00000005.00000002.814782874.000000000289C000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	289C000
Size:	4096

Details

Name:	00000013.00000003.946454220.000002D6C0184000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0184000
Size:	4096

Details

Name:	00000013.00000002.968984208.00007FF4F8A5A000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F8A5A000
Size:	12288

Details

Name:	00000003.00000003.821250829.00000000055DB000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55DB000
Size:	4096

Details

Name:	00000013.00000003.947045910.000002D6C0188000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0188000
Size:	61440

Details

Name:	00000003.00000003.780550969.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000013.00000002.967225877.000002D6BFE80000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D6BFE80000
Size:	8192

Details

Name:	00000000.00000003.1167034940.000000000340D000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	340D000
Size:	4096

Details

Name:	00000003.00000002.1197744566.00000000027CA000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27CA000
Size:	4096

Details

Name:	00000000.00000003.852258992.0000000000ECD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	ECD000
Size:	204800

Details

Name:	00000005.00000002.815237284.000000000309F000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	309F000
Size:	4096

Details

Name:	00000013.00000002.967404251.000002D6C0159000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0159000
Size:	12288

Details

Name:	00000014.00000002.951659294.00007FF4FFDE7000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FFDE7000
Size:	4096

Details

Name:	00000004.00000002.807983362.0000000002E40000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2E40000
Size:	8192

Details

Name:	00000004.00000003.783029347.0000000004740000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4740000
Size:	4096

Details

Name:	00000010.00000000.910060043.00007DF5B81F2000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5B81F2000
Size:	4096

Details

Name:	00000013.00000003.948303985.000002D6C018D000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C018D000
Size:	32768

Details

Name:	00000005.00000002.814794509.0000000002952000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2952000
Size:	4096

Details

Name:	00000000.00000002.1199337906.000000007F6A2000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F6A2000
Size:	4096

Details

Name:	0000000D.00000002.890034350.00007FF58277D000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58277D000
Size:	20480

Details

Name:	00000010.00000003.921403924.000001FE9CE4C000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE9CE4C000
Size:	8192

Details

Name:	00000003.00000002.1197675063.00000000027A4000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27A4000
Size:	12288

Details

Name:	00000009.00000002.810546042.00007FF5CE0EB000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CE0EB000
Size:	45056

Details

Name:	00000010.00000002.922495723.00007FF5A30A7000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A30A7000
Size:	28672

Details

Name:	00000003.00000002.1199481429.000000000516B000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	516B000
Size:	20480

Details

Name:	00000000.00000002.1198786778.0000000003C1C000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3C1C000
Size:	16384

Details

Name:	00000000.00000000.676922715.000000007F690000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F690000
Size:	4096

Details

Name:	00000003.00000003.1091094448.0000000003037000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3037000
Size:	8192

Details

Name:	00000009.00000002.809859143.0000003CA1D7D000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3CA1D7D000
Size:	12288

Details

Name:	00000002.00000003.773853762.0000000004CA0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CA0000
Size:	4096

Details

Name:	00000003.00000001.679359859.000000006E410000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E410000
Size:	4096

Details

Name:	00000004.00000002.807651080.00000000023EC000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	23EC000
Size:	4096

Details

Name:	0000000D.00000002.889461089.0000029B47A00000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29B47A00000
Size:	12288

Details

Name:	00000003.00000003.911659371.00000000055DA000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55DA000
Size:	4096

Details

Name:	00000000.00000003.987341530.0000000000ECF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	ECF000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000009.00000002.810405929.00007FF5CDFC1000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CDFC1000
Size:	4096

Details

Name:	00000002.00000003.802031184.00000000050C8000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	50C8000
Size:	4096

Details

Name:	00000003.00000002.1198173110.0000000002974000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2974000
Size:	28672

Details

Name:	00000003.00000002.1198062252.00000000028F3000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28F3000
Size:	12288

Details

Name:	00000013.00000003.956943687.000002D6C0192000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0192000
Size:	8192

Details

Name:	00000000.00000002.1199244906.000000006E48E000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6E48E000
Size:	4096

Details

Name:	00000004.00000000.694079203.000000007FF62000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF62000
Size:	4096

Details

Name:	00000014.00000002.951563220.00007DF515612000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF515612000
Size:	4096

Details

Name:	00000003.00000003.1091101853.000000000303A000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	303A000
Size:	16384

Details

Name:	00000014.00000002.951319653.0000023B95B27000.00000004.00000020.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	23B95B27000
Size:	8192

Details

Name:	00000003.00000003.775762337.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000004.00000002.807921605.0000000002C50000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2C50000
Size:	20480

Details

Name:	00000013.00000003.966046471.000002D6BF865000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6BF865000
Size:	12288

Details

Name:	00000004.00000002.808183266.000000007FF50000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50000
Size:	4096

Details

Name:	00000000.00000002.1198322196.0000000001100000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1100000
Size:	69632

Details

Name:	00000004.00000003.776707645.0000000004730000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4730000
Size:	4096

Details

Name:	00000003.00000003.784707319.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000010.00000002.922079191.00007DF5B81F0000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5B81F0000
Size:	4096

Details

Name:	00000002.00000002.802930619.000000007F800000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F800000
Size:	20480

Details

Name:	00000010.00000002.921712459.000000F74311E000.00000004.00000010.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F74311E000
Size:	8192

Details

Name:	00000005.00000002.815428093.0000000004B4E000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4B4E000
Size:	8192

Details

Name:	00000000.00000003.852195427.0000000003F41000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3F41000
Size:	585728

