Automated Malware Analysis IOC Report for

Details

Name:	00000005.00000003.753071796.0000000003350000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	3350000
Size:	86016

Signature Hits	Behavior Group	Mitre Attack
Found malware configuration	AV Detection
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.799739636.00000000031F8000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	31F8000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.804336124.00000000055E8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55E8000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.891723511.0000000002EFE000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	2EFE000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.804556915.00000000055E8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55E8000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.800306681.00000000031F8000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	31F8000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.804464296.00000000055E8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55E8000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.975721562.000000000526F000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	526F000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000002.1185463916.00000000031F8000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	31F8000
Size:	8192

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.804222714.00000000055E8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55E8000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.804480899.00000000055E8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55E8000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.895783341.000000000536D000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	536D000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.799516919.00000000031F8000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	31F8000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.724805584.00000000030D0000.00000040.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	30D0000
Size:	86016

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.798169851.00000000031F8000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	31F8000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.798063899.00000000031F8000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	31F8000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000003.795590759.00000000050B9000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	50B9000
Size:	57344

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.799492967.00000000031F8000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	31F8000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.798136050.00000000031F8000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	31F8000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.804413026.00000000055E8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55E8000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000002.1186168323.0000000005079000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5079000
Size:	57344

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000004.00000003.739645830.0000000001060000.00000040.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	1060000
Size:	86016

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000002.1185444339.0000000002E00000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2E00000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.757732161.00000000025B0000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	25B0000
Size:	86016

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000002.1186221637.00000000051F0000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	51F0000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.804732647.00000000055E8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55E8000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.798211796.00000000031F8000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	31F8000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000002.00000003.723966832.0000000000D70000.00000040.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	D70000
Size:	86016

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.798103358.00000000031F8000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	31F8000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000002.1185397905.0000000002BF9000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2BF9000
Size:	57344

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.804168396.00000000055E8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55E8000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.850329825.000000000546B000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	546B000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.804370941.00000000055E8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55E8000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.846414040.000000000307B000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	307B000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000002.1186237558.00000000055E8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	55E8000
Size:	8192

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000002.00000002.782316061.0000000002E12000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E12000
Size:	8192

Details

Name:	00000003.00000003.1020637544.00000000031F2000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31F2000
Size:	4096

Details

Name:	00000013.00000002.951050821.000001BBAB460000.00000008.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page write copy
Base address:	1BBAB460000
Size:	266240

Details

Name:	00000003.00000003.760738162.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000007.00000002.1185938829.00007FF50D07E000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50D07E000
Size:	12288

Details

Name:	00000003.00000002.1184810838.0000000001090000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1090000
Size:	4096

Details

Name:	00000003.00000002.1184734902.0000000000E19000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E19000
Size:	4096

Details

Name:	00000003.00000003.753804545.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000002.00000000.660332380.0000000002E93000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E93000
Size:	16384

Details

Name:	00000013.00000002.951168791.000001BBAB74A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB74A000
Size:	118784

Details

Name:	00000007.00000002.1185541311.00007FF50CEC5000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50CEC5000
Size:	16384

Details

Name:	00000003.00000002.1184932836.0000000002D8C000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D8C000
Size:	16384

Details

Name:	00000002.00000002.782158913.0000000000FC0000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	FC0000
Size:	8192

Details

Name:	00000000.00000003.1001227760.000000000098E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	98E000
Size:	4096

Details

Name:	00000000.00000002.1185526507.0000000003BCD000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3BCD000
Size:	12288

Details

Name:	00000007.00000002.1185951203.00007FF50D088000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50D088000
Size:	12288

Details

Name:	00000003.00000003.804754118.00000000055EC000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55EC000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.1065666286.0000000005BC1000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BC1000
Size:	282624

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000013.00000003.932357722.000001BBABC02000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBABC02000
Size:	94208

Details

Name:	00000013.00000002.951579087.00007FF523DB1000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523DB1000
Size:	4096

Details

Name:	00000013.00000002.951705230.00007FF523ED4000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523ED4000
Size:	4096

Details

Name:	00000007.00000002.1184754796.000002402E500000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2402E500000
Size:	8192

Details

Name:	00000004.00000002.788914820.0000000002DAD000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DAD000
Size:	4096

Details

Name:	00000011.00000002.904548935.00007FF5B40DE000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B40DE000
Size:	16384

Details

Name:	00000003.00000003.1063774087.0000000003153000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3153000
Size:	8192

Details

Name:	00000003.00000003.755914532.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000007.00000002.1184988349.000002402E7D5000.00000004.00000040.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2402E7D5000
Size:	40960

Details

Name:	00000011.00000002.904530334.00007FF5B40C4000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B40C4000
Size:	20480

Details

Name:	00000002.00000002.782231850.0000000002DAD000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DAD000
Size:	4096

Details

Name:	00000013.00000002.950885143.000001BBAAEBE000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAAEBE000
Size:	24576

Details

Name:	00000003.00000003.1108831676.00000000055EB000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55EB000
Size:	4096

Details

Name:	00000003.00000002.1184795594.000000000100F000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	100F000
Size:	4096

Details

Name:	0000000D.00000002.867847697.00007FF57B671000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57B671000
Size:	20480

Details

Name:	00000013.00000003.923380942.000001BBAAEE8000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAAEE8000
Size:	32768

Details

Name:	00000011.00000002.904364670.00007FF5B3C45000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B3C45000
Size:	4096

Details

Name:	00000003.00000003.756784726.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	0000000D.00000002.867636646.00007FF57B3D1000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57B3D1000
Size:	12288

Details

Name:	00000003.00000003.765062660.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000004.00000003.752665924.0000000004540000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4540000
Size:	4096

Details

Name:	00000005.00000002.804897480.000000007FE20000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FE20000
Size:	4096

Details

Name:	00000002.00000002.782535139.000000007F952000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F952000
Size:	4096

Details

Name:	00000003.00000003.1173197204.00000000031DC000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31DC000
Size:	12288

Details

Name:	00000000.00000002.1185596312.000000006E5A0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E5A0000
Size:	4096

Details

Name:	00000000.00000003.1138141045.00000000031FA000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	31FA000
Size:	28672

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000002.867781607.00007FF57B5D4000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57B5D4000
Size:	20480

Details

Name:	00000013.00000003.935696647.000001BBAB7BB000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB7BB000
Size:	131072

Details

Name:	00000013.00000003.938324430.000001BBAB79C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB79C000
Size:	397312

Details

Name:	00000013.00000003.935674630.000001BBAB7A5000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB7A5000
Size:	65536

Details

Name:	00000013.00000002.951741558.00007FF523F3B000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523F3B000
Size:	8192

Details

Name:	0000000D.00000002.867810060.00007FF57B5F6000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57B5F6000
Size:	8192

Details

Name:	00000005.00000003.766766464.0000000004D30000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D30000
Size:	4096

Details

Name:	00000014.00000002.932218025.00007DF5CD3C2000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5CD3C2000
Size:	4096

Details

Name:	00000004.00000002.788838810.0000000001040000.00000040.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	1040000
Size:	4096

Details

Name:	00000002.00000002.782078236.0000000000D30000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	D30000
Size:	4096

Details

Name:	0000000D.00000002.867456432.000001C992CD0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1C992CD0000
Size:	12288

Details

Name:	00000000.00000002.1184680675.0000000000850000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	850000
Size:	16384

Details

Name:	00000004.00000003.741776703.0000000000A2C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A2C000
Size:	8192

Details

Name:	00000002.00000003.781702716.00000000048F0000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	48F0000
Size:	4096

Details

Name:	0000000A.00000002.795163714.0000017C2F602000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C2F602000
Size:	4096

Details

Name:	00000013.00000002.951190497.000001BBAB769000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB769000
Size:	40960

Details

Name:	0000000D.00000003.866720566.000001C99287F000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C99287F000
Size:	40960

Details

Name:	00000000.00000002.1185576220.0000000003E50000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3E50000
Size:	4096

Details

Name:	0000000D.00000002.867357051.000001C99284D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C99284D000
Size:	12288

Details

Name:	00000013.00000003.936870106.000001BBAB79C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB79C000
Size:	212992

Details

Name:	0000000A.00000002.795436934.00007FF4F2DDF000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F2DDF000
Size:	8192

Details

Name:	00000000.00000003.1090746476.0000000000969000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	969000
Size:	12288

Details

Name:	00000000.00000002.1185562985.0000000003DD0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3DD0000
Size:	4096

Details

Name:	00000000.00000003.1183666897.00000000031FA000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	31FA000
Size:	4096

Details

Name:	00000005.00000002.797705996.0000000002CC0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CC0000
Size:	4096

Details

Name:	00000005.00000003.764326942.0000000004D30000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D30000
Size:	4096

Details

Name:	00000003.00000003.1082988418.0000000003140000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3140000
Size:	57344

Details

Name:	00000003.00000003.1018663367.00000000031CF000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31CF000
Size:	16384

Details

Name:	00000003.00000003.804761653.00000000055EB000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55EB000
Size:	4096

Details

Name:	00000013.00000002.950691063.000001BBAADE0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1BBAADE0000
Size:	8192

Details

Name:	00000005.00000002.797821257.0000000002DB5000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DB5000
Size:	20480

Details

Name:	00000007.00000002.1184666735.000002402E460000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2402E460000
Size:	102400

Details

Name:	00000003.00000002.1185236046.0000000002E82000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E82000
Size:	12288

Details

Name:	00000004.00000002.788796563.0000000000E60000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	E60000
Size:	73728

Details

Name:	00000007.00000002.1186003320.00007FF50D09D000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50D09D000
Size:	16384

Details

Name:	00000000.00000003.891551187.00000000031FB000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	31FB000
Size:	4096

Details

Name:	00000002.00000002.782166480.000000000100E000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	100E000
Size:	8192

Details

Name:	00000013.00000002.951686971.00007FF523EBD000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523EBD000
Size:	20480

Details

Name:	00000003.00000003.895840082.00000000031C6000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31C6000
Size:	24576

Details

Name:	00000013.00000003.921649638.000001BBAAEA5000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAAEA5000
Size:	20480

Details

Name:	00000004.00000001.670414105.000000006E5A0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E5A0000
Size:	4096

Details

Name:	00000003.00000003.1065740613.00000000031DF000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31DF000
Size:	81920

Details

Name:	00000000.00000003.795418839.0000000000AC0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	AC0000
Size:	4096

Details

Name:	00000000.00000000.658858489.000000007F0D2000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F0D2000
Size:	4096

Details

Name:	00000005.00000003.753045471.0000000003160000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	3160000
Size:	4096

Details

Name:	00000011.00000000.892575115.00007DF5C9200000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5C9200000
Size:	12288

Details

Name:	00000000.00000002.1185659805.000000006E5B0000.00000020.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	6E5B0000
Size:	253952

Details

Name:	00000004.00000003.766329816.0000000004550000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4550000
Size:	4096

Details

Name:	00000005.00000002.800560617.00000000033CE000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	33CE000
Size:	8192

Details

Name:	00000007.00000002.1185089205.000002402EB70000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2402EB70000
Size:	380928

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	00000003.00000002.1186036012.0000000004BA0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	4BA0000
Size:	733184

Details

Name:	00000003.00000003.1063780617.0000000003158000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3158000
Size:	24576

Details

Name:	00000011.00000002.904062601.000000158377F000.00000004.00000010.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	158377F000
Size:	4096

Details

Name:	00000011.00000003.903812908.000001E0C8A50000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E0C8A50000
Size:	122880

Details

Name:	0000000A.00000002.795170576.00007DF405DC0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF405DC0000
Size:	20480

Details

Name:	00000005.00000003.766531479.0000000004D30000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D30000
Size:	4096

Details

Name:	00000003.00000003.893261270.00000000031F2000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31F2000
Size:	4096

Details

Name:	00000014.00000002.932183861.0000018B1B6D0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	18B1B6D0000
Size:	4096

Details

Name:	00000013.00000003.939778198.000001BBAB7A0000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB7A0000
Size:	8192

Details

Name:	00000003.00000002.1185067893.0000000002DE7000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DE7000
Size:	12288

Details

Name:	00000002.00000003.781783875.0000000000E12000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E12000
Size:	28672

Details

Name:	00000007.00000002.1185552474.00007FF50CECA000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50CECA000
Size:	4096

Details

Name:	0000000D.00000002.867531874.00007DF590700000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF590700000
Size:	4096

Details

Name:	00000007.00000002.1184896719.000002402E700000.00000008.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page write copy
Base address:	2402E700000
Size:	266240

Details

Name:	00000003.00000003.975606324.00000000031D9000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31D9000
Size:	40960

Details

Name:	00000013.00000002.950505560.0000004771AFE000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4771AFE000
Size:	8192

Details

Name:	00000000.00000003.891709730.00000000031FA000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	31FA000
Size:	4096

Details

Name:	00000013.00000003.950323407.000001BBAAE49000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAAE49000
Size:	8192

Details

Name:	00000003.00000002.1184890949.0000000002CC0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CC0000
Size:	20480

Details

Name:	00000000.00000003.1092812022.000000000096C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	96C000
Size:	4096

Details

Name:	00000013.00000003.933589694.000001BBAB796000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB796000
Size:	294912

Details

Name:	00000000.00000003.800009478.000000000095A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	95A000
Size:	45056

Details

Name:	00000003.00000003.1020675297.0000000003160000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3160000
Size:	413696

Details

Name:	00000003.00000003.1065410461.0000000005CC1000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5CC1000
Size:	942080

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.797338112.0000000003159000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3159000
Size:	40960

Details

Name:	00000013.00000002.951514291.00007FF523CE7000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523CE7000
Size:	8192

Details

Name:	0000000D.00000002.867826823.00007FF57B5FD000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57B5FD000
Size:	16384

Details

Name:	00000004.00000002.789005176.0000000002DFA000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DFA000
Size:	16384

Details

Name:	00000005.00000002.797714673.0000000002D89000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D89000
Size:	28672

Details

Name:	00000003.00000002.1186348819.0000000005C05000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5C05000
Size:	4096

Details

Name:	00000000.00000003.1090640738.0000000000977000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	977000
Size:	98304

Details

Name:	00000003.00000003.847876701.00000000031C4000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31C4000
Size:	4096

Details

Name:	00000003.00000000.660728646.000000007FE00000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FE00000
Size:	12288

Details

Name:	0000000D.00000002.867749968.00007FF57B5AF000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57B5AF000
Size:	16384

Details

Name:	00000002.00000003.743288551.0000000000D40000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D40000
Size:	4096

Details

Name:	00000002.00000002.782210568.0000000002CC0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CC0000
Size:	4096