Details

Name:	00000003.00000002.1198634259.00000000030B1000.00000020.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	30B1000
Size:	45056

Details

Name:	00000005.00000000.704686276.0000000002CE0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CE0000
Size:	102400

Details

Name:	00000009.00000003.809680244.00000218D324B000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	218D324B000
Size:	20480

Details

Name:	00000009.00000002.810064415.00000218D3247000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	218D3247000
Size:	16384

Details

Name:	00000002.00000003.783565088.0000000004B60000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	4B60000
Size:	4096

Details

Name:	00000002.00000003.802080572.00000000032F0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	32F0000
Size:	4096

Details

Name:	00000004.00000000.693676655.000000007FF52000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52000
Size:	4096

Details

Name:	00000002.00000003.748205201.00000000032F9000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	32F9000
Size:	86016

Details

Name:	00000000.00000003.850543008.0000000000ECA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	ECA000
Size:	8192

Details

Name:	00000003.00000002.1199561481.0000000005A2E000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5A2E000
Size:	8192

Details

Name:	00000009.00000000.798581424.00007FF5CE1D2000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CE1D2000
Size:	16384

Details

Name:	00000000.00000002.1198284995.0000000000EFE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	EFE000
Size:	4096

Details

Name:	00000003.00000002.1198336922.0000000002EB0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2EB0000
Size:	4096

Details

Name:	0000000D.00000002.890049782.00007FF582794000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF582794000
Size:	4096

Details

Name:	00000005.00000002.815460245.0000000004BB0000.00000004.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	4BB0000
Size:	4096

Details

Name:	00000013.00000003.946504101.000002D6C018B000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C018B000
Size:	32768

Details

Name:	00000000.00000003.807541051.0000000003389000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3389000
Size:	45056

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000002.1198474164.0000000002FC6000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2FC6000
Size:	24576

Details

Name:	00000002.00000003.785172707.0000000004B60000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	4B60000
Size:	4096

Details

Name:	00000013.00000002.968284750.00007FF4F886B000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F886B000
Size:	8192

Details

Name:	00000010.00000002.921792992.000001FE9CC10000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FE9CC10000
Size:	102400

Details

Name:	00000003.00000003.757177149.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000003.00000003.1002935150.0000000003069000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3069000
Size:	4096

Details

Name:	00000003.00000003.1001137468.000000000304C000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	304C000
Size:	4096

Details

Name:	00000000.00000003.1165284342.0000000003F41000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3F41000
Size:	466944

Details

Name:	00000004.00000000.693476164.000000007FF50000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50000
Size:	4096

Details

Name:	0000000D.00000002.890282569.00007FF582898000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF582898000
Size:	12288

Details

Name:	00000010.00000002.922523974.00007FF5A30BA000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A30BA000
Size:	20480

Details

Name:	00000003.00000003.781707129.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000000.00000003.807569573.000000000340A000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	340A000
Size:	4096

Details

Name:	00000000.00000002.1197709719.0000000000964000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	964000
Size:	8192

Details

Name:	00000010.00000002.922468179.00007FF5A309F000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A309F000
Size:	16384

Details

Name:	00000003.00000003.1182443456.0000000003055000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3055000
Size:	86016

Details

Name:	00000010.00000002.922688501.00007FF5A3161000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A3161000
Size:	20480

Details

Name:	00000013.00000000.937551572.00007DF50DB00000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50DB00000
Size:	12288

Details

Name:	00000000.00000002.1197641207.0000000000770000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	770000
Size:	102400

Details

Name:	00000002.00000002.802582500.00000000030B0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	30B0000
Size:	16384

Details

Name:	0000000D.00000002.889396539.0000029B479C0000.00000004.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	29B479C0000
Size:	4096

Details

Name:	00000013.00000003.945913876.000002D6C018C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C018C000
Size:	294912

Details

Name:	0000000D.00000002.889437948.0000029B479E0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29B479E0000
Size:	102400

Details

Name:	00000003.00000002.1199863324.000000006E415000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6E415000
Size:	4096

Details

Name:	00000002.00000002.802472080.0000000002AFD000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AFD000
Size:	4096

Details

Name:	00000010.00000002.921743040.000000F74367E000.00000004.00000010.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F74367E000
Size:	8192

Details

Name:	00000000.00000003.1077908379.0000000000ECF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	ECF000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000002.00000003.763538282.0000000004CA0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CA0000
Size:	4096

Details

Name:	00000002.00000003.801985705.0000000004CD0000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4CD0000
Size:	4096

Details

Name:	00000002.00000003.778273868.0000000004CA0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CA0000
Size:	4096

Details

Name:	00000000.00000002.1198841322.0000000003EAC000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3EAC000
Size:	16384

Details

Name:	00000003.00000003.763537904.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	0000000D.00000002.889629912.0000029B47C55000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	29B47C55000
Size:	106496

Details

Name:	00000005.00000002.814979391.00000000029F6000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29F6000
Size:	16384

Details

Name:	00000013.00000003.948151604.000002D6C018A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C018A000
Size:	4096

Details

Name:	00000004.00000002.807817915.00000000028FF000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	28FF000
Size:	12288

Details

Name:	00000003.00000002.1198810322.0000000003310000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3310000
Size:	20480

Details

Name:	00000013.00000000.937500190.00007DF50DAE2000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50DAE2000
Size:	4096

Details

Name:	00000005.00000001.706739495.000000006E410000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E410000
Size:	4096

Details

Name:	00000009.00000002.810713117.00007FF5CE1D1000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CE1D1000
Size:	20480

Details

Name:	00000002.00000003.764174521.0000000004CA0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CA0000
Size:	4096