Details

Name:	00000004.00000002.788902968.0000000002D93000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D93000
Size:	4096

Details

Name:	00000003.00000003.850296228.000000000314E000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	314E000
Size:	28672

Details

Name:	00000013.00000003.936961152.000001BBABC6A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBABC6A000
Size:	425984

Details

Name:	00000007.00000002.1185513656.00007FF50CEAB000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50CEAB000
Size:	8192

Details

Name:	00000014.00000002.932137431.0000018B1B335000.00000004.00000040.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	18B1B335000
Size:	8192

Details

Name:	00000000.00000002.1184551757.0000000000430000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	430000
Size:	4096

Details

Name:	0000000A.00000000.783553226.00007FF4F2E72000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F2E72000
Size:	16384

Details

Name:	0000000D.00000002.867767676.00007FF57B5C4000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57B5C4000
Size:	4096

Details

Name:	00000004.00000002.789047281.0000000002E65000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E65000
Size:	32768

Details

Name:	00000013.00000002.952014397.00007FF523FE6000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523FE6000
Size:	8192

Details

Name:	00000005.00000002.796067074.0000000000DD0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	DD0000
Size:	4096

Details

Name:	00000004.00000002.788676346.00000000007A0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7A0000
Size:	4096

Details

Name:	00000011.00000002.904300770.00007DF5C91F0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5C91F0000
Size:	4096

Details

Name:	00000013.00000003.934921843.000001BBAB775000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB775000
Size:	16384

Details

Name:	00000011.00000002.904268890.000001E0C9150000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E0C9150000
Size:	4096

Details

Name:	00000013.00000002.951569073.00007FF523DA6000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523DA6000
Size:	4096

Details

Name:	00000003.00000003.1082950450.00000000031D4000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31D4000
Size:	20480

Details

Name:	00000011.00000002.904399454.00007FF5B3F6B000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B3F6B000
Size:	8192

Details

Name:	00000004.00000003.765626582.0000000004550000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4550000
Size:	4096

Details

Name:	00000004.00000002.788948330.0000000002DD0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DD0000
Size:	32768

Details

Name:	00000005.00000002.804817742.000000000553C000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	553C000
Size:	4096

Details

Name:	00000000.00000003.766063192.0000000000870000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	870000
Size:	4096

Details

Name:	00000003.00000002.1186357249.0000000005C44000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5C44000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000013.00000002.951393215.00007FF5238C7000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5238C7000
Size:	4096

Details

Name:	00000011.00000002.904068022.000000158387E000.00000004.00000010.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	158387E000
Size:	8192

Details

Name:	00000013.00000002.951457474.00007FF523B36000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523B36000
Size:	32768

Details

Name:	00000005.00000002.797771008.0000000002D9A000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D9A000
Size:	20480

Details

Name:	00000005.00000003.758628917.0000000004D30000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D30000
Size:	4096

Details

Name:	00000014.00000002.932068935.0000018B1B100000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18B1B100000
Size:	4096

Details

Name:	00000002.00000003.739035002.0000000000D40000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D40000
Size:	4096

Details

Name:	00000013.00000002.951012502.000001BBAB000000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1BBAB000000
Size:	4096

Details

Name:	00000005.00000002.800228826.000000000310E000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	310E000
Size:	8192

Details

Name:	00000013.00000003.928593832.000001BBAB79A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB79A000
Size:	45056

Details

Name:	00000014.00000002.932318899.00007FF5B7B93000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B7B93000
Size:	8192

Details

Name:	00000002.00000003.766162414.0000000000D40000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D40000
Size:	4096

Details

Name:	00000004.00000002.789258078.000000007F470000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F470000
Size:	4096

Details

Name:	00000003.00000002.1186407497.000000006E5A3000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E5A3000
Size:	4096

Details

Name:	00000003.00000003.850071865.0000000005BC1000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BC1000
Size:	282624

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.1183626974.0000000000971000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	971000
Size:	49152

Details

Name:	00000007.00000002.1184562758.0000005F8E778000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5F8E778000
Size:	32768

Details

Name:	00000004.00000002.788942429.0000000002DCC000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DCC000
Size:	8192

Details

Name:	0000000D.00000002.867682330.00007FF57B4E4000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57B4E4000
Size:	4096

Details

Name:	00000003.00000003.739938998.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000002.00000002.782122233.0000000000E0B000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E0B000
Size:	12288

Details

Name:	00000003.00000003.893293528.0000000003140000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3140000
Size:	57344

Details

Name:	00000003.00000003.754709545.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000013.00000002.950740788.000001BBAAE29000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAAE29000
Size:	73728

Details

Name:	00000000.00000002.1185368028.0000000002880000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2880000
Size:	4096

Details

Name:	00000011.00000002.904433663.00007FF5B405A000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B405A000
Size:	4096

Details

Name:	00000000.00000003.763486407.0000000000870000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	870000
Size:	4096

Details

Name:	00000000.00000003.889317079.0000000000957000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	957000
Size:	229376

Details

Name:	00000013.00000002.951888962.00007FF523F9C000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523F9C000
Size:	4096

Details

Name:	00000002.00000002.782277285.0000000002DE5000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DE5000
Size:	4096

Details

Name:	00000003.00000001.661005600.000000006E5A0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E5A0000
Size:	4096

Details

Name:	00000002.00000002.782256333.0000000002DCC000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DCC000
Size:	8192

Details

Name:	00000005.00000002.800731495.0000000004BE0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4BE0000
Size:	4096

Details

Name:	00000013.00000003.929808785.000001BBABC1E000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBABC1E000
Size:	114688

Details

Name:	00000013.00000002.951237090.000001BBAB781000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB781000
Size:	49152

Details

Name:	0000000A.00000002.795379892.00007FF4F2D97000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F2D97000
Size:	49152

Details

Name:	00000013.00000002.951325498.00007DF5390F2000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5390F2000
Size:	4096

Details

Name:	00000005.00000002.797860112.0000000002DBC000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DBC000
Size:	12288

Details

Name:	00000013.00000002.951319335.00007DF5390F0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5390F0000
Size:	4096

Details

Name:	0000000A.00000002.795144022.0000017C2F400000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	17C2F400000
Size:	12288

Details

Name:	00000013.00000002.951596122.00007FF523E13000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523E13000
Size:	24576

Details

Name:	00000005.00000002.804890987.000000007FD20000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FD20000
Size:	20480

Details

Name:	00000003.00000002.1184776496.000000000100C000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	100C000
Size:	4096

Details

Name:	00000004.00000003.788431636.0000000004A38000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4A38000
Size:	4096

Details

Name:	00000005.00000002.796019735.0000000000D2A000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	D2A000
Size:	24576

Details

Name:	0000000A.00000002.795423045.00007FF4F2DD4000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F2DD4000
Size:	20480

Details

Name:	00000011.00000002.904242231.000001E0C8ED0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E0C8ED0000
Size:	16384

Details

Name:	00000002.00000003.764420992.0000000000D40000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D40000
Size:	4096

Details

Name:	00000000.00000002.1185551586.0000000003DCC000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3DCC000
Size:	16384

Details

Name:	00000003.00000003.847916087.0000000003158000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3158000
Size:	24576

Details

Name:	0000000A.00000002.795022189.0000017C2EFD0000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C2EFD0000
Size:	4096

Details

Name:	00000003.00000003.1065873901.000000000314E000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	314E000
Size:	16384

Details

Name:	0000000D.00000002.867795553.00007FF57B5E8000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57B5E8000
Size:	12288

Details

Name:	00000013.00000002.951902772.00007FF523F9F000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523F9F000
Size:	16384

Details

Name:	00000003.00000003.895754289.00000000031D8000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31D8000
Size:	4096

Details

Name:	00000000.00000003.1002816790.00000000031FA000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	31FA000
Size:	4096

Details

Name:	00000004.00000003.788462414.0000000000A27000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A27000
Size:	28672

Details

Name:	0000000D.00000002.867017225.0000003ECE92B000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3ECE92B000
Size:	20480

Details

Name:	00000002.00000002.782298712.0000000002DFA000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DFA000
Size:	16384

Details

Name:	00000000.00000002.1185974746.000000007F0C2000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F0C2000
Size:	4096

Details

Name:	00000013.00000002.951873371.00007FF523F87000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523F87000
Size:	49152

Details

Name:	00000011.00000002.904445573.00007FF5B406A000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B406A000
Size:	8192

Details

Name:	00000003.00000003.1108882391.00000000031F2000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31F2000
Size:	4096

Details

Name:	00000014.00000000.920120542.00007DF5CD3B2000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5CD3B2000
Size:	4096

Details

Name:	00000007.00000002.1185312522.00007FF50050E000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50050E000
Size:	8192

Details

Name:	00000011.00000002.904290115.00007DF5C91E0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5C91E0000
Size:	4096

Details

Name:	00000003.00000000.660726048.000000007FDF2000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FDF2000
Size:	4096

Details

Name:	00000011.00000002.904522024.00007FF5B40BA000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B40BA000
Size:	20480

Details

Name:	0000000D.00000000.852374790.00007DF590710000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF590710000
Size:	12288

Details

Name:	00000005.00000002.798192745.0000000002E12000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E12000
Size:	8192

Details

Name:	00000013.00000003.931337416.000001BBAB7D5000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB7D5000
Size:	122880

Details

Name:	00000005.00000002.798034435.0000000002DF3000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DF3000
Size:	12288

Details

Name:	0000000D.00000002.867755670.00007FF57B5B7000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57B5B7000
Size:	28672

Details

Name:	00000002.00000003.762746224.0000000000D40000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D40000
Size:	4096

Details

Name:	0000000D.00000002.867046041.0000003ECEC7E000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3ECEC7E000
Size:	8192

Details

Name:	00000007.00000002.1185674977.00007FF50CFB2000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50CFB2000
Size:	8192

Details

Name:	00000003.00000003.1173175517.00000000031D4000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31D4000
Size:	12288

Details

Name:	00000011.00000003.903797109.000001E0C8A7E000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E0C8A7E000
Size:	40960

Details

Name:	00000002.00000003.781806091.0000000000E07000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E07000
Size:	28672

Details

Name:	00000000.00000002.1184743011.000000000088C000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	88C000
Size:	4096

Details

Name:	00000003.00000003.755311607.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000000.00000002.1184982166.0000000000955000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	955000
Size:	57344

Details

Name:	00000014.00000002.932223806.00007DF5CD3D0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5CD3D0000
Size:	12288

Details

Name:	0000000A.00000002.795463470.00007FF4F2DFD000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F2DFD000
Size:	16384

Details

Name:	00000003.00000002.1186275083.00000000059FE000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	59FE000
Size:	8192

Details

Name:	00000011.00000002.904263080.000001E0C9060000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E0C9060000
Size:	4096

Details

Name:	00000013.00000002.950668741.000001BBAACB0000.00000004.00000020.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1BBAACB0000
Size:	12288

Details

Name:	00000000.00000003.1002753774.000000000098E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	98E000
Size:	4096

Details

Name:	00000000.00000003.1181719774.000000000096F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	96F000
Size:	40960

Details

Name:	00000004.00000002.788821433.0000000000FE0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FE0000
Size:	4096

Details

Name:	00000002.00000002.782011633.00000000008FA000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8FA000
Size:	24576

Details

Name:	00000004.00000003.755914158.0000000004540000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4540000
Size:	4096

Details

Name:	00000004.00000003.753268180.0000000004540000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4540000
Size:	4096

Details

Name:	00000002.00000002.782045324.00000000009F0000.00000040.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	9F0000
Size:	4096

Details

Name:	00000011.00000002.904171732.000001E0C8A4E000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E0C8A4E000
Size:	8192

Details

Name:	00000002.00000002.782067183.0000000000D10000.00000004.00000020.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	D10000
Size:	20480

Details

Name:	00000005.00000002.800602822.0000000003430000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3430000
Size:	20480

Details

Name:	0000000D.00000002.867774236.00007FF57B5CA000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57B5CA000
Size:	20480

Details

Name:	00000003.00000002.1185041563.0000000002DD9000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DD9000
Size:	40960

Details

Name:	00000000.00000003.800346968.00000000031FB000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	31FB000
Size:	4096

Details

Name:	00000011.00000002.904305113.00007DF5C91F2000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5C91F2000
Size:	4096

Details

Name:	00000003.00000003.1111279200.00000000031D7000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31D7000
Size:	12288

Details

Name:	00000003.00000002.1184987760.0000000002DBC000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DBC000
Size:	12288

Details

Name:	0000000D.00000002.867153490.000001C9926C0000.00000004.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1C9926C0000
Size:	4096

Details

Name:	00000004.00000000.669112987.000000007F472000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F472000
Size:	4096

Details

Name:	00000013.00000002.950621897.000001BBAAC60000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1BBAAC60000
Size:	102400

Details

Name:	00000011.00000002.904418204.00007FF5B3FC3000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B3FC3000
Size:	24576

Details

Name:	00000007.00000002.1185372198.00007FF50C9AC000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50C9AC000
Size:	12288

Details

Name:	0000000A.00000002.795195539.00007DF507F10000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF507F10000
Size:	12288

Details

Name:	00000000.00000003.1092860879.0000000000969000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	969000
Size:	12288

Details

Name:	00000003.00000002.1186373463.0000000005CC0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5CC0000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000002.1185276430.00000000030D0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	30D0000
Size:	4096

Details

Name:	00000005.00000002.800668060.0000000003440000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3440000
Size:	36864

Details

Name:	00000003.00000003.1065771693.00000000031D9000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31D9000
Size:	24576

Details

Name:	00000005.00000003.795631327.0000000005138000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5138000
Size:	4096

Details

Name:	00000002.00000003.781765040.0000000000E27000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E27000
Size:	4096

Details

Name:	00000014.00000002.932417945.00007FF5B8294000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B8294000
Size:	20480

Details

Name:	00000003.00000002.1186284496.0000000005A3F000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5A3F000
Size:	4096

Details

Name:	0000000D.00000002.867590611.00007FF57ADCE000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57ADCE000
Size:	4096

Details

Name:	00000005.00000002.798070210.0000000002DFA000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DFA000
Size:	16384

Details

Name:	00000004.00000002.788874283.0000000002C98000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C98000
Size:	12288

Details

Name:	00000013.00000002.951123715.000001BBAB714000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB714000
Size:	32768

Details

Name:	00000011.00000002.904394618.00007FF5B3F51000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B3F51000
Size:	4096

Details

Name:	00000003.00000002.1185439539.0000000003160000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3160000
Size:	413696

Details

Name:	00000003.00000002.1184952934.0000000002D9A000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D9A000
Size:	20480

Details

Name:	0000000D.00000002.867619912.00007FF57B155000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57B155000
Size:	4096

Details

Name:	0000000A.00000002.794877820.0000007C2C1FE000.00000004.00000010.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	7C2C1FE000
Size:	8192

Details

Name:	00000013.00000003.923374653.000001BBAAEE5000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAAEE5000
Size:	4096

Details

Name:	00000000.00000002.1185326280.00000000026B0000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	26B0000
Size:	16384

Details

Name:	00000014.00000002.932325613.00007FF5B7B97000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B7B97000
Size:	4096

Details

Name:	00000004.00000002.788653343.000000000074A000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	74A000
Size:	24576

Details

Name:	00000014.00000002.932492395.00007FF5B8331000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B8331000
Size:	20480

Details

Name:	00000003.00000003.1065792669.0000000003158000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3158000
Size:	24576

Details

Name:	00000003.00000002.1184922114.0000000002D89000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D89000
Size:	8192

Details

Name:	00000003.00000002.1184561639.0000000000C60000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	C60000
Size:	102400

Details

Name:	00000004.00000003.788457530.0000000000A47000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A47000
Size:	4096

Details

Name:	00000003.00000003.1020730829.00000000031C6000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31C6000
Size:	24576

Details

Name:	00000000.00000003.1001331769.0000000000960000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	960000
Size:	4096

Details

Name:	00000000.00000003.1092834562.0000000000955000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	955000
Size:	8192

Details

Name:	00000000.00000003.1090754583.000000000096F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	96F000
Size:	4096

Details

Name:	0000000A.00000002.795249869.00007FF4F2955000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F2955000
Size:	4096

Details

Name:	00000003.00000003.1018726681.0000000003140000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3140000
Size:	73728

Details

Name:	0000000A.00000002.795449136.00007FF4F2DEE000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F2DEE000
Size:	16384

Details

Name:	00000003.00000002.1186421893.000000006E5A6000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E5A6000
Size:	40960

Details

Name:	00000007.00000000.744587147.00007DF5221A2000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5221A2000
Size:	4096

Details

Name:	00000013.00000003.938491349.000001BBABD63000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBABD63000
Size:	397312

Details

Name:	00000005.00000002.797987704.0000000002DE5000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DE5000
Size:	4096

Details

Name:	00000004.00000002.788780935.0000000000C5A000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	C5A000
Size:	12288

Details

Name:	00000002.00000002.782530605.000000007F950000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F950000
Size:	4096

Details

Name:	00000000.00000003.1090721926.000000000096F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	96F000
Size:	4096

Details

Name:	00000002.00000003.766870105.0000000000D40000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D40000
Size:	4096

Details

Name:	00000004.00000003.763952057.0000000004550000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4550000
Size:	4096

Details

Name:	00000013.00000003.935657984.000001BBAB79A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB79A000
Size:	32768

Details

Name:	00000000.00000002.1185302430.000000000266D000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	266D000
Size:	12288

Details

Name:	00000014.00000003.931788062.0000018B1B15E000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18B1B15E000
Size:	8192

Details

Name:	00000013.00000003.938412193.000001BBABD02000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBABD02000
Size:	794624

Details

Name:	00000004.00000002.788756509.0000000000BF0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	BF0000
Size:	16384

Details

Name:	00000003.00000003.797333947.0000000003152000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3152000
Size:	4096

Details

Name:	00000003.00000003.850247009.0000000003165000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3165000
Size:	393216

Details

Name:	00000005.00000002.800482714.00000000031B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	31B0000
Size:	106496

Details

Name:	00000013.00000002.950814891.000001BBAAE6C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAAE6C000
Size:	118784

Details

Name:	00000005.00000002.799673648.0000000002E61000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E61000
Size:	12288

Details

Name:	00000005.00000003.763485075.0000000004D30000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D30000
Size:	4096

Details

Name:	0000000D.00000002.867631041.00007FF57B2F7000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57B2F7000
Size:	8192

Details

Name:	00000004.00000002.788739002.0000000000A3B000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A3B000
Size:	49152

Details

Name:	00000007.00000002.1185774556.00007FF50D01E000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50D01E000
Size:	4096

Details

Name:	00000003.00000003.895723571.00000000031C6000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31C6000
Size:	24576

Details

Name:	00000002.00000002.782062485.0000000000CF0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	CF0000
Size:	12288

Details

Name:	00000003.00000003.766871750.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000013.00000002.951480111.00007FF523B85000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523B85000
Size:	4096

Details

Name:	00000003.00000003.742953176.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000004.00000003.764989865.0000000004550000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4550000
Size:	4096

Details

Name:	00000004.00000003.763349329.0000000004550000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4550000
Size:	4096

Details

Name:	0000000D.00000002.867390799.000001C992870000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C992870000
Size:	65536

Details

Name:	00000003.00000003.1063747244.00000000031DF000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31DF000
Size:	16384

Details

Name:	00000000.00000002.1184704896.0000000000880000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	880000
Size:	4096

Details

Name:	0000000D.00000002.867647010.00007FF57B441000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57B441000
Size:	8192

Details

Name:	00000002.00000002.782200113.0000000002C98000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C98000
Size:	12288

Details

Name:	00000004.00000002.788769203.0000000000C50000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	C50000
Size:	20480

Details

Name:	0000000A.00000002.795336177.00007FF4F2CEC000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F2CEC000
Size:	8192

Details

Name:	00000013.00000002.951721122.00007FF523F10000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523F10000
Size:	4096

Details

Name:	00000005.00000002.804837591.0000000006A40000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	6A40000
Size:	4096

Details

Name:	00000003.00000003.751393016.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000002.00000002.782236009.0000000002DB5000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DB5000
Size:	20480

Details

Name:	00000003.00000003.850030104.0000000005CC1000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5CC1000
Size:	307200

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000000.684781551.000000007FE20000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FE20000
Size:	4096

Details

Name:	00000003.00000003.1063812738.000000000314E000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	314E000
Size:	16384

Details

Name:	00000003.00000003.847881631.00000000031C6000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31C6000
Size:	8192

Details

Name:	00000011.00000002.904160912.000001E0C8A3C000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E0C8A3C000
Size:	57344

Details

Name:	00000005.00000002.804803793.0000000005530000.00000004.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	5530000
Size:	4096

Details

Name:	00000007.00000002.1185682035.00007FF50CFDC000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50CFDC000
Size:	8192

Details

Name:	00000002.00000003.761976417.0000000000D40000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D40000
Size:	4096

Details

Name:	00000004.00000002.789266864.000000007F480000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F480000
Size:	4096

Details

Name:	0000000A.00000002.795260337.00007FF4F2AF7000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F2AF7000
Size:	8192

Details

Name:	00000003.00000003.850318438.00000000055EA000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55EA000
Size:	8192

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000002.00000002.782320344.0000000002E16000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E16000
Size:	16384

Details

Name:	00000003.00000003.797420220.0000000003390000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3390000
Size:	4096

Details

Name:	00000004.00000002.789062601.0000000002E82000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E82000
Size:	12288

Details

Name:	00000003.00000003.1065804145.0000000003160000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3160000
Size:	413696

Details

Name:	00000003.00000003.1020747545.00000000055EB000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55EB000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.1185541380.0000000003CCF000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3CCF000
Size:	4096

Details

Name:	00000004.00000002.789091848.0000000004530000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4530000
Size:	4096

Details

Name:	00000003.00000002.1184941861.0000000002D93000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D93000
Size:	4096

Details

Name:	00000000.00000003.891612267.0000000000965000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	965000
Size:	8192

Details

Name:	00000003.00000002.1184868595.0000000002CA1000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CA1000
Size:	8192

Details

Name:	00000000.00000002.1185426323.0000000002C78000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2C78000
Size:	4096

Details

Name:	0000000D.00000002.867802809.00007FF57B5EE000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57B5EE000
Size:	16384

Details

Name:	00000002.00000002.782413997.0000000004D3E000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4D3E000
Size:	8192

Details

Name:	00000000.00000002.1185495180.00000000038CE000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	38CE000
Size:	8192

Details

Name:	0000000D.00000002.867137383.0000003ECF1FF000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3ECF1FF000
Size:	4096

Details

Name:	00000003.00000003.740541936.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000002.00000002.782339843.0000000002E65000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E65000
Size:	32768

Details

Name:	00000011.00000002.904309835.00007DF5C9200000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5C9200000
Size:	12288

Details

Name:	00000004.00000003.761977004.0000000004550000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4550000
Size:	4096

Details

Name:	00000004.00000002.788920015.0000000002DB5000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DB5000
Size:	20480

Details

Name:	00000002.00000002.782177128.0000000001027000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1027000
Size:	4096

Details

Name:	0000000A.00000002.795067498.0000017C2F03C000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C2F03C000
Size:	77824

Details

Name:	00000013.00000003.938209093.000001BBABC02000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBABC02000
Size:	159744

Details

Name:	00000002.00000002.782325197.0000000002E1B000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E1B000
Size:	49152

Details

Name:	00000004.00000002.788723216.0000000000A2B000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A2B000
Size:	12288

Details

Name:	0000000A.00000002.795295601.00007FF4F2C7E000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F2C7E000
Size:	4096

Details

Name:	00000003.00000003.764229203.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000000.00000003.763892698.0000000000870000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	870000
Size:	4096

Details

Name:	00000007.00000002.1185470977.00007FF50CE41000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50CE41000
Size:	12288

Details

Name:	00000011.00000002.904280109.00007DF4C70B0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4C70B0000
Size:	20480

Details

Name:	00000013.00000003.931275371.000001BBAB796000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB796000
Size:	110592

Details

Name:	00000003.00000003.893267593.0000000003152000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3152000
Size:	12288

Details

Name:	00000005.00000002.800723550.00000000037C0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	37C0000
Size:	4096

Details

Name:	00000000.00000002.1185606701.000000006E5A1000.00000020.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	6E5A1000
Size:	8192

Details

Name:	00000003.00000003.1063800312.0000000003140000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3140000
Size:	73728

Details

Name:	00000013.00000002.950498057.0000004771A7B000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4771A7B000
Size:	20480

Details

Name:	00000014.00000002.931977703.00000020DB7AF000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	20DB7AF000
Size:	4096

Details

Name:	00000004.00000002.789074036.0000000002E93000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E93000
Size:	16384

Details

Name:	00000005.00000002.796535843.0000000000DF0000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	DF0000
Size:	20480

Details

Name:	00000003.00000003.804657462.00000000031C8000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31C8000
Size:	16384

Details

Name:	00000007.00000002.1184743048.000002402E4C0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2402E4C0000
Size:	8192

Details

Name:	00000014.00000002.932406585.00007FF5B828A000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B828A000
Size:	20480

Details

Name:	00000013.00000003.936668132.000001BBAB79C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB79C000
Size:	118784

Details

Name:	00000000.00000003.1183653031.00000000031FB000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	31FB000
Size:	49152

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000002.789068391.0000000002E88000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E88000
Size:	12288

Details

Name:	00000003.00000003.895628423.00000000031D9000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31D9000
Size:	4096

Details

Name:	00000000.00000003.800202431.0000000000959000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	959000
Size:	4096

Details

Name:	00000013.00000002.950872937.000001BBAAEAF000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAAEAF000
Size:	49152

Details

Name:	00000013.00000002.951589458.00007FF523DC1000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523DC1000
Size:	12288

Details

Name:	00000003.00000002.1185156434.0000000002E12000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E12000
Size:	8192

Details

Name:	00000000.00000002.1185057716.00000000009A0000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	9A0000
Size:	24576

Details

Name:	00000000.00000003.1181598865.00000000031FB000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	31FB000
Size:	24576

Details

Name:	00000011.00000002.904103437.000001E0C89C0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E0C89C0000
Size:	12288

Details

Name:	00000011.00000002.904216411.000001E0C8B02000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E0C8B02000
Size:	16384

Details

Name:	00000000.00000002.1185881608.000000006E611000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6E611000
Size:	8192

Details

Name:	0000000D.00000002.867033677.0000003ECE9AE000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3ECE9AE000
Size:	8192

Details

Name:	00000000.00000000.658848358.000000007F0C0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F0C0000
Size:	4096

Details

Name:	00000002.00000000.660356889.000000007F970000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F970000
Size:	12288

Details

Name:	00000002.00000003.737230894.0000000000D40000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D40000
Size:	4096

Details

Name:	00000003.00000002.1184972773.0000000002DB5000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DB5000
Size:	20480

Details

Name:	0000000A.00000002.795056685.0000017C2F029000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C2F029000
Size:	73728

Details

Name:	00000003.00000002.1184847665.0000000002C69000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C69000
Size:	4096

Details

Name:	00000000.00000003.1047481381.0000000003E51000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E51000
Size:	921600

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.891616620.0000000000969000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	969000
Size:	4096

Details

Name:	00000013.00000002.950703382.000001BBAAE00000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAAE00000
Size:	73728

Details

Name:	00000004.00000002.788681321.00000000007F0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7F0000
Size:	4096

Details

Name:	00000013.00000002.951914811.00007FF523FA7000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523FA7000
Size:	28672

Details

Name:	00000000.00000003.766297708.0000000000870000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	870000
Size:	4096

Details

Name:	00000003.00000003.847941345.0000000003160000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3160000
Size:	16384

Details

Name:	00000013.00000003.936766515.000001BBAB7BD000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB7BD000
Size:	106496

Details

Name:	00000002.00000002.782357767.0000000002E88000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E88000
Size:	12288

Details

Name:	00000003.00000003.764025275.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000013.00000002.950997070.000001BBAAF13000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAAF13000
Size:	8192

Details

Name:	0000000A.00000002.795303773.00007FF4F2CCD000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F2CCD000
Size:	20480

Details

Name:	00000014.00000002.932460944.00007FF5B82BD000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B82BD000
Size:	16384

Details

Name:	0000000D.00000002.867474393.000001C992E50000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1C992E50000
Size:	4096

Details

Name:	00000013.00000002.951408700.00007FF523AD2000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523AD2000
Size:	4096

Details

Name:	0000000D.00000000.852340893.00007DF5906F0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5906F0000
Size:	4096

Details

Name:	00000005.00000003.795567118.0000000004D40000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4D40000
Size:	4096

Details

Name:	00000003.00000003.895640702.0000000003152000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3152000
Size:	12288

Details

Name:	0000000D.00000000.852315771.000001C9926E0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1C9926E0000
Size:	102400

Details

Name:	00000000.00000002.1186002026.000000007F0E0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F0E0000
Size:	12288

Details

Name:	00000004.00000002.788631731.00000000006E0000.00000004.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6E0000
Size:	4096

Details

Name:	00000003.00000003.850309640.0000000003160000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3160000
Size:	16384