Details

Name:	00000003.00000003.864305879.0000000002FC6000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FC6000
Size:	24576

Details

Name:	00000003.00000002.1197885157.00000000028A2000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28A2000
Size:	8192

Details

Name:	00000002.00000002.802676183.00000000032F0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	32F0000
Size:	4096

Details

Name:	00000003.00000003.1137284707.0000000002FC6000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FC6000
Size:	24576

Details

Name:	00000003.00000002.1198028134.00000000028E5000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28E5000
Size:	4096

Details

Name:	00000005.00000002.815646431.0000000006DD0000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	6DD0000
Size:	4096

Details

Name:	00000010.00000003.921359302.000001FE9CE50000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE9CE50000
Size:	126976

Details

Name:	00000005.00000002.815007203.0000000002A41000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A41000
Size:	12288

Details

Name:	00000005.00000003.814511835.0000000004BD0000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4BD0000
Size:	4096

Details

Name:	00000003.00000003.771274907.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000003.00000003.821259018.00000000055DA000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55DA000
Size:	4096

Details

Name:	00000002.00000002.802555870.0000000003010000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3010000
Size:	102400

Details

Name:	00000000.00000003.1167096982.0000000003081000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3081000
Size:	4096

Details

Name:	00000003.00000003.1001067847.0000000003069000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3069000
Size:	4096

Details

Name:	00000003.00000003.911430857.0000000003069000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3069000
Size:	4096

Details

Name:	00000003.00000002.1198399192.0000000002F60000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2F60000
Size:	4096

Details

Name:	00000002.00000000.678538480.0000000002BA3000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2BA3000
Size:	16384

Details

Name:	00000013.00000003.945151063.000002D6C0197000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0197000
Size:	32768

Details

Name:	00000013.00000002.967305752.000002D6C0100000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0100000
Size:	73728

Details

Name:	00000000.00000003.804909705.0000000003000000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3000000
Size:	4096

Details

Name:	00000003.00000003.780249665.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000000.00000003.807529135.0000000000EC9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	EC9000
Size:	16384

Details

Name:	00000004.00000002.807646007.00000000023D7000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	23D7000
Size:	12288

Details

Name:	00000002.00000002.802886712.00000000069D0000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	69D0000
Size:	8192

Details

Name:	00000010.00000002.921776040.000000F74397E000.00000004.00000010.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F74397E000
Size:	8192

Details

Name:	00000003.00000003.909139905.0000000002FCE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FCE000
Size:	16384

Details

Name:	00000005.00000002.815489497.0000000004FE0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4FE0000
Size:	4096

Details

Name:	00000002.00000002.802577181.00000000030AB000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	30AB000
Size:	20480

Details

Name:	00000005.00000002.815355201.00000000032A0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	32A0000
Size:	36864

Details

Name:	00000010.00000002.922305437.00007FF5A305A000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A305A000
Size:	4096

Details

Name:	00000010.00000002.922275715.00007FF5A2FD4000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A2FD4000
Size:	4096

Details

Name:	0000000D.00000002.890027091.00007FF58272E000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58272E000
Size:	4096

Details

Name:	00000004.00000003.780259123.0000000004730000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4730000
Size:	4096

Details

Name:	00000003.00000002.1197716912.00000000027BC000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27BC000
Size:	4096

Details

Name:	00000000.00000003.1122299567.000000000340C000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	340C000
Size:	4096

Details

Name:	00000003.00000003.1047823496.0000000003040000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3040000
Size:	24576

Details

Name:	00000013.00000003.947070126.000002D6C01BD000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C01BD000
Size:	81920

Details

Name:	00000003.00000002.1200392789.000000006E491000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E491000
Size:	16384

Details

Name:	00000002.00000003.766787460.0000000004CA0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CA0000
Size:	4096

Details

Name:	00000002.00000003.759724404.00000000032B0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	32B0000
Size:	4096

Details

Name:	00000005.00000002.815129627.0000000002D3A000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D3A000
Size:	24576

Details

Name:	00000004.00000002.808043498.00000000045DF000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	45DF000
Size:	4096

Details

Name:	00000000.00000002.1197687070.00000000007D0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7D0000
Size:	16384

Details

Name:	00000013.00000002.967387007.000002D6C014B000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C014B000
Size:	53248

Details

Name:	00000009.00000002.810474575.00007FF5CE044000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CE044000
Size:	4096

Details

Name:	00000002.00000002.802753311.0000000004BDE000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4BDE000
Size:	8192

Details

Name:	00000002.00000003.779914632.0000000004CA0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CA0000
Size:	4096

Details

Name:	0000000D.00000002.890115181.00007FF58283B000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58283B000
Size:	45056

Details

Name:	00000014.00000000.938721757.0000023B95960000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	23B95960000
Size:	102400

Details

Name:	00000010.00000002.922063586.00007DF5B81E0000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5B81E0000
Size:	4096

Details

Name:	00000004.00000002.807848841.0000000002A30000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A30000
Size:	102400

Details

Name:	00000003.00000002.1198187305.000000000297C000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	297C000
Size:	12288

Details

Name:	00000003.00000003.766786888.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000013.00000003.941269542.000002D6C015E000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C015E000
Size:	4096

Details

Name:	00000010.00000002.922385585.00007FF5A3070000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A3070000
Size:	16384

Details

Name:	00000013.00000003.944117283.000002D6C017D000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C017D000
Size:	4096

Details

Name:	00000003.00000002.1198348421.0000000002F00000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2F00000
Size:	8192

Details

Name:	00000010.00000002.922164848.00007FF5A2D4A000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A2D4A000
Size:	4096

Details

Name:	00000004.00000003.768176834.0000000002E00000.00000040.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	2E00000
Size:	4096

Details

Name:	00000013.00000003.942204214.000002D6C01C7000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C01C7000
Size:	114688

Details

Name:	00000005.00000002.815478774.0000000004BBD000.00000004.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	4BBD000
Size:	8192

Details

Name:	00000013.00000002.968472337.00007FF4F8944000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F8944000
Size:	16384

Details

Name:	00000003.00000003.759723846.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000013.00000002.967862857.00007FF4F844E000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F844E000
Size:	12288

Details

Name:	00000005.00000002.815730969.000000007FD72000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FD72000
Size:	4096

Details

Name:	00000003.00000003.909119970.0000000002FC0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FC0000
Size:	12288

Details

Name:	00000005.00000002.814755724.000000000284C000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	284C000
Size:	4096

Details

Name:	00000014.00000002.952508447.00007FF5004F8000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5004F8000
Size:	12288

Details

Name:	00000003.00000003.956891484.0000000005B71000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B71000
Size:	970752

Details

Name:	00000003.00000003.821090747.0000000003038000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3038000
Size:	8192

Details

Name:	00000013.00000003.943918216.000002D6C018C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C018C000
Size:	4096

Details

Name:	0000000D.00000002.889771368.0000029B48180000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29B48180000
Size:	4096

Details

Name:	00000013.00000002.966909474.000002D6BF889000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6BF889000
Size:	188416

Details

Name:	00000005.00000002.814820189.0000000002982000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2982000
Size:	8192

Details

Name:	00000013.00000002.966651641.000002D6BF7E0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D6BF7E0000
Size:	16384

Details

Name:	00000003.00000003.1002993893.00000000055DA000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55DA000
Size:	4096

Details

Name:	00000003.00000003.1090979675.0000000003040000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3040000
Size:	24576

Details

Name:	00000014.00000002.951165555.000000B94687F000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	B94687F000
Size:	4096

Details

Name:	00000004.00000002.807712448.00000000024F3000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24F3000
Size:	28672

Details

Name:	00000002.00000003.772547001.0000000004CA0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CA0000
Size:	4096

Details

Name:	00000013.00000002.967848331.00007FF4F82C7000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F82C7000
Size:	4096

Details

Name:	00000003.00000003.1184038490.0000000003049000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3049000
Size:	49152

Details

Name:	00000000.00000002.1198709994.000000000389E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	389E000
Size:	8192

Details

Name:	0000000D.00000002.890076270.00007FF58281C000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58281C000
Size:	8192

Details

Name:	00000014.00000000.938789555.00007DF515612000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF515612000
Size:	4096

Details

Name:	00000003.00000002.1197899779.00000000028A6000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28A6000
Size:	4096

Details

Name:	00000000.00000002.1199328469.000000007F6A0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F6A0000
Size:	4096

Details

Name:	00000009.00000002.810686836.00007FF5CE15D000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CE15D000
Size:	16384

Details

Name:	00000003.00000003.1001098880.000000000303A000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	303A000
Size:	8192

Details

Name:	00000002.00000000.678579263.000000007F920000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F920000
Size:	12288

Details

Name:	00000004.00000002.807688719.00000000024D6000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24D6000
Size:	4096

Details

Name:	00000013.00000002.967211542.000002D6BFE60000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6BFE60000
Size:	4096

Details

Name:	00000003.00000003.821071485.0000000003038000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3038000
Size:	8192

Details

Name:	00000013.00000003.956915062.000002D6C017A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C017A000
Size:	8192

Details

Name:	00000003.00000003.911521686.0000000002FC0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FC0000
Size:	12288

Details

Name:	00000013.00000002.967600781.00007DF50DB00000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50DB00000
Size:	12288

Details

Name:	00000014.00000002.951076353.000000B94667E000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	B94667E000
Size:	8192

Details

Name:	00000005.00000002.814769591.0000000002878000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2878000
Size:	12288

Details

Name:	00000003.00000002.1198747634.00000000031D0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	31D0000
Size:	4096

Details

Name:	00000002.00000002.802396197.0000000002ABB000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2ABB000
Size:	4096

Details

Name:	00000014.00000002.952666572.00007FF50057A000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50057A000
Size:	12288

Details

Name:	00000002.00000002.802388973.0000000002AB6000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AB6000
Size:	4096

Details

Name:	00000003.00000002.1200003309.000000006E45E000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E45E000
Size:	143360

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to development resources	System Summary
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000002.00000002.802411589.0000000002AD3000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AD3000
Size:	28672

Details

Name:	00000004.00000003.785542467.0000000004740000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4740000
Size:	4096

Details

Name:	00000002.00000002.802483042.0000000002B0A000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B0A000
Size:	16384

Details

Name:	00000010.00000002.921821936.000001FE9CC60000.00000004.00000020.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1FE9CC60000
Size:	8192

Details

Name:	00000010.00000002.922169962.00007FF5A2DE7000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A2DE7000
Size:	8192

Details

Name:	00000005.00000003.774845150.00000000030F2000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	30F2000
Size:	28672

Details

Name:	00000013.00000002.968724245.00007FF4F89BA000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F89BA000
Size:	20480

Details

Name:	00000004.00000002.807949493.0000000002DE0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DE0000
Size:	4096

Details

Name:	00000013.00000003.952346094.000002D6C0195000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0195000
Size:	32768

Details

Name:	00000013.00000002.968019661.00007FF4F87A4000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F87A4000
Size:	4096