Details

Name:	00000002.00000002.782150108.0000000000F1E000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F1E000
Size:	8192

Details

Name:	00000003.00000003.1020812776.00000000031CD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31CD000
Size:	8192

Details

Name:	00000003.00000003.1111263427.00000000031F2000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31F2000
Size:	4096

Details

Name:	00000002.00000002.782192976.0000000002C8D000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C8D000
Size:	32768

Details

Name:	00000003.00000003.1173854907.000000000314E000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	314E000
Size:	16384

Details

Name:	00000007.00000002.1185659818.00007FF50CFA1000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50CFA1000
Size:	8192

Details

Name:	00000013.00000002.950589815.0000004772278000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4772278000
Size:	32768

Details

Name:	00000003.00000002.1185744361.000000000334D000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	334D000
Size:	12288

Details

Name:	00000000.00000003.1181890821.0000000000964000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	964000
Size:	16384

Details

Name:	00000004.00000002.788880305.0000000002CA7000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CA7000
Size:	12288

Details

Name:	00000000.00000003.758629851.0000000000870000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	870000
Size:	4096

Details

Name:	00000004.00000003.788478051.0000000000A3A000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A3A000
Size:	53248

Details

Name:	00000000.00000003.1002790332.0000000000969000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	969000
Size:	16384

Details

Name:	00000000.00000003.891581950.000000000098E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	98E000
Size:	4096

Details

Name:	0000000D.00000002.867537233.00007DF590702000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF590702000
Size:	4096

Details

Name:	00000000.00000003.1002809824.00000000031FB000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	31FB000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.1020740227.00000000031CD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31CD000
Size:	8192

Details

Name:	00000003.00000003.748982146.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000007.00000002.1185386907.00007FF50CC37000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50CC37000
Size:	4096

Details

Name:	00000003.00000003.757561711.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000000.00000002.1185585598.0000000003F50000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3F50000
Size:	4096

Details

Name:	00000005.00000002.797316078.000000000109F000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	109F000
Size:	4096

Details

Name:	00000011.00000002.904537373.00007FF5B40CF000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B40CF000
Size:	8192

Details

Name:	00000002.00000002.782419172.0000000006450000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6450000
Size:	733184

Details

Name:	00000005.00000002.804793744.00000000054CD000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	54CD000
Size:	12288

Details

Name:	00000003.00000003.1063788707.0000000003160000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3160000
Size:	20480

Details

Name:	00000002.00000003.765057392.0000000000D40000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D40000
Size:	4096

Details

Name:	00000007.00000002.1184716615.000002402E480000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2402E480000
Size:	12288

Details

Name:	00000003.00000003.1111411515.00000000055EA000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55EA000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.766163501.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000000.00000002.1184856059.00000000008E0000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	8E0000
Size:	65536

Details

Name:	00000000.00000002.1185339879.00000000027BE000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	27BE000
Size:	8192

Details

Name:	00000003.00000002.1186303529.0000000005ABF000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5ABF000
Size:	4096

Details

Name:	00000014.00000002.932383709.00007FF5B826C000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B826C000
Size:	4096

Details

Name:	00000004.00000002.788763151.0000000000C4E000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	C4E000
Size:	8192

Details

Name:	00000007.00000002.1185637652.00007FF50CF6D000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50CF6D000
Size:	4096

Details

Name:	00000005.00000002.800176597.0000000002E88000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E88000
Size:	20480

Details

Name:	0000000A.00000000.783475369.0000017C2EDB0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	17C2EDB0000
Size:	102400

Details

Name:	00000011.00000002.904405747.00007FF5B3F6E000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B3F6E000
Size:	4096

Details

Name:	00000013.00000003.937521640.000001BBAB781000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB781000
Size:	4096

Details

Name:	00000013.00000002.950956800.000001BBAAF02000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAAF02000
Size:	16384

Details

Name:	00000004.00000002.788729387.0000000000A30000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A30000
Size:	36864

Details

Name:	00000003.00000003.895790142.0000000003165000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3165000
Size:	393216

Details

Name:	00000007.00000000.744569008.000002402E460000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2402E460000
Size:	102400

Details

Name:	00000004.00000002.789032174.0000000002E1B000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E1B000
Size:	49152

Details

Name:	00000002.00000002.782028188.0000000000950000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	950000
Size:	4096

Details

Name:	00000003.00000003.1018744386.000000000314E000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	314E000
Size:	16384

Details

Name:	0000000D.00000002.867267920.000001C992802000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C992802000
Size:	65536

Details

Name:	00000000.00000003.1181875317.0000000000960000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	960000
Size:	12288

Details

Name:	00000000.00000003.846269602.0000000003E51000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E51000
Size:	671744

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000013.00000003.928609392.000001BBAB78E000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB78E000
Size:	49152

Details

Name:	00000003.00000003.746570439.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000003.00000003.1018697974.0000000003158000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3158000
Size:	24576

Details

Name:	00000002.00000003.764220182.0000000000D40000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D40000
Size:	4096

Details

Name:	00000013.00000002.951259736.000001BBAB78E000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB78E000
Size:	20480

Details

Name:	00000014.00000002.932104601.0000018B1B14E000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18B1B14E000
Size:	65536

Details

Name:	0000000A.00000002.794943320.0000007C2C9FE000.00000004.00000010.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	7C2C9FE000
Size:	8192

Details

Name:	00000003.00000003.849730424.0000000005BC1000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5BC1000
Size:	815104

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000A.00000003.794697578.0000017C2F07D000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	17C2F07D000
Size:	40960

Details

Name:	00000002.00000002.782049244.0000000000B19000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	B19000
Size:	12288

Details

Name:	00000014.00000002.932361986.00007FF5B8245000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B8245000
Size:	12288

Details

Name:	00000003.00000002.1184785669.000000000100D000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	100D000
Size:	8192

Details

Name:	00000013.00000002.951143229.000001BBAB71D000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB71D000
Size:	180224

Details

Name:	00000013.00000003.933517533.000001BBAB796000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB796000
Size:	118784

Details

Name:	00000003.00000003.761340544.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000000.00000003.1092843032.0000000000958000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	958000
Size:	45056

Details

Name:	00000013.00000003.935803233.000001BBAB788000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB788000
Size:	20480

Details

Name:	00000002.00000003.781790566.0000000000E1A000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E1A000
Size:	36864

Details

Name:	00000011.00000003.903830594.000001E0C8A4A000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E0C8A4A000
Size:	24576

Details

Name:	00000003.00000003.764425782.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000003.00000003.1020657764.0000000003152000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3152000
Size:	12288

Details

Name:	00000011.00000002.904487886.00007FF5B409C000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B409C000
Size:	4096

Details

Name:	00000007.00000002.1185408412.00007FF50CC8A000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50CC8A000
Size:	4096

Details

Name:	0000000D.00000002.867526126.00007DF5906F2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5906F2000
Size:	4096

Details

Name:	00000005.00000002.798170997.0000000002E01000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E01000
Size:	16384

Details

Name:	00000013.00000002.950538184.0000004771CFE000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4771CFE000
Size:	8192

Details

Name:	00000013.00000002.951608774.00007FF523E31000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523E31000
Size:	8192

Details

Name:	00000002.00000003.781778711.0000000000E0F000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E0F000
Size:	8192

Details

Name:	00000003.00000003.762813071.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000002.00000002.782145422.0000000000E24000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E24000
Size:	12288

Details

Name:	00000003.00000000.660718055.000000007FDE0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FDE0000
Size:	4096

Details

Name:	00000002.00000002.782546482.000000007F962000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F962000
Size:	4096

Details

Name:	00000002.00000003.758158453.0000000000D40000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D40000
Size:	4096

Details

Name:	00000003.00000003.744761645.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000007.00000002.1186058271.00007FF50D111000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50D111000
Size:	20480

Details

Name:	00000011.00000002.904462523.00007FF5B4075000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B4075000
Size:	12288

Details

Name:	00000002.00000003.763216272.0000000000D40000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D40000
Size:	4096

Details

Name:	00000000.00000003.1047372615.0000000003E51000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3E51000
Size:	888832

Details

Name:	00000005.00000000.685893667.000000007FE32000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FE32000
Size:	4096

Details

Name:	00000011.00000002.904503181.00007FF5B40A7000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B40A7000
Size:	28672

Details

Name:	00000000.00000002.1185268720.00000000025AC000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	25AC000
Size:	16384

Details

Name:	0000000D.00000002.867290241.000001C992813000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C992813000
Size:	86016

Details

Name:	0000000D.00000002.867078471.0000003ECEE7B000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3ECEE7B000
Size:	20480

Details

Name:	00000013.00000002.951983986.00007FF523FCF000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523FCF000
Size:	8192

Details

Name:	00000000.00000002.1185938383.000000006E621000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E621000
Size:	16384

Details

Name:	00000014.00000002.932062169.0000018B1B0E0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	18B1B0E0000
Size:	12288

Details

Name:	00000013.00000002.950860594.000001BBAAEA4000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAAEA4000
Size:	40960

Details

Name:	00000014.00000002.932075145.0000018B1B120000.00000004.00000020.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	18B1B120000
Size:	69632

Details

Name:	00000013.00000000.918554401.00007DF539100000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF539100000
Size:	12288

Details

Name:	0000000D.00000002.867444116.000001C992913000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C992913000
Size:	12288

Details

Name:	00000013.00000003.938293099.000001BBAB79C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB79C000
Size:	241664

Details

Name:	00000000.00000003.1090736637.0000000000964000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	964000
Size:	16384

Details

Name:	0000000A.00000002.795181899.00007DF507EF2000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF507EF2000
Size:	4096

Details

Name:	0000000D.00000002.867091693.0000003ECEEFE000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3ECEEFE000
Size:	8192

Details

Name:	00000004.00000002.788660817.000000000078B000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	78B000
Size:	20480

Details

Name:	00000004.00000002.788833459.0000000001030000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1030000
Size:	4096

Details

Name:	00000007.00000002.1186048845.00007FF50D10A000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50D10A000
Size:	12288

Details

Name:	0000000A.00000002.795364972.00007FF4F2D85000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F2D85000
Size:	12288

Details

Name:	0000000A.00000002.795094748.0000017C2F070000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C2F070000
Size:	53248

Details

Name:	0000000D.00000002.867227574.000001C992700000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1C992700000
Size:	12288

Details

Name:	00000013.00000000.918580395.00007FF524062000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF524062000
Size:	16384

Details

Name:	0000000D.00000002.867191098.000001C9926E0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1C9926E0000
Size:	102400

Details

Name:	00000003.00000003.759934210.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000003.00000003.1020612821.00000000055EC000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55EC000
Size:	40960

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000003.752065284.0000000004540000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4540000
Size:	4096

Details

Name:	00000004.00000002.788892537.0000000002D89000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D89000
Size:	28672

Details

Name:	0000000D.00000002.867233943.000001C992710000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1C992710000
Size:	4096

Details

Name:	0000000D.00000002.867262527.000001C992800000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C992800000
Size:	4096

Details

Name:	00000000.00000002.1184601893.000000000049C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	49C000
Size:	16384

Details

Name:	00000011.00000000.892533379.000001E0C89A0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E0C89A0000
Size:	102400

Details

Name:	0000000A.00000002.794884181.0000007C2C47E000.00000004.00000010.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	7C2C47E000
Size:	8192

Details

Name:	00000013.00000002.950609547.000001BBAAC40000.00000004.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1BBAAC40000
Size:	4096

Details

Name:	00000005.00000000.681331987.0000000000CD0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	CD0000
Size:	102400

Details

Name:	0000000A.00000002.794999498.0000017C2EDE0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	17C2EDE0000
Size:	4096

Details

Name:	00000000.00000002.1185506742.00000000039CF000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	39CF000
Size:	4096

Details

Name:	00000004.00000003.763751071.0000000004550000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4550000
Size:	4096

Details

Name:	00000003.00000003.850288420.00000000031C6000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31C6000
Size:	20480

Details

Name:	00000007.00000002.1185854193.00007FF50D037000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50D037000
Size:	49152

Details

Name:	00000000.00000002.1185991596.000000007F0D2000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F0D2000
Size:	4096

Details

Name:	00000004.00000003.766802881.0000000004550000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4550000
Size:	4096

Details

Name:	00000003.00000003.847890423.00000000031C6000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31C6000
Size:	8192

Details

Name:	00000013.00000003.939745982.000001BBAB781000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB781000
Size:	49152

Details

Name:	00000013.00000002.951301120.00007DF5390E0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5390E0000
Size:	4096

Details

Name:	00000005.00000000.685183115.000000007FE22000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FE22000
Size:	4096

Details

Name:	00000007.00000000.744590051.00007DF5221B0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5221B0000
Size:	12288

Details

Name:	00000004.00000003.788508291.0000000000A30000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A30000
Size:	36864

Details

Name:	00000004.00000002.789012162.0000000002DFF000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DFF000
Size:	4096

Details

Name:	00000002.00000003.742061179.0000000000D40000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D40000
Size:	4096

Details

Name:	00000000.00000002.1185808998.000000006E5EE000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E5EE000
Size:	143360

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to development resources	System Summary
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000007.00000002.1184821417.000002402E55B000.00000004.00000020.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2402E55B000
Size:	311296

Details

Name:	00000013.00000003.939725358.000001BBAB781000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB781000
Size:	49152

Details

Name:	00000004.00000002.789055010.0000000002E74000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E74000
Size:	28672

Details

Name:	00000000.00000002.1184794764.000000000089B000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	89B000
Size:	270336

Details

Name:	00000002.00000002.782205462.0000000002CA7000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CA7000
Size:	12288

Details

Name:	00000014.00000002.932474265.00007FF5B832A000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B832A000
Size:	12288

Details

Name:	00000002.00000003.726549146.0000000000E19000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E19000
Size:	86016

Details

Name:	00000004.00000003.766095500.0000000004550000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4550000
Size:	4096

Details

Name:	00000002.00000003.781817556.0000000000E12000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E12000
Size:	28672

Details

Name:	0000000A.00000002.794866826.0000007C2C17C000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7C2C17C000
Size:	16384

Details

Name:	00000003.00000003.850240856.00000000031F2000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31F2000
Size:	4096

Details

Name:	00000005.00000003.765595461.0000000004D30000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D30000
Size:	4096

Details

Name:	0000000A.00000002.795186522.00007DF507F00000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF507F00000
Size:	4096

Details

Name:	00000002.00000003.781830397.0000000000E24000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E24000
Size:	12288

Details

Name:	00000000.00000003.1002760908.000000000094E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	94E000
Size:	20480

Details

Name:	00000002.00000002.782304944.0000000002DFF000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DFF000
Size:	4096

Details

Name:	00000005.00000003.762617447.0000000004D30000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D30000
Size:	4096

Details

Name:	00000007.00000002.1185236622.00007DF522190000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF522190000
Size:	4096

Details

Name:	00000005.00000002.796687229.0000000001000000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1000000
Size:	16384

Details

Name:	00000002.00000003.781771780.0000000000E07000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E07000
Size:	28672

Details

Name:	00000003.00000002.1184658770.0000000000DA0000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	DA0000
Size:	16384

Details

Name:	00000007.00000002.1184784308.000002402E538000.00000004.00000020.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2402E538000
Size:	139264

Details

Name:	00000004.00000002.788997965.0000000002DF3000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DF3000
Size:	12288

Details

Name:	00000002.00000002.782401111.00000000048AF000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	48AF000
Size:	4096

Details

Name:	00000005.00000002.798150796.0000000002DFF000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DFF000
Size:	4096

Details

Name:	00000002.00000002.782035751.00000000009C0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	9C0000
Size:	16384

Details

Name:	00000013.00000000.918532118.00007DF5390E0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5390E0000
Size:	4096

Details

Name:	00000000.00000003.800330229.00000000031FC000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	31FC000
Size:	4096

Details

Name:	00000014.00000002.932430380.00007FF5B82A8000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B82A8000
Size:	12288

Details

Name:	00000003.00000003.1154366970.00000000031DD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31DD000
Size:	8192

Details

Name:	00000013.00000002.951944765.00007FF523FBA000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523FBA000
Size:	20480

Details

Name:	00000014.00000002.931990485.00000020DBA7F000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	20DBA7F000
Size:	4096

Details

Name:	00000013.00000003.929871172.000001BBABC02000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBABC02000
Size:	114688

Details

Name:	0000000D.00000002.867706019.00007FF57B57E000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57B57E000
Size:	4096

Details

Name:	00000003.00000003.804680291.00000000031CD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31CD000
Size:	4096

Details

Name:	00000005.00000002.804901767.000000007FE22000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FE22000
Size:	4096

Details

Name:	00000003.00000003.1063768056.00000000031D4000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31D4000
Size:	20480

Details

Name:	00000003.00000002.1184675051.0000000000DA5000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	DA5000
Size:	12288

Details

Name:	00000004.00000003.753871602.0000000004540000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4540000
Size:	4096

Details

Name:	00000011.00000002.904057103.000000158367F000.00000004.00000010.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	158367F000
Size:	4096

Details

Name:	00000003.00000003.895766540.00000000031D6000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31D6000
Size:	4096

Details

Name:	0000000D.00000002.867101567.0000003ECEFF7000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3ECEFF7000
Size:	36864

Details

Name:	00000003.00000003.1108936536.00000000031C6000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31C6000
Size:	8192

Details

Name:	00000013.00000002.951561005.00007FF523DA4000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523DA4000
Size:	4096

Details

Name:	00000002.00000000.660339436.000000007F950000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F950000
Size:	4096

Details

Name:	00000002.00000002.782053761.0000000000B1D000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	B1D000
Size:	4096

Details

Name:	00000013.00000003.929691238.000001BBAB78E000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB78E000
Size:	32768

Details

Name:	0000000A.00000002.795283742.00007FF4F2C61000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F2C61000
Size:	4096

Details

Name:	00000005.00000003.766064435.0000000004D30000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D30000
Size:	4096

Details

Name:	00000013.00000002.951202514.000001BBAB774000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB774000
Size:	24576

Details

Name:	00000005.00000002.804906245.000000007FE30000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FE30000
Size:	4096

Details

Name:	00000007.00000002.1185622411.00007FF50CF66000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50CF66000
Size:	12288

Details

Name:	00000005.00000002.798020620.0000000002DEF000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DEF000
Size:	8192

Details

Name:	00000013.00000002.952041676.00007FF524054000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF524054000
Size:	20480

Details

Name:	00000005.00000002.800275499.0000000003160000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3160000
Size:	4096

Details

Name:	00000007.00000002.1185913324.00007FF50D06A000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50D06A000
Size:	20480

Details

Name:	00000011.00000002.904073158.000001E0C8980000.00000004.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1E0C8980000
Size:	4096

Details

Name:	00000007.00000002.1184977106.000002402E7D0000.00000004.00000040.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2402E7D0000
Size:	12288

Details

Name:	00000007.00000002.1185393864.00007FF50CC86000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50CC86000
Size:	12288

Details

Name:	00000005.00000002.800319317.000000000318A000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	318A000
Size:	106496

Details

Name:	00000013.00000002.951816194.00007FF523F6E000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523F6E000
Size:	4096

Details

Name:	00000003.00000002.1186229017.0000000005261000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5261000
Size:	4096

Details

Name:	00000003.00000002.1186382091.0000000005D10000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5D10000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000013.00000002.951333509.00007DF539100000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF539100000
Size:	12288

Details

Name:	00000013.00000002.950642307.000001BBAAC80000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1BBAAC80000
Size:	12288

Details

Name:	00000000.00000003.891598254.0000000000955000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	955000
Size:	36864

Details

Name:	00000007.00000002.1185501573.00007FF50CE71000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50CE71000
Size:	12288

Details

Name:	00000000.00000003.757680486.0000000000870000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	870000
Size:	4096

Details

Name:	00000005.00000003.764962894.0000000004D30000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D30000
Size:	4096

Details

Name:	00000002.00000003.763618245.0000000000D40000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D40000
Size:	4096

Details

Name:	00000014.00000002.932030946.0000018B1B0A0000.00000004.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	18B1B0A0000
Size:	4096

Details

Name:	0000000D.00000002.867409400.000001C99288A000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C99288A000
Size:	24576

Details

Name:	00000013.00000003.928571348.000001BBAB77D000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB77D000
Size:	24576

Details

Name:	00000007.00000002.1185586183.00007FF50CF23000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50CF23000
Size:	8192

Details

Name:	00000013.00000003.934862113.000001BBAB788000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB788000
Size:	20480

Details

Name:	0000000A.00000002.795406776.00007FF4F2DC4000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F2DC4000
Size:	4096

Details

Name:	00000002.00000002.782362225.0000000002E93000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E93000
Size:	16384

Details

Name:	00000007.00000002.1185267678.00007DF5221A2000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5221A2000
Size:	4096

Details

Name:	00000003.00000003.741747846.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000002.00000003.740240785.0000000000D40000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D40000
Size:	4096

Details

Name:	00000003.00000002.1185774275.00000000033A0000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	33A0000
Size:	20480

Details

Name:	00000013.00000003.931361813.000001BBAB7B7000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB7B7000
Size:	122880

Details

Name:	0000000D.00000002.867486092.00007DF48E5C0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF48E5C0000
Size:	20480

Details

Name:	00000013.00000002.950918193.000001BBAAEEA000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAAEEA000
Size:	53248

Details

Name:	00000011.00000002.904014882.00000015832FF000.00000004.00000010.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	15832FF000
Size:	4096

Details

Name:	00000011.00000002.904351238.00007FF5B3C30000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B3C30000
Size:	20480

Details

Name:	00000003.00000003.804622660.00000000031C3000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31C3000
Size:	8192

Details

Name:	00000003.00000002.1185164439.0000000002E16000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E16000
Size:	16384

Details

Name:	00000002.00000003.766396779.0000000000D40000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D40000
Size:	4096

Details

Name:	00000014.00000002.932036420.0000018B1B0C0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	18B1B0C0000
Size:	102400

Details

Name:	00000003.00000002.1186605961.000000007FDE0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FDE0000
Size:	4096

Details

Name:	00000013.00000002.951655337.00007FF523E6E000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523E6E000
Size:	4096

Details

Name:	00000000.00000003.891627365.0000000000965000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	965000
Size:	8192

Details

Name:	00000000.00000003.1092869524.00000000031FB000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	31FB000
Size:	4096

Details

Name:	00000014.00000002.932005847.00000020DBB7A000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	20DBB7A000
Size:	24576

Details

Name:	00000000.00000003.1092826534.000000000094F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	94F000
Size:	16384

Details

Name:	00000003.00000002.1185102187.0000000002DEF000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DEF000
Size:	8192

Details

Name:	00000003.00000003.1162743736.00000000055EA000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55EA000
Size:	28672

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.1154344601.00000000031DF000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31DF000
Size:	32768

Details

Name:	00000002.00000002.782334241.0000000002E61000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E61000
Size:	12288

Details

Name:	00000002.00000003.760737678.0000000000D40000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D40000
Size:	4096

Details

Name:	0000000A.00000002.795410957.00007FF4F2DCA000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F2DCA000
Size:	20480

Details

Name:	00000007.00000000.744647087.00007FF50D112000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50D112000
Size:	16384

Details

Name:	00000011.00000002.904409951.00007FF5B3FBD000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B3FBD000
Size:	20480

Details

Name:	00000007.00000002.1185963783.00007FF50D08E000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50D08E000
Size:	16384

Details

Name:	00000003.00000002.1185872535.0000000003730000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3730000
Size:	4096

Details

Name:	00000000.00000002.1185175070.0000000001090000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1090000
Size:	4096

Details

Name:	00000014.00000002.931997535.00000020DBAF9000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	20DBAF9000
Size:	28672

Details

Name:	00000003.00000003.847963920.000000000314E000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	314E000
Size:	16384

Details

Name:	00000003.00000003.1020644379.00000000031CF000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31CF000
Size:	40960

Details

Name:	0000000A.00000000.783511960.00007DF507F10000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF507F10000
Size:	12288

Details

Name:	00000003.00000003.759397782.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000003.00000002.1185200283.0000000002E65000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E65000
Size:	32768

Details

Name:	00000003.00000002.1186139156.0000000004D00000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4D00000
Size:	4096

Details

Name:	0000000D.00000002.867662261.00007FF57B47E000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57B47E000
Size:	4096

Details

Name:	00000005.00000000.684057192.0000000002E93000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E93000
Size:	16384

Details

Name:	00000000.00000002.1185145299.0000000000F10000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	F10000
Size:	73728

Details

Name:	00000000.00000003.891640422.00000000008DB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	8DB000
Size:	8192

Details

Name:	00000013.00000003.950287799.000001BBAAE50000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAAE50000
Size:	110592

Details

Name:	00000003.00000002.1185023821.0000000002DD0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DD0000
Size:	32768

Details

Name:	00000003.00000002.1186489645.000000006E611000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6E611000
Size:	8192

Details

Name:	0000000D.00000002.867642070.00007FF57B423000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57B423000
Size:	8192

Details

Name:	00000000.00000002.1185103426.0000000000C8E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	C8E000
Size:	8192

Details

Name:	00000002.00000003.742685824.0000000000D40000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D40000
Size:	4096

Details

Name:	00000013.00000002.951966380.00007FF523FC4000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523FC4000
Size:	20480

Details

Name:	00000003.00000003.1111294503.0000000003152000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3152000
Size:	12288

Details

Name:	00000003.00000002.1185056603.0000000002DE5000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DE5000
Size:	4096

Details

Name:	00000013.00000003.933625330.000001BBABC02000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBABC02000
Size:	147456

Details

Name:	00000002.00000003.764019317.0000000000D40000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D40000
Size:	4096

Details

Name:	00000003.00000003.895759840.00000000031D0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31D0000
Size:	20480

Details

Name:	00000007.00000002.1186014236.00007FF50D0B3000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50D0B3000
Size:	81920

Details

Name:	00000014.00000003.931793735.0000018B1B145000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18B1B145000
Size:	32768

Details

Name:	00000002.00000002.782290160.0000000002DEF000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DEF000
Size:	8192

Details

Name:	00000011.00000002.904515517.00007FF5B40B4000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B40B4000
Size:	4096

Details

Name:	00000003.00000003.751995838.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000004.00000000.669118876.000000007F480000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F480000
Size:	4096

Details

Name:	00000013.00000000.918549200.00007DF5390F2000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5390F2000
Size:	4096

Details

Name:	00000003.00000003.741144650.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000005.00000003.755002358.00000000031B2000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31B2000
Size:	28672

Details

Name:	0000000A.00000002.795158247.0000017C2F580000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	17C2F580000
Size:	4096

Details

Name:	00000005.00000002.797998276.0000000002DE7000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DE7000
Size:	12288

Details

Name:	00000005.00000002.800283400.0000000003180000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	3180000
Size:	32768

Details

Name:	0000000D.00000000.852370091.00007DF590702000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF590702000
Size:	4096

Details

Name:	00000002.00000002.782084388.0000000000D9D000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	D9D000
Size:	12288

Details

Name:	00000005.00000002.804871251.0000000006E38000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	6E38000
Size:	8192

Details

Name:	00000003.00000002.1186399189.000000006E5A1000.00000020.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	6E5A1000
Size:	8192

Details

Name:	00000003.00000002.1184832795.0000000002C62000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C62000
Size:	8192

Details

Name:	00000003.00000003.893249482.00000000031D2000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31D2000
Size:	32768

Details

Name:	00000003.00000003.895771699.00000000031D8000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31D8000
Size:	4096

Details

Name:	00000002.00000000.660344166.000000007F952000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F952000
Size:	4096

Details

Name:	00000003.00000003.752598745.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000000.00000003.1001262241.0000000000955000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	955000
Size:	49152

Details

Name:	00000003.00000002.1186499883.000000006E613000.00000040.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute and read and write
Base address:	6E613000
Size:	8192

Details

Name:	00000003.00000002.1184611851.0000000000D00000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	D00000
Size:	16384

Details

Name:	00000000.00000002.1184691625.0000000000860000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	860000
Size:	4096

Details

Name:	00000004.00000003.754708935.0000000004540000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4540000
Size:	4096

Details

Name:	00000013.00000002.952073961.00007FF524061000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF524061000
Size:	20480

Details

Name:	00000011.00000000.892569050.00007DF5C91F2000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5C91F2000
Size:	4096

Details

Name:	00000007.00000002.1185648292.00007FF50CF8C000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50CF8C000
Size:	8192

Details

Name:	00000002.00000003.761339979.0000000000D40000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D40000
Size:	4096

Details

Name:	00000013.00000003.934931785.000001BBAB79A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB79A000
Size:	4096

Details

Name:	00000003.00000003.849822043.0000000005CC1000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5CC1000
Size:	888832

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000011.00000002.904390274.00007FF5B3F31000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B3F31000
Size:	8192

Details

Name:	00000013.00000002.951836616.00007FF523F75000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523F75000
Size:	12288

Details

Name:	00000003.00000002.1185800650.00000000033A7000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	33A7000
Size:	8192