Details

Name:	0000000D.00000002.890337617.00007FF582914000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF582914000
Size:	20480

Details

Name:	00000005.00000002.814799721.0000000002969000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2969000
Size:	12288

Details

Name:	00000003.00000002.1200437394.000000007F9A0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F9A0000
Size:	20480

Details

Name:	00000013.00000002.968238512.00007FF4F8831000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F8831000
Size:	8192

Details

Name:	0000000D.00000002.889977946.00007FF58250A000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58250A000
Size:	4096

Details

Name:	00000003.00000002.1197798795.00000000027D5000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27D5000
Size:	12288

Details

Name:	00000013.00000003.954170352.000002D6C019B000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C019B000
Size:	16384

Details

Name:	00000013.00000002.968420196.00007FF4F8910000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F8910000
Size:	4096

Details

Name:	00000002.00000003.802139519.00000000032F2000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	32F2000
Size:	28672

Details

Name:	00000005.00000002.815370017.00000000034A0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	34A0000
Size:	69632

Details

Name:	00000009.00000002.810309334.00007FF5CD950000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CD950000
Size:	4096

Details

Name:	00000000.00000003.942408250.0000000003F41000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3F41000
Size:	589824

Details

Name:	00000009.00000002.809902944.0000003CA217E000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3CA217E000
Size:	8192

Details

Name:	00000003.00000002.1199490581.00000000051AD000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	51AD000
Size:	12288

Details

Name:	00000009.00000002.810126533.00000218D328A000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	218D328A000
Size:	8192

Details

Name:	00000000.00000001.711594617.000000006E410000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E410000
Size:	4096

Details

Name:	00000002.00000003.760992957.00000000032B0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	32B0000
Size:	4096

Details

Name:	00000010.00000002.921907050.000001FE9CE4A000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE9CE4A000
Size:	4096

Details

Name:	00000014.00000002.951238244.0000023B95980000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	23B95980000
Size:	12288

Details

Name:	00000003.00000003.816866039.0000000002FC7000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FC7000
Size:	40960

Details

Name:	00000002.00000002.802359221.00000000029E5000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29E5000
Size:	12288

Details

Name:	00000013.00000002.966729870.000002D6BF813000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6BF813000
Size:	86016

Details

Name:	00000000.00000002.1199270402.000000006E491000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E491000
Size:	16384

Details

Name:	0000000D.00000002.890293722.00007FF58289E000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58289E000
Size:	16384

Details

Name:	00000003.00000003.764174151.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000013.00000003.945851289.000002D6C018C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C018C000
Size:	61440

Details

Name:	00000003.00000003.1001113745.000000000303D000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	303D000
Size:	4096

Details

Name:	0000000D.00000002.889366733.000000FFE537F000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	FFE537F000
Size:	4096

Details

Name:	00000013.00000003.942288780.000002D6C0602000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0602000
Size:	114688

Details

Name:	00000003.00000000.679007353.000000007FAB2000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FAB2000
Size:	4096

Details

Name:	00000014.00000002.951396990.0000023B95B47000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	23B95B47000
Size:	36864

Details

Name:	00000005.00000002.815200662.0000000002F18000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2F18000
Size:	4096

Details

Name:	00000009.00000002.810152839.00000218D3302000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	218D3302000
Size:	16384

Details

Name:	00000013.00000003.943838011.000002D6C0178000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0178000
Size:	4096

Details

Name:	00000013.00000003.939653154.000002D6BFF20000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6BFF20000
Size:	4096

Details

Name:	00000013.00000002.966413352.000000F42BCF7000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F42BCF7000
Size:	36864

Details

Name:	00000000.00000003.987306999.0000000000ED4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	ED4000
Size:	40960

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000002.00000002.802881627.00000000069AD000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	69AD000
Size:	12288

Details

Name:	00000010.00000002.922581596.00007FF5A30D8000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A30D8000
Size:	12288

Details

Name:	00000000.00000003.776868974.0000000000C70000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C70000
Size:	4096

Details

Name:	00000013.00000003.954234409.000002D6C0194000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0194000
Size:	4096

Details

Name:	00000013.00000002.966874469.000002D6BF867000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6BF867000
Size:	4096

Details

Name:	00000013.00000003.946359814.000002D6C017C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C017C000
Size:	8192

Details

Name:	00000003.00000002.1197695751.00000000027AC000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27AC000
Size:	16384

Details

Name:	00000004.00000003.807396198.0000000002E97000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E97000
Size:	4096

Details

Name:	00000002.00000003.765447257.0000000004CA0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CA0000
Size:	4096

Details

Name:	00000002.00000002.802302100.0000000000F24000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	F24000
Size:	12288

Details

Name:	0000000D.00000002.889342611.000000FFE5277000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	FFE5277000
Size:	36864

Details

Name:	00000003.00000003.783802963.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000003.00000002.1198382906.0000000002F40000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2F40000
Size:	4096

Details

Name:	00000009.00000002.810176863.00000218D3313000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	218D3313000
Size:	12288

Details

Name:	00000004.00000003.775399389.0000000004730000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4730000
Size:	4096

Details

Name:	00000013.00000002.968261090.00007FF4F8851000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F8851000
Size:	4096

Details

Name:	00000002.00000003.780517477.0000000004B60000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	4B60000
Size:	4096

Details

Name:	00000000.00000002.1198375887.0000000001290000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1290000
Size:	344064

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	00000014.00000002.951680976.00007FF500490000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF500490000
Size:	16384

Details

Name:	00000009.00000002.809991755.00000218D31E0000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	218D31E0000
Size:	4096