Details

Name:	00000000.00000003.1092878117.00000000031FA000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	31FA000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.1173220309.0000000003152000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3152000
Size:	12288

Details

Name:	0000000A.00000002.795469557.00007FF4F2E64000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F2E64000
Size:	20480

Details

Name:	00000013.00000002.950717514.000001BBAAE13000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAAE13000
Size:	86016

Details

Name:	00000013.00000002.950530579.0000004771C7B000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4771C7B000
Size:	20480

Details

Name:	0000000A.00000002.795004677.0000017C2EE00000.00000004.00000020.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	17C2EE00000
Size:	8192

Details

Name:	00000003.00000003.750790239.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000011.00000002.904110284.000001E0C89D0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E0C89D0000
Size:	4096

Details

Name:	00000003.00000003.1020756598.0000000003165000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3165000
Size:	393216

Details

Name:	00000000.00000002.1185981562.000000007F0D0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F0D0000
Size:	4096

Details

Name:	00000000.00000003.846365128.0000000002FFC000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	2FFC000
Size:	466944

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000002.00000003.757562272.0000000000D40000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D40000
Size:	4096

Details

Name:	00000005.00000002.799427371.0000000002E16000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E16000
Size:	16384

Details

Name:	00000004.00000003.755311997.0000000004540000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4540000
Size:	4096

Details

Name:	00000004.00000003.758661004.0000000004550000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4550000
Size:	4096

Details

Name:	00000004.00000002.789042328.0000000002E61000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E61000
Size:	12288

Details

Name:	00000005.00000002.797365888.00000000010A0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	10A0000
Size:	4096

Details

Name:	00000013.00000003.929831613.000001BBABC1E000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBABC1E000
Size:	114688

Details

Name:	00000014.00000002.931955425.00000020DB72A000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20DB72A000
Size:	24576

Details

Name:	00000004.00000003.766564204.0000000004550000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4550000
Size:	4096

Details

Name:	00000007.00000002.1185325689.00007FF50C730000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50C730000
Size:	40960

Details

Name:	00000014.00000002.932132072.0000018B1B330000.00000004.00000040.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	18B1B330000
Size:	12288

Details

Name:	00000003.00000002.1184860456.0000000002C86000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C86000
Size:	4096

Details

Name:	00000011.00000002.904203570.000001E0C8A8B000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E0C8A8B000
Size:	24576

Details

Name:	00000003.00000003.804645782.00000000031CD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31CD000
Size:	4096

Details

Name:	00000005.00000002.797874911.0000000002DC3000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DC3000
Size:	28672

Details

Name:	00000000.00000002.1184873839.00000000008F1000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	8F1000
Size:	307200

Details

Name:	00000004.00000003.756684223.0000000004540000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4540000
Size:	4096

Details

Name:	00000007.00000002.1185905409.00007FF50D064000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50D064000
Size:	4096

Details

Name:	00000004.00000002.789235886.0000000004F4E000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4F4E000
Size:	8192

Details

Name:	00000002.00000003.739637775.0000000000D40000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D40000
Size:	4096

Details

Name:	00000014.00000002.932424609.00007FF5B829E000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B829E000
Size:	12288

Details

Name:	00000013.00000002.951749953.00007FF523F3F000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523F3F000
Size:	4096

Details

Name:	00000000.00000002.1184947842.000000000093D000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	93D000
Size:	90112

Details

Name:	00000004.00000002.789081067.000000000451E000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	451E000
Size:	8192

Details

Name:	00000004.00000002.788982748.0000000002DE7000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DE7000
Size:	12288

Details

Name:	00000000.00000003.800241928.0000000000955000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	955000
Size:	8192

Details

Name:	00000013.00000002.951374230.00007FF5237BE000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5237BE000
Size:	4096

Details

Name:	00000004.00000002.789214508.0000000004A50000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4A50000
Size:	4096

Details

Name:	0000000A.00000002.795242397.00007FF4F2946000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F2946000
Size:	32768

Details

Name:	0000000D.00000002.867365175.000001C992855000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C992855000
Size:	106496

Details

Name:	00000011.00000002.904222787.000001E0C8B08000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E0C8B08000
Size:	24576

Details

Name:	00000013.00000003.936904721.000001BBABC6A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBABC6A000
Size:	425984

Details

Name:	00000014.00000002.932191397.00007DF4CB280000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4CB280000
Size:	20480

Details

Name:	00000011.00000002.904120948.000001E0C8A00000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E0C8A00000
Size:	4096

Details

Name:	00000014.00000002.932117041.0000018B1B15F000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18B1B15F000
Size:	4096

Details

Name:	0000000D.00000002.867701030.00007FF57B57A000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57B57A000
Size:	8192

Details

Name:	00000000.00000003.1181865733.000000000098E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	98E000
Size:	4096

Details

Name:	00000003.00000003.1063762076.00000000031CF000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31CF000
Size:	16384

Details

Name:	00000003.00000002.1185214854.0000000002E74000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E74000
Size:	28672

Details

Name:	00000005.00000002.796061881.0000000000D80000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	D80000
Size:	4096

Details

Name:	00000011.00000002.904194794.000001E0C8A6F000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E0C8A6F000
Size:	61440

Details

Name:	00000007.00000002.1185452900.00007FF50CD9F000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50CD9F000
Size:	8192

Details

Name:	00000003.00000003.975708641.00000000031CE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31CE000
Size:	8192

Details

Name:	00000002.00000002.782074177.0000000000D20000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	D20000
Size:	4096

Details

Name:	00000002.00000002.782221084.0000000002D93000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D93000
Size:	4096

Details

Name:	00000000.00000002.1185452633.0000000002E73000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2E73000
Size:	4096

Details

Name:	00000003.00000003.763617673.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000002.00000000.660347930.000000007F960000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F960000
Size:	4096

Details

Name:	00000005.00000002.796006979.0000000000CD0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	CD0000
Size:	102400

Details

Name:	00000013.00000003.936835308.000001BBABC02000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBABC02000
Size:	159744

Details

Name:	00000011.00000002.904248542.000001E0C8EE0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E0C8EE0000
Size:	12288

Details

Name:	00000014.00000002.932446494.00007FF5B82B9000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B82B9000
Size:	12288

Details

Name:	00000007.00000002.1185883089.00007FF50D058000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50D058000
Size:	24576

Details

Name:	00000011.00000002.904274419.000001E0C9202000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E0C9202000
Size:	4096

Details

Name:	00000013.00000002.951676998.00007FF523E78000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523E78000
Size:	4096

Details

Name:	00000000.00000002.1185484339.00000000037CF000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	37CF000
Size:	4096

Details

Name:	00000000.00000003.1092819427.000000000098E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	98E000
Size:	4096

Details

Name:	00000013.00000002.950909415.000001BBAAEDF000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAAEDF000
Size:	40960

Details

Name:	00000003.00000003.750187639.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000000.00000003.764328723.0000000000870000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	870000
Size:	4096

Details

Name:	00000004.00000002.788907987.0000000002D9A000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D9A000
Size:	20480

Details

Name:	00000013.00000002.951096213.000001BBAB4E0000.00000004.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1BBAB4E0000
Size:	8192

Details

Name:	00000000.00000003.1090699984.0000000000964000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	964000
Size:	16384

Details

Name:	00000002.00000002.782041154.00000000009E0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	9E0000
Size:	4096

Details

Name:	00000002.00000001.660629862.000000006E5A0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E5A0000
Size:	4096

Details

Name:	00000013.00000002.951663897.00007FF523E73000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523E73000
Size:	8192

Details

Name:	00000007.00000002.1185981073.00007FF50D096000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50D096000
Size:	8192

Details

Name:	0000000D.00000000.852413727.00007FF57B672000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57B672000
Size:	16384

Details

Name:	00000013.00000002.951491122.00007FF523B87000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523B87000
Size:	4096

Details

Name:	00000003.00000003.804629791.00000000031C6000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31C6000
Size:	24576

Details

Name:	0000000A.00000002.795397728.00007FF4F2DB7000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F2DB7000
Size:	28672

Details

Name:	00000000.00000002.1185112122.0000000000CCE000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	CCE000
Size:	8192

Details

Name:	0000000D.00000002.867734314.00007FF57B597000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57B597000
Size:	49152

Details

Name:	00000003.00000003.847775977.00000000031D2000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31D2000
Size:	32768

Details

Name:	0000000A.00000002.795481431.00007FF4F2E71000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F2E71000
Size:	20480

Details

Name:	00000011.00000002.904554545.00007FF5B40E6000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B40E6000
Size:	8192

Details

Name:	00000013.00000003.938110996.000001BBAB79C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB79C000
Size:	118784

Details

Name:	00000011.00000002.904346282.00007FF5B38BE000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B38BE000
Size:	4096

Details

Name:	00000000.00000002.1185913300.000000006E61E000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6E61E000
Size:	4096

Details

Name:	00000013.00000002.950615771.000001BBAAC50000.00000004.00000040.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1BBAAC50000
Size:	4096

Details

Name:	00000000.00000003.764121777.0000000000870000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	870000
Size:	4096

Details

Name:	0000000D.00000002.867625693.00007FF57B25A000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57B25A000
Size:	4096

Details

Name:	0000000D.00000000.852348607.00007DF5906F2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5906F2000
Size:	4096

Details

Name:	00000004.00000002.789096394.0000000004540000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4540000
Size:	4096

Details

Name:	00000007.00000002.1185991843.00007FF50D099000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50D099000
Size:	12288

Details

Name:	00000011.00000002.904295631.00007DF5C91E2000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5C91E2000
Size:	4096

Details

Name:	00000003.00000003.763215436.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000005.00000002.800746785.0000000004C60000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4C60000
Size:	8192

Details

Name:	00000003.00000003.797379969.0000000003390000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3390000
Size:	4096

Details

Name:	00000003.00000003.847894941.0000000003152000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3152000
Size:	8192

Details

Name:	00000013.00000003.934741953.000001BBAB7B9000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB7B9000
Size:	151552

Details

Name:	00000002.00000003.781812923.0000000000E0F000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E0F000
Size:	8192

Details

Name:	00000003.00000002.1186264785.00000000059BB000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	59BB000
Size:	20480

Details

Name:	00000000.00000002.1184659854.00000000007C6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7C6000
Size:	4096

Details

Name:	00000004.00000002.788851087.0000000001090000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1090000
Size:	4096

Details

Name:	0000000A.00000002.795034634.0000017C2F002000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C2F002000
Size:	65536

Details

Name:	00000004.00000002.788786827.0000000000C60000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	C60000
Size:	36864

Details

Name:	00000005.00000002.799483098.0000000002E1B000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E1B000
Size:	49152

Details

Name:	00000003.00000002.1186641046.000000007FE00000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FE00000
Size:	12288

Details

Name:	00000003.00000002.1186245824.00000000055EB000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	55EB000
Size:	24576

Details

Name:	00000013.00000002.951736442.00007FF523F23000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523F23000
Size:	4096

Details

Name:	00000004.00000003.765860840.0000000004550000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4550000
Size:	4096

Details

Name:	00000003.00000002.1185122743.0000000002DFA000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DFA000
Size:	16384

Details

Name:	0000000D.00000002.867789277.00007FF57B5DF000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57B5DF000
Size:	8192

Details

Name:	00000013.00000003.927976416.000001BBAB722000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB722000
Size:	90112

Details

Name:	00000002.00000003.738432775.0000000000D40000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D40000
Size:	4096

Details

Name:	00000011.00000002.904438854.00007FF5B405C000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B405C000
Size:	8192

Details

Name:	00000005.00000002.797790472.0000000002DAD000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DAD000
Size:	4096

Details

Name:	00000003.00000002.1186616093.000000007FDE2000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FDE2000
Size:	4096

Details

Name:	00000013.00000002.951220797.000001BBAB77C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB77C000
Size:	4096

Details

Name:	00000011.00000002.904424755.00007FF5B3FD4000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B3FD4000
Size:	4096

Details

Name:	00000004.00000002.789230315.0000000004F0E000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4F0E000
Size:	8192

Details

Name:	00000014.00000002.932437394.00007FF5B82AE000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B82AE000
Size:	16384

Details

Name:	00000005.00000003.795691543.00000000031B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31B0000
Size:	106496

Details

Name:	00000002.00000002.782214521.0000000002D89000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D89000
Size:	28672

Details

Name:	00000004.00000003.741760823.0000000000A39000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A39000
Size:	86016

Details

Name:	00000003.00000002.1184685661.0000000000DB0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DB0000
Size:	4096

Details

Name:	0000000D.00000002.867657372.00007FF57B47B000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57B47B000
Size:	8192

Details

Name:	00000003.00000003.797401396.0000000003390000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3390000
Size:	4096

Details

Name:	00000000.00000002.1185347197.00000000027FE000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	27FE000
Size:	8192

Details

Name:	00000004.00000002.788843981.000000000108D000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	108D000
Size:	12288

Details

Name:	00000004.00000002.788695837.0000000000A00000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	A00000
Size:	32768

Details

Name:	00000002.00000002.782092588.0000000000DDE000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DDE000
Size:	8192

Details

Name:	00000014.00000002.932126796.0000018B1B320000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	18B1B320000
Size:	8192

Details

Name:	00000013.00000002.951828415.00007FF523F70000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523F70000
Size:	16384

Details

Name:	00000003.00000002.1184725501.0000000000E15000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E15000
Size:	8192

Details

Name:	00000011.00000002.904084215.000001E0C89A0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E0C89A0000
Size:	102400

Details

Name:	00000013.00000003.934690875.000001BBAB7B9000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB7B9000
Size:	77824

Details

Name:	00000003.00000003.1162719475.00000000031D7000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31D7000
Size:	32768

Details

Name:	00000013.00000002.950942860.000001BBAAEF8000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAAEF8000
Size:	36864

Details

Name:	00000003.00000002.1185729511.00000000031F2000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	31F2000
Size:	4096

Details

Name:	00000014.00000002.932121688.0000018B1B2F0000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18B1B2F0000
Size:	8192

Details

Name:	00000003.00000002.1184754922.0000000001001000.00000020.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	1001000
Size:	45056

Details

Name:	0000000A.00000002.794910138.0000007C2C7F7000.00000004.00000010.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	7C2C7F7000
Size:	36864

Details

Name:	00000003.00000002.1184710635.0000000000DF0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	DF0000
Size:	4096

Details

Name:	0000000D.00000002.867479512.000001C993002000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C993002000
Size:	4096

Details

Name:	00000013.00000002.950583386.000000477217F000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	477217F000
Size:	4096

Details

Name:	00000007.00000002.1184593177.0000005F8E8F9000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5F8E8F9000
Size:	28672