Details

Name:	00000013.00000002.968375090.00007FF4F88C3000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F88C3000
Size:	24576

Details

Name:	00000003.00000003.1047815257.000000000303A000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	303A000
Size:	16384

Details

Name:	00000000.00000002.1198516313.000000000299E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	299E000
Size:	8192

Details

Name:	00000003.00000003.1046005358.0000000002FD4000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FD4000
Size:	380928

Details

Name:	00000003.00000002.1199658231.000000006E410000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E410000
Size:	4096

Details

Name:	00000013.00000002.966687694.000002D6BF800000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6BF800000
Size:	73728

Details

Name:	00000005.00000002.814992573.00000000029FB000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29FB000
Size:	49152

Details

Name:	00000013.00000002.966950342.000002D6BF8C2000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6BF8C2000
Size:	24576

Details

Name:	00000002.00000002.802634933.00000000032A0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	32A0000
Size:	4096

Details

Name:	00000003.00000003.766083143.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000013.00000003.939660060.000002D6BFF20000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6BFF20000
Size:	4096

Details

Name:	00000013.00000003.947061568.000002D6C0199000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0199000
Size:	4096

Details

Name:	00000013.00000003.943563238.000002D6C019D000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C019D000
Size:	126976

Details

Name:	00000002.00000002.802525653.0000000002B84000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B84000
Size:	28672

Details

Name:	00000004.00000000.690864267.00000000025C3000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	25C3000
Size:	16384

Details

Name:	00000000.00000002.1199259646.000000006E490000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6E490000
Size:	4096

Details

Name:	00000009.00000002.809836177.0000003CA1C7B000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3CA1C7B000
Size:	20480

Details

Name:	00000003.00000002.1198678640.00000000030BD000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	30BD000
Size:	8192

Details

Name:	0000000D.00000002.890005684.00007FF5826F1000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5826F1000
Size:	8192

Details

Name:	00000013.00000002.966470319.000000F42BF7E000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F42BF7E000
Size:	8192

Details

Name:	00000003.00000003.1001169686.0000000002FCE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FCE000
Size:	16384

Details

Name:	00000003.00000003.760357202.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000005.00000002.814963965.00000000029E1000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29E1000
Size:	16384

Details

Name:	00000005.00000002.815474287.0000000004BBC000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	4BBC000
Size:	4096

Details

Name:	00000003.00000003.783503153.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000013.00000003.954975014.000002D6C01C9000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C01C9000
Size:	61440

Details

Name:	00000009.00000002.810508843.00007FF5CE0DA000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CE0DA000
Size:	8192

Details

Name:	00000000.00000003.1032553277.0000000000ECE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	ECE000
Size:	8192

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000002.00000003.767422949.0000000004CA0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CA0000
Size:	4096

Details

Name:	0000000D.00000002.889566284.0000029B47C2A000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	29B47C2A000
Size:	69632

Details

Name:	00000000.00000003.1167083592.0000000003011000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3011000
Size:	40960

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000010.00000002.921840271.000001FE9CD60000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE9CD60000
Size:	4096

Details

Name:	00000013.00000003.950478601.000002D6C0602000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0602000
Size:	159744

Details

Name:	00000003.00000003.1184140255.00000000055DA000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55DA000
Size:	4096

Details

Name:	0000000D.00000002.890226344.00007FF58287A000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58287A000
Size:	20480

Details

Name:	00000002.00000003.762265657.0000000004CA0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CA0000
Size:	4096

Details

Name:	00000000.00000003.987332902.0000000000EFE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	EFE000
Size:	4096

Details

Name:	00000003.00000003.909148100.0000000002FD4000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FD4000
Size:	380928

Details

Name:	00000002.00000003.743974001.0000000003260000.00000040.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page execute and read and write
Base address:	3260000
Size:	4096

Details

Name:	0000000D.00000002.890021002.00007FF58272B000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58272B000
Size:	8192

Details

Name:	00000004.00000002.807718360.00000000024FC000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24FC000
Size:	8192

Details

Name:	00000003.00000003.816857093.0000000002FC0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FC0000
Size:	4096

Details

Name:	00000002.00000003.802133634.00000000032F0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	32F0000
Size:	4096

Details

Name:	00000003.00000003.781390934.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000003.00000002.1200520466.000000007FAC0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FAC0000
Size:	12288

Details

Name:	00000003.00000002.1197667540.00000000027A2000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27A2000
Size:	4096

Details

Name:	00000010.00000002.922182861.00007FF5A2F13000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A2F13000
Size:	8192

Details

Name:	00000000.00000002.1197758110.0000000000C00000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C00000
Size:	8192

Details

Name:	0000000D.00000002.889949353.00007FF5823F0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5823F0000
Size:	20480

Details

Name:	00000013.00000003.943554249.000002D6C018C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C018C000
Size:	4096

Details

Name:	00000004.00000002.807803530.00000000025B2000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25B2000
Size:	12288

Details

Name:	00000014.00000002.951249284.0000023B95A70000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	23B95A70000
Size:	8192

Details

Name:	00000010.00000002.922139329.00007FF5A2C30000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A2C30000
Size:	20480

Details

Name:	00000009.00000002.810259278.00007DF5E3260000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E3260000
Size:	4096

Details

Name:	00000002.00000003.764810744.0000000004CA0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4CA0000
Size:	4096

Details

Name:	00000003.00000002.1198161347.0000000002965000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2965000
Size:	32768

Details

Name:	00000002.00000002.802383456.0000000002AB2000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AB2000
Size:	8192

Details

Name:	00000009.00000002.810672055.00007FF5CE156000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CE156000
Size:	8192