Details

Name:	00000004.00000002.788690889.0000000000827000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	827000
Size:	4096

Details

Name:	0000000A.00000002.795359408.00007FF4F2D80000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F2D80000
Size:	16384

Details

Name:	0000000D.00000002.867666423.00007FF57B4CD000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57B4CD000
Size:	20480

Details

Name:	0000000D.00000002.867543077.00007DF590710000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF590710000
Size:	12288

Details

Name:	00000005.00000002.797232673.000000000105E000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	105E000
Size:	8192

Details

Name:	00000003.00000002.1186312057.0000000005AFD000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5AFD000
Size:	12288

Details

Name:	00000007.00000002.1184640229.000002402E440000.00000004.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2402E440000
Size:	4096

Details

Name:	00000002.00000003.734776232.0000000000D40000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D40000
Size:	4096

Details

Name:	00000013.00000002.951426504.00007FF523AE2000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523AE2000
Size:	4096

Details

Name:	00000014.00000002.932206409.00007DF5CD3B2000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5CD3B2000
Size:	4096

Details

Name:	00000003.00000003.1020625261.00000000031D9000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31D9000
Size:	40960

Details

Name:	00000003.00000003.850211469.00000000031C6000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31C6000
Size:	24576

Details

Name:	00000005.00000002.800650247.000000000343A000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	343A000
Size:	12288

Details

Name:	00000003.00000003.804702213.0000000005569000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5569000
Size:	45056

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.744159114.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000000.00000003.1001295760.0000000000964000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	964000
Size:	12288

Details

Name:	00000011.00000002.904542986.00007FF5B40D8000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B40D8000
Size:	12288

Details

Name:	00000002.00000002.782171467.0000000001020000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1020000
Size:	20480

Details

Name:	00000002.00000000.660316593.00000000008A0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	8A0000
Size:	102400

Details

Name:	00000013.00000003.933563767.000001BBAB796000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB796000
Size:	147456

Details

Name:	00000003.00000002.1185414182.0000000003154000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3154000
Size:	4096

Details

Name:	00000013.00000002.951020133.000001BBAB200000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1BBAB200000
Size:	12288

Details

Name:	00000002.00000002.782352715.0000000002E82000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E82000
Size:	12288

Details

Name:	00000003.00000002.1185883780.0000000003740000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3740000
Size:	380928

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	00000007.00000002.1184577941.0000005F8E7FB000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5F8E7FB000
Size:	20480

Details

Name:	00000000.00000003.1001247293.000000000094E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	94E000
Size:	20480

Details

Name:	00000003.00000003.975636174.00000000031D0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31D0000
Size:	36864

Details

Name:	00000007.00000002.1185277319.00007DF5221B0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5221B0000
Size:	12288

Details

Name:	00000003.00000002.1184840764.0000000002C65000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C65000
Size:	4096

Details

Name:	00000002.00000002.782261264.0000000002DD0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DD0000
Size:	32768

Details

Name:	00000002.00000003.735385536.0000000000D40000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D40000
Size:	4096

Details

Name:	0000000A.00000002.794985980.0000017C2EDD0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	17C2EDD0000
Size:	12288

Details

Name:	00000013.00000002.951793951.00007FF523F5A000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523F5A000
Size:	4096

Details

Name:	00000002.00000003.765927862.0000000000D40000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D40000
Size:	4096

Details

Name:	00000013.00000003.933544403.000001BBAB7B7000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB7B7000
Size:	73728

Details

Name:	00000003.00000003.1018707752.0000000003160000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3160000
Size:	20480

Details

Name:	00000005.00000003.764097769.0000000004D30000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D30000
Size:	4096

Details

Name:	0000000D.00000002.867112889.0000003ECF0FE000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3ECF0FE000
Size:	8192

Details

Name:	00000004.00000003.762947372.0000000004550000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4550000
Size:	4096

Details

Name:	00000003.00000003.1173251954.0000000003160000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3160000
Size:	413696

Details

Name:	00000011.00000002.904590051.00007FF5B4161000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B4161000
Size:	20480

Details

Name:	00000000.00000003.891607298.000000000095F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	95F000
Size:	4096

Details

Name:	00000011.00000002.904450833.00007FF5B406E000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B406E000
Size:	4096

Details

Name:	00000000.00000002.1185122402.0000000000D0E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	D0E000
Size:	8192

Details

Name:	00000003.00000003.895748900.00000000031D6000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31D6000
Size:	4096

Details

Name:	00000004.00000003.788500911.0000000000A27000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A27000
Size:	28672

Details

Name:	00000003.00000003.742350342.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	0000000A.00000002.795278722.00007FF4F2C41000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F2C41000
Size:	8192

Details

Name:	00000004.00000003.759062584.0000000004550000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4550000
Size:	4096

Details

Name:	00000003.00000003.1173238008.0000000003158000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3158000
Size:	24576

Details

Name:	00000003.00000003.975649611.0000000003166000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3166000
Size:	389120

Details

Name:	00000005.00000002.804808059.0000000005531000.00000020.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	5531000
Size:	45056

Details

Name:	00000003.00000003.895871868.00000000031D8000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31D8000
Size:	4096

Details

Name:	00000007.00000002.1185247441.00007DF522192000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF522192000
Size:	4096

Details

Name:	00000013.00000003.937558176.000001BBAB79C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB79C000
Size:	12288

Details

Name:	00000004.00000002.789027273.0000000002E16000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E16000
Size:	16384

Details

Name:	00000005.00000002.800682674.0000000003640000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3640000
Size:	73728

Details

Name:	00000000.00000003.795424202.0000000000AC0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	AC0000
Size:	4096

Details

Name:	00000013.00000003.921788712.000001BBAB4D0000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB4D0000
Size:	4096

Details

Name:	00000007.00000002.1185745136.00007FF50D00C000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50D00C000
Size:	8192

Details

Name:	00000005.00000002.799743368.0000000002E65000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E65000
Size:	32768

Details

Name:	00000011.00000002.904036757.00000015834FB000.00000004.00000010.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	15834FB000
Size:	20480

Details

Name:	00000003.00000003.938813899.00000000031DF000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31DF000
Size:	16384

Details

Name:	00000004.00000002.788988489.0000000002DED000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DED000
Size:	4096

Details

Name:	00000011.00000002.904385038.00007FF5B3F13000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B3F13000
Size:	8192

Details

Name:	00000011.00000002.904210298.000001E0C8B00000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E0C8B00000
Size:	4096

Details

Name:	00000007.00000002.1184585933.0000005F8E87E000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5F8E87E000
Size:	8192

Details

Name:	00000005.00000002.804912561.000000007FE32000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FE32000
Size:	4096

Details

Name:	00000005.00000002.800581002.00000000033D0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	33D0000
Size:	12288

Details

Name:	00000004.00000000.669108918.000000007F470000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F470000
Size:	4096

Details

Name:	00000013.00000003.921781162.000001BBAB4D0000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB4D0000
Size:	4096

Details

Name:	00000013.00000002.950677215.000001BBAAD90000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1BBAAD90000
Size:	16384

Details

Name:	00000000.00000003.1090521674.0000000002E01000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	2E01000
Size:	471040

Details

Name:	00000004.00000002.789106299.0000000004564000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4564000
Size:	4096

Details

Name:	0000000A.00000002.795105044.0000017C2F08A000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C2F08A000
Size:	24576

Details

Name:	00000011.00000002.904493183.00007FF5B409F000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B409F000
Size:	16384

Details

Name:	00000005.00000003.763058465.0000000004D30000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D30000
Size:	4096

Details

Name:	0000000D.00000002.867833552.00007FF57B664000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57B664000
Size:	20480

Details

Name:	00000014.00000000.920130545.00007DF5CD3C2000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5CD3C2000
Size:	4096

Details

Name:	0000000A.00000002.795132287.0000017C2F113000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C2F113000
Size:	20480

Details

Name:	00000002.00000002.782225476.0000000002D9A000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D9A000
Size:	20480

Details

Name:	00000003.00000002.1186332563.0000000005B40000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5B40000
Size:	4096

Details

Name:	00000014.00000000.920083389.0000018B1B0C0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	18B1B0C0000
Size:	102400

Details

Name:	00000005.00000003.766298282.0000000004D30000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D30000
Size:	4096

Details

Name:	00000007.00000002.1184964478.000002402E780000.00000004.00000040.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2402E780000
Size:	4096

Details

Name:	00000003.00000002.1185648583.00000000031C9000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	31C9000
Size:	24576

Details

Name:	0000000D.00000002.867450324.000001C992AD0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1C992AD0000
Size:	4096

Details

Name:	00000013.00000002.951104079.000001BBAB602000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB602000
Size:	4096

Details

Name:	00000013.00000003.950306706.000001BBAAE4B000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAAE4B000
Size:	20480

Details

Name:	00000013.00000002.951286755.00007DF436FB0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF436FB0000
Size:	20480

Details

Name:	00000000.00000003.1092852417.0000000000964000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	964000
Size:	16384

Details

Name:	0000000A.00000002.795454173.00007FF4F2DF6000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F2DF6000
Size:	8192

Details

Name:	00000002.00000002.782131013.0000000000E12000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E12000
Size:	28672

Details

Name:	00000013.00000000.918518285.000001BBAAC60000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1BBAAC60000
Size:	102400

Details

Name:	00000000.00000000.658831244.0000000000440000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	440000
Size:	102400

Details

Name:	0000000A.00000002.794948134.0000017C2ED90000.00000004.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	17C2ED90000
Size:	4096

Details

Name:	00000005.00000002.796674433.0000000000F8C000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F8C000
Size:	12288

Details

Name:	00000002.00000002.782293931.0000000002DF3000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DF3000
Size:	12288

Details

Name:	00000005.00000002.800467349.00000000031AB000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	31AB000
Size:	16384

Details

Name:	00000005.00000000.686287300.000000007FE40000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FE40000
Size:	12288

Details

Name:	00000005.00000002.798007084.0000000002DED000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DED000
Size:	4096

Details

Name:	00000014.00000003.931809587.0000018B1B14E000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18B1B14E000
Size:	65536

Details

Name:	00000002.00000002.782155170.0000000000F5E000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F5E000
Size:	8192

Details

Name:	00000013.00000002.951603694.00007FF523E1A000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523E1A000
Size:	4096

Details

Name:	00000002.00000003.781800226.0000000000E24000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E24000
Size:	12288

Details

Name:	00000013.00000002.950759225.000001BBAAE3C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAAE3C000
Size:	53248

Details

Name:	00000005.00000002.797533644.0000000002C98000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C98000
Size:	12288

Details

Name:	00000004.00000002.789273451.000000007F482000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F482000
Size:	4096

Details

Name:	00000003.00000003.1018643572.00000000031F2000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31F2000
Size:	4096

Details

Name:	00000004.00000003.759732534.0000000004550000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4550000
Size:	4096

Details

Name:	0000000A.00000002.795317970.00007FF4F2CD3000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F2CD3000
Size:	24576

Details

Name:	00000013.00000003.937073024.000001BBABD02000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBABD02000
Size:	425984

Details

Name:	00000003.00000003.847787711.0000000003164000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3164000
Size:	389120

Details

Name:	00000002.00000003.755813522.0000000000D40000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D40000
Size:	4096

Details

Name:	00000004.00000003.741779945.0000000000A30000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A30000
Size:	8192

Details

Name:	00000003.00000003.747173507.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000000.00000002.1185900197.000000006E613000.00000040.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute and read and write
Base address:	6E613000
Size:	8192

Details

Name:	0000000D.00000002.867436577.000001C992908000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C992908000
Size:	24576

Details

Name:	0000000D.00000002.867243937.000001C992740000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1C992740000
Size:	16384

Details

Name:	00000014.00000000.920145577.00007DF5CD3D0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5CD3D0000
Size:	12288

Details

Name:	00000005.00000000.685484212.000000007FE30000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FE30000
Size:	4096

Details

Name:	00000003.00000003.1082978021.00000000031C8000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31C8000
Size:	28672

Details

Name:	00000003.00000003.724416228.0000000001090000.00000040.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	1090000
Size:	4096

Details

Name:	00000005.00000002.797392572.0000000001223000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1223000
Size:	12288

Details

Name:	00000013.00000003.929918618.000001BBAB77D000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB77D000
Size:	114688

Details

Name:	00000005.00000002.804138840.0000000004C70000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	4C70000
Size:	733184

Details

Name:	00000002.00000002.782268528.0000000002DD9000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DD9000
Size:	40960

Details

Name:	00000004.00000000.669101212.0000000002E93000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E93000
Size:	16384

Details

Name:	00000003.00000000.660723546.000000007FDF0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FDF0000
Size:	4096

Details

Name:	00000011.00000002.904047433.00000015835F7000.00000004.00000010.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	15835F7000
Size:	36864

Details

Name:	00000003.00000003.1111387250.00000000031D1000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31D1000
Size:	16384

Details

Name:	00000005.00000002.801020924.0000000004C64000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4C64000
Size:	4096

Details

Name:	0000000A.00000002.795267862.00007FF4F2BD1000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F2BD1000
Size:	12288

Details

Name:	00000013.00000002.951400977.00007FF523A4E000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523A4E000
Size:	12288

Details

Name:	00000004.00000002.788670457.0000000000790000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	790000
Size:	16384

Details

Name:	00000000.00000002.1185010432.0000000000964000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	964000
Size:	16384

Details

Name:	00000003.00000002.1186204165.000000000518D000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	518D000
Size:	12288

Details

Name:	00000000.00000002.1185617197.000000006E5A3000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E5A3000
Size:	4096

Details

Name:	00000000.00000002.1184717407.0000000000881000.00000020.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	881000
Size:	45056

Details

Name:	00000003.00000003.1162708148.00000000031F2000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31F2000
Size:	4096

Details

Name:	00000000.00000003.765829093.0000000000870000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	870000
Size:	4096

Details

Name:	00000000.00000003.1002799889.00000000031FC000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	31FC000
Size:	40960

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000002.1184602293.0000000000CFB000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	CFB000
Size:	20480

Details

Name:	00000007.00000002.1184767070.000002402E530000.00000004.00000020.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2402E530000
Size:	28672

Details

Name:	00000003.00000003.893284849.0000000003160000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3160000
Size:	16384

Details

Name:	00000013.00000002.951621111.00007FF523E51000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523E51000
Size:	4096

Details

Name:	00000013.00000002.950548830.0000004771DF9000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4771DF9000
Size:	28672

Details

Name:	00000000.00000000.658855091.000000007F0D0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F0D0000
Size:	4096

Details

Name:	00000013.00000002.952059542.00007FF52405A000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52405A000
Size:	12288