Details

Name:	00000004.00000002.808168908.0000000006730000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6730000
Size:	4096

Details

Name:	00000002.00000002.802957757.000000007F912000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F912000
Size:	4096

Details

Name:	00000013.00000003.945891635.000002D6C018C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C018C000
Size:	147456

Details

Name:	00000005.00000002.815433476.0000000004B50000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4B50000
Size:	4096

Details

Name:	00000010.00000002.922175752.00007FF5A2EC1000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A2EC1000
Size:	12288

Details

Name:	00000013.00000002.966941705.000002D6BF8BC000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6BF8BC000
Size:	20480

Details

Name:	00000004.00000002.807759506.000000000252F000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	252F000
Size:	4096

Details

Name:	00000002.00000000.678567903.000000007F910000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F910000
Size:	4096

Details

Name:	0000000D.00000002.890096388.00007FF582830000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF582830000
Size:	16384

Details

Name:	00000003.00000002.1198261867.0000000002E00000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E00000
Size:	102400

Details

Name:	0000000D.00000002.889545596.0000029B47C13000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	29B47C13000
Size:	90112

Details

Name:	00000013.00000003.953590609.000002D6C0192000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0192000
Size:	397312

Details

Name:	00000000.00000002.1197875881.0000000000DD0000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	DD0000
Size:	4096

Details

Name:	00000003.00000003.1184028647.00000000055DD000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55DD000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.774489361.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000002.00000002.802623044.0000000003180000.00000004.00000020.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	3180000
Size:	20480

Details

Name:	00000013.00000002.967804140.00007FF4F82C3000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F82C3000
Size:	8192

Details

Name:	00000013.00000003.948016344.000002D6C0189000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0189000
Size:	4096

Details

Name:	00000005.00000002.814925517.00000000029CD000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29CD000
Size:	4096

Details

Name:	00000004.00000002.808192322.000000007FF60000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF60000
Size:	4096

Details

Name:	00000005.00000002.815738603.000000007FD80000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FD80000
Size:	12288

Details

Name:	00000002.00000002.802496708.0000000002B22000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B22000
Size:	8192

Details

Name:	00000013.00000002.968549736.00007FF4F896E000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F896E000
Size:	4096

Details

Name:	00000003.00000003.1001410351.000000000303A000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	303A000
Size:	8192

Details

Name:	00000003.00000003.1090813160.00000000051E1000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	51E1000
Size:	462848

Details

Name:	00000003.00000003.1090942523.000000000304C000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	304C000
Size:	16384

Details

Name:	00000013.00000003.944635717.000002D6C01B4000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C01B4000
Size:	90112

Details

Name:	00000013.00000003.942480704.000002D6C017F000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C017F000
Size:	16384

Details

Name:	00000003.00000002.1199933079.000000006E420000.00000020.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	6E420000
Size:	253952

Details

Name:	00000004.00000002.807746366.000000000251F000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	251F000
Size:	8192

Details

Name:	0000000D.00000002.890316851.00007FF5828A9000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5828A9000
Size:	12288

Details

Name:	00000013.00000003.945984645.000002D6C01B0000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C01B0000
Size:	147456

Details

Name:	00000000.00000003.850532103.0000000000ECF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	ECF000
Size:	32768

Details

Name:	00000013.00000003.942144896.000002D6C01C7000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C01C7000
Size:	114688

Details

Name:	00000014.00000003.950449675.0000023B95B5F000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	23B95B5F000
Size:	12288

Details

Name:	00000013.00000002.967324702.000002D6C0114000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0114000
Size:	4096

Details

Name:	00000000.00000003.776222794.0000000000C70000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C70000
Size:	4096

Details

Name:	00000002.00000003.802063187.00000000032E7000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	32E7000
Size:	28672

Details

Name:	00000004.00000002.807777560.000000000254B000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	254B000
Size:	49152

Details

Name:	00000002.00000002.802377212.0000000002AAC000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AAC000
Size:	16384

Details

Name:	00000014.00000002.951647021.00007FF4FFDE3000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FFDE3000
Size:	8192

Details

Name:	00000000.00000002.1198859598.0000000003EB0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3EB0000
Size:	4096

Details

Name:	00000003.00000003.864294689.0000000002FC0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FC0000
Size:	8192

Details

Name:	00000003.00000003.954652590.000000000304C000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	304C000
Size:	16384

Details

Name:	00000013.00000003.950882863.000002D6C018A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C018A000
Size:	425984

Details

Name:	00000013.00000002.968706633.00007FF4F89B4000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F89B4000
Size:	4096

Details

Name:	00000003.00000003.1002945274.0000000003038000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3038000
Size:	4096

Details

Name:	00000002.00000003.802127404.00000000032E7000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	32E7000
Size:	28672

Details

Name:	00000003.00000002.1198129312.000000000291B000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	291B000
Size:	49152

Details

Name:	00000003.00000003.770001570.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000010.00000002.922240898.00007FF5A2FBD000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A2FBD000
Size:	20480

Details

Name:	00000009.00000002.810592081.00007FF5CE117000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CE117000
Size:	28672

Details

Name:	00000009.00000002.810517866.00007FF5CE0DE000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CE0DE000
Size:	4096

Details

Name:	00000003.00000002.1199446358.0000000005060000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5060000
Size:	4096

Details

Name:	00000010.00000002.921766864.000000F74387E000.00000004.00000010.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F74387E000
Size:	8192

Details

Name:	0000000D.00000002.889812816.00007DF5979A2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5979A2000
Size:	4096

Details

Name:	00000003.00000002.1199530817.000000000596C000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	596C000
Size:	16384

Details

Name:	00000002.00000003.781689837.0000000004B60000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	4B60000
Size:	4096

Details

Name:	00000013.00000003.956926994.000002D6C0184000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0184000
Size:	4096

Details

Name:	00000000.00000002.1197930680.0000000000DDD000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	DDD000
Size:	8192

Details

Name:	00000003.00000003.1139394229.00000000055DC000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55DC000
Size:	4096

Details

Name:	0000000D.00000002.890324853.00007FF5828AD000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5828AD000
Size:	16384

Details

Name:	00000005.00000002.814750099.0000000002843000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2843000
Size:	4096

Details

Name:	00000010.00000003.921422639.000001FE9CE49000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE9CE49000
Size:	8192

Details

Name:	00000003.00000003.1001028149.000000000304D000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	304D000
Size:	12288

Details

Name:	00000003.00000002.1199590187.0000000005AEC000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5AEC000
Size:	16384

Details

Name:	00000003.00000003.911651433.0000000003040000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3040000
Size:	4096

Details

Name:	00000004.00000002.808048661.000000000461E000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	461E000
Size:	8192

Details

Name:	00000002.00000003.784502749.0000000004B60000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	4B60000
Size:	4096

Details

Name:	00000009.00000002.810387126.00007FF5CDF83000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CDF83000
Size:	8192

Details

Name:	00000005.00000003.775557613.0000000004BA0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4BA0000
Size:	4096

Details

Name:	00000010.00000002.922352926.00007FF5A306A000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A306A000
Size:	8192

Details

Name:	00000003.00000003.1093355862.0000000003069000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3069000
Size:	4096

Details

Name:	00000009.00000002.810135083.00000218D328D000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	218D328D000
Size:	12288

Details

Name:	00000003.00000000.679010854.000000007FAC0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FAC0000
Size:	12288

Details

Name:	00000003.00000003.1091084032.0000000003041000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3041000
Size:	20480

Details

Name:	00000003.00000002.1199454147.00000000050AC000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	50AC000
Size:	16384

Details

Name:	00000004.00000002.808031634.0000000002F50000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2F50000
Size:	36864

Details

Name:	00000009.00000002.810162807.00000218D3308000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	218D3308000
Size:	24576

Details

Name:	00000002.00000002.802596012.0000000003130000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3130000
Size:	20480

Details

Name:	0000000D.00000000.874638536.0000029B479E0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	29B479E0000
Size:	102400

Details

Name:	00000004.00000002.807699858.00000000024E5000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24E5000
Size:	20480

Details

Name:	00000002.00000002.802666636.00000000032EB000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	32EB000
Size:	12288

Details

Name:	00000003.00000003.1184095212.0000000003033000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3033000
Size:	86016

Details

Name:	00000004.00000002.807839873.0000000002903000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2903000
Size:	4096

Details

Name:	00000013.00000002.968431448.00007FF4F8912000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F8912000
Size:	24576

Details

Name:	00000003.00000003.773854314.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000003.00000003.816925631.0000000004B10000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B10000
Size:	4096

Details

Name:	00000002.00000003.802087799.00000000032F2000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	32F2000
Size:	28672

Details

Name:	00000013.00000003.954920136.000002D6C0194000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0194000
Size:	65536

Details

Name:	00000009.00000002.810618380.00007FF5CE134000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CE134000
Size:	20480

Details

Name:	00000005.00000002.815406251.0000000004A7E000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4A7E000
Size:	8192

Details

Name:	00000002.00000002.802543362.0000000002E87000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2E87000
Size:	12288

Details

Name:	00000004.00000002.807678337.00000000024CC000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24CC000
Size:	16384

Details

Name:	00000004.00000002.807621984.0000000002393000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2393000
Size:	4096

Details

Name:	00000013.00000002.967415350.000002D6C015D000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C015D000
Size:	8192

Details

Name:	00000010.00000002.921808971.000001FE9CC30000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FE9CC30000
Size:	12288

Details

Name:	00000000.00000002.1199123801.000000006E45E000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E45E000
Size:	143360

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to development resources	System Summary
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000009.00000002.810562536.00007FF5CE0F7000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CE0F7000
Size:	49152

Details

Name:	00000003.00000002.1199218330.0000000004F40000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	4F40000
Size:	733184

Details

Name:	00000013.00000002.967981376.00007FF4F872B000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F872B000
Size:	12288

Details

Name:	0000000D.00000002.889323704.000000FFE507C000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	FFE507C000
Size:	16384

Details

Name:	00000004.00000002.807877555.0000000002AD0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AD0000
Size:	16384

Details

Name:	00000013.00000003.942472156.000002D6C0178000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2D6C0178000
Size:	4096

Details

Name:	00000003.00000003.1001147589.0000000002FC0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2FC0000
Size:	12288

Details

Name:	00000009.00000002.810429264.00007FF5CDFDE000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CDFDE000
Size:	4096

Details

Name:	00000013.00000002.968342911.00007FF4F8878000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F8878000
Size:	4096

Details

Name:	00000003.00000002.1199111637.0000000004B30000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4B30000
Size:	4096

Details

Name:	00000013.00000002.968312793.00007FF4F8873000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F8873000
Size:	8192

Details

Name:	00000003.00000003.769366293.0000000003090000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	00000009.00000002.810333604.00007FF5CDCA6000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5CDCA6000
Size:	32768

Details

Name:	00000010.00000002.921845461.000001FE9CE00000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE9CE00000
Size:	73728

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

IOC Report

Processes

URLs

Domains

IPs

Memdumps