Details

Name:	0000000A.00000000.783501689.00007DF507F00000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF507F00000
Size:	4096

Details

Name:	00000011.00000000.892614148.00007FF5B4162000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B4162000
Size:	16384

Details

Name:	0000000A.00000000.783506249.00007DF507F02000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF507F02000
Size:	4096

Details

Name:	00000003.00000002.1185308377.000000000310A000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	310A000
Size:	278528

Details

Name:	00000003.00000003.1111373424.00000000031C6000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31C6000
Size:	36864

Details

Name:	0000000D.00000002.867598342.00007FF57B140000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57B140000
Size:	20480

Details

Name:	00000007.00000002.1185562601.00007FF50CF01000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50CF01000
Size:	4096

Details

Name:	00000013.00000003.928581476.000001BBAB79A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB79A000
Size:	45056

Details

Name:	00000003.00000003.938855118.0000000003140000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3140000
Size:	73728

Details

Name:	00000000.00000002.1185513821.0000000003ACC000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3ACC000
Size:	16384

Details

Name:	0000000D.00000002.867692206.00007FF57B56A000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57B56A000
Size:	4096

Details

Name:	00000013.00000002.951526191.00007FF523D2B000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523D2B000
Size:	12288

Details

Name:	00000011.00000002.904583525.00007FF5B415A000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B415A000
Size:	12288

Details

Name:	00000003.00000003.745364745.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000000.00000003.1002782924.0000000000963000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	963000
Size:	16384

Details

Name:	00000011.00000002.904177148.000001E0C8A55000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E0C8A55000
Size:	102400

Details

Name:	00000003.00000003.758158065.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000014.00000003.931775255.0000018B1B14E000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18B1B14E000
Size:	73728

Details

Name:	00000003.00000002.1184904503.0000000002D72000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D72000
Size:	20480

Details

Name:	00000003.00000003.1065622377.0000000005CC1000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5CC1000
Size:	327680

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000011.00000002.903992574.000000158327E000.00000004.00000010.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	158327E000
Size:	8192

Details

Name:	00000000.00000003.763057022.0000000000870000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	870000
Size:	4096

Details

Name:	00000011.00000002.904338770.00007FF5B38B8000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B38B8000
Size:	16384

Details

Name:	00000011.00000002.904125634.000001E0C8A02000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E0C8A02000
Size:	65536

Details

Name:	0000000A.00000002.795387717.00007FF4F2DAC000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F2DAC000
Size:	4096

Details

Name:	00000005.00000002.804799098.000000000550D000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	550D000
Size:	12288

Details

Name:	00000002.00000003.759397356.0000000000D40000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D40000
Size:	4096

Details

Name:	00000007.00000002.1185924999.00007FF50D074000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50D074000
Size:	32768

Details

Name:	00000002.00000002.782126936.0000000000E0F000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E0F000
Size:	8192

Details

Name:	00000013.00000002.950523912.0000004771B7E000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4771B7E000
Size:	8192

Details

Name:	0000000D.00000002.867841759.00007FF57B66A000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57B66A000
Size:	12288

Details

Name:	00000007.00000002.1185358401.00007FF50C97D000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50C97D000
Size:	12288

Details

Name:	00000000.00000002.1185471707.0000000003380000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3380000
Size:	4096

Details

Name:	00000004.00000003.761138843.0000000004550000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4550000
Size:	4096

Details

Name:	00000002.00000002.782162730.0000000000FC4000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	FC4000
Size:	4096

Details

Name:	00000000.00000003.891621990.000000000095F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	95F000
Size:	4096

Details

Name:	00000003.00000003.1173804673.00000000031D0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31D0000
Size:	12288

Details

Name:	00000000.00000003.1001340578.0000000000964000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	964000
Size:	12288

Details

Name:	00000013.00000003.939359395.000001BBAB7A2000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB7A2000
Size:	122880

Details

Name:	00000003.00000003.1162694423.00000000031DF000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31DF000
Size:	24576

Details

Name:	00000003.00000003.850225479.00000000031CB000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31CB000
Size:	4096

Details

Name:	00000003.00000003.893275525.0000000003158000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3158000
Size:	24576

Details

Name:	00000013.00000002.951802504.00007FF523F5C000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523F5C000
Size:	8192

Details

Name:	00000002.00000003.755210907.0000000000D40000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D40000
Size:	4096

Details

Name:	00000014.00000002.932097765.0000018B1B146000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18B1B146000
Size:	28672

Details

Name:	00000000.00000003.800364566.00000000031FA000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	31FA000
Size:	4096

Details

Name:	0000000D.00000002.867177862.000001C9926D0000.00000004.00000040.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1C9926D0000
Size:	4096

Details

Name:	00000003.00000003.1108773738.00000000051F1000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	51F1000
Size:	462848

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000002.00000000.660352624.000000007F962000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F962000
Size:	4096

Details

Name:	00000005.00000002.800213138.0000000002E93000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E93000
Size:	16384

Details

Name:	00000003.00000002.1184592292.0000000000CBC000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	CBC000
Size:	16384

Details

Name:	00000002.00000003.781731467.0000000004CE8000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4CE8000
Size:	4096

Details

Name:	00000005.00000002.795864064.0000000000CC0000.00000004.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	CC0000
Size:	4096

Details

Name:	00000003.00000003.1154388142.00000000031D1000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31D1000
Size:	8192

Details

Name:	00000003.00000003.804672048.00000000031CD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31CD000
Size:	4096

Details

Name:	00000003.00000000.660713272.0000000002E93000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E93000
Size:	16384

Details

Name:	0000000A.00000002.795350033.00007FF4F2D7A000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F2D7A000
Size:	8192

Details

Name:	0000000D.00000002.867054484.0000003ECED7B000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3ECED7B000
Size:	20480

Details

Name:	00000013.00000002.950684940.000001BBAADB0000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAADB0000
Size:	4096

Details

Name:	00000014.00000003.931751357.0000018B1B131000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18B1B131000
Size:	114688

Details

Name:	00000000.00000003.1047561117.0000000003F51000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3F51000
Size:	466944

Details

Name:	00000003.00000003.747775903.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000003.00000003.745967911.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000013.00000003.932286365.000001BBAB7CE000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB7CE000
Size:	90112

Details

Name:	00000003.00000003.895660553.0000000003160000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3160000
Size:	413696

Details

Name:	00000011.00000002.904115492.000001E0C89F0000.00000004.00000020.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1E0C89F0000
Size:	8192

Details

Name:	00000004.00000000.669128683.000000007F490000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F490000
Size:	12288

Details

Name:	00000007.00000002.1185793052.00007FF50D020000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50D020000
Size:	16384

Details

Name:	00000003.00000003.1065756598.00000000031CF000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31CF000
Size:	65536

Details

Name:	00000003.00000002.1184631030.0000000000D60000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	D60000
Size:	8192

Details

Name:	00000003.00000002.1184640859.0000000000D80000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	D80000
Size:	16384

Details

Name:	00000003.00000002.1184884572.0000000002CA9000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CA9000
Size:	4096

Details

Name:	00000004.00000002.788959975.0000000002DD9000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DD9000
Size:	40960

Details

Name:	00000007.00000002.1185010057.000002402E7E0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2402E7E0000
Size:	36864

Details

Name:	00000004.00000003.788401090.0000000004640000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4640000
Size:	4096

Details

Name:	0000000A.00000002.794954080.0000017C2EDA0000.00000004.00000040.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	17C2EDA0000
Size:	4096

Details

Name:	00000000.00000002.1184755268.000000000088D000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	88D000
Size:	8192

Details

Name:	00000003.00000002.1185143520.0000000002E01000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E01000
Size:	16384

Details

Name:	00000002.00000002.782376068.00000000032D0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	32D0000
Size:	73728

Details

Name:	00000005.00000002.796052983.0000000000D70000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	D70000
Size:	16384

Details

Name:	00000013.00000002.951783630.00007FF523F4F000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523F4F000
Size:	8192

Details

Name:	00000013.00000003.937503285.000001BBAB773000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB773000
Size:	40960

Details

Name:	00000003.00000003.1111272495.00000000031D5000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31D5000
Size:	4096

Details

Name:	00000004.00000003.757454639.0000000004550000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4550000
Size:	4096

Details

Name:	00000000.00000003.1090687597.0000000000955000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	955000
Size:	53248

Details

Name:	00000007.00000002.1185526284.00007FF50CEB0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50CEB0000
Size:	12288

Details

Name:	0000000A.00000002.795273636.00007FF4F2C23000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F2C23000
Size:	8192

Details

Name:	00000003.00000003.1111302028.0000000003158000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3158000
Size:	24576

Details

Name:	00000002.00000003.723315948.0000000000D60000.00000040.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	D60000
Size:	4096

Details

Name:	00000003.00000003.1108889860.0000000003165000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3165000
Size:	393216

Details

Name:	00000013.00000003.923234932.000001BBAB4D0000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB4D0000
Size:	4096

Details

Name:	00000013.00000002.951269310.000001BBABC00000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBABC00000
Size:	8192

Details

Name:	0000000D.00000002.867745173.00007FF57B5AC000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57B5AC000
Size:	4096

Details

Name:	00000000.00000002.1185047071.000000000098E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	98E000
Size:	4096

Details

Name:	00000000.00000002.1185023633.0000000000969000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	969000
Size:	32768

Details

Name:	0000000A.00000002.795354784.00007FF4F2D7E000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F2D7E000
Size:	4096

Details

Name:	00000004.00000003.788470682.0000000000A30000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A30000
Size:	36864

Details

Name:	00000003.00000003.850230890.00000000031CD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31CD000
Size:	20480

Details

Name:	00000004.00000002.788927095.0000000002DBC000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DBC000
Size:	12288

Details

Name:	00000002.00000002.782023477.0000000000940000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	940000
Size:	16384

Details

Name:	00000004.00000002.789262333.000000007F472000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F472000
Size:	4096

Details

Name:	0000000A.00000002.795443691.00007FF4F2DE8000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F2DE8000
Size:	12288

Details

Name:	0000000A.00000002.794905117.0000007C2C6FE000.00000004.00000010.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	7C2C6FE000
Size:	8192

Details

Name:	00000003.00000003.765695984.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	0000000D.00000002.867686971.00007FF57B4EC000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57B4EC000
Size:	8192

Details

Name:	0000000D.00000002.867721988.00007FF57B58B000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57B58B000
Size:	45056

Details

Name:	00000000.00000002.1185925015.000000006E620000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6E620000
Size:	4096

Details

Name:	00000000.00000003.800268841.0000000003179000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3179000
Size:	45056

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000002.1186414744.000000006E5A5000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6E5A5000
Size:	4096

Details

Name:	00000004.00000002.789252193.000000007F370000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F370000
Size:	20480

Details

Name:	00000007.00000002.1184730388.000002402E4A0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2402E4A0000
Size:	8192

Details

Name:	00000002.00000002.782107727.0000000000DEA000.00000004.00000020.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	DEA000
Size:	106496

Details

Name:	00000004.00000002.788976628.0000000002DE5000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DE5000
Size:	4096

Details

Name:	00000007.00000002.1186036679.00007FF50D104000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50D104000
Size:	20480

Details

Name:	0000000A.00000002.795121745.0000017C2F108000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C2F108000
Size:	24576

Details

Name:	00000002.00000003.765693517.0000000000D40000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D40000
Size:	4096

Details

Name:	00000003.00000002.1186462225.000000006E5EE000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E5EE000
Size:	143360

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to development resources	System Summary
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000000.00000003.891658770.00000000008F1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	8F1000
Size:	307200

Details

Name:	00000011.00000002.904357140.00007FF5B3C36000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B3C36000
Size:	32768

Details

Name:	00000011.00000002.904574699.00007FF5B4154000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B4154000
Size:	20480

Details

Name:	00000005.00000002.800242920.000000000314F000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	314F000
Size:	4096

Details

Name:	00000000.00000003.1090729009.0000000000960000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	960000
Size:	8192

Details

Name:	00000013.00000002.951726465.00007FF523F12000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523F12000
Size:	24576

Details

Name:	00000004.00000002.789278921.000000007F490000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F490000
Size:	12288

Details

Name:	00000004.00000000.669122238.000000007F482000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F482000
Size:	4096

Details

Name:	00000004.00000002.788637431.00000000006F0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6F0000
Size:	102400

Details

Name:	00000002.00000003.754608191.0000000000D40000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D40000
Size:	4096

Details

Name:	00000003.00000002.1186365346.0000000005C88000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5C88000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000002.00000002.782395837.0000000003450000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3450000
Size:	4096

Details

Name:	00000013.00000002.951553239.00007FF523D70000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523D70000
Size:	8192

Details

Name:	0000000D.00000002.867238738.000001C992730000.00000004.00000020.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1C992730000
Size:	8192

Details

Name:	00000003.00000003.753201647.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000007.00000000.744584455.00007DF5221A0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5221A0000
Size:	4096

Details

Name:	00000003.00000002.1185420087.0000000003158000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3158000
Size:	24576

Details

Name:	00000003.00000003.758761303.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000007.00000002.1185820574.00007FF50D025000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50D025000
Size:	12288

Details

Name:	00000003.00000002.1184692933.0000000000DD0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	DD0000
Size:	12288

Details

Name:	00000014.00000002.932142857.0000018B1B340000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	18B1B340000
Size:	36864

Details

Name:	00000005.00000002.800055068.0000000002E82000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E82000
Size:	12288

Details

Name:	00000007.00000002.1185576720.00007FF50CF1B000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50CF1B000
Size:	4096

Details

Name:	00000013.00000003.929681401.000001BBAB77D000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB77D000
Size:	45056

Details

Name:	00000000.00000002.1185317226.00000000026AD000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	26AD000
Size:	12288

Details

Name:	00000013.00000002.951647566.00007FF523E6B000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523E6B000
Size:	8192

Details

Name:	00000003.00000003.1020666126.0000000003158000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3158000
Size:	24576

Details

Name:	00000011.00000002.904237354.000001E0C8CD0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E0C8CD0000
Size:	4096

Details

Name:	00000000.00000002.1185637586.000000006E5A6000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E5A6000
Size:	40960

Details

Name:	00000003.00000002.1186632624.000000007FDF2000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FDF2000
Size:	4096

Details

Name:	00000003.00000003.1111309929.0000000003160000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3160000
Size:	413696

Details

Name:	00000003.00000002.1186558469.000000007FCE0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FCE0000
Size:	20480

Details

Name:	00000013.00000003.939771025.000001BBAB79E000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB79E000
Size:	4096

Details

Name:	00000003.00000003.766401717.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000013.00000002.950557995.0000004771EF7000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4771EF7000
Size:	36864

Details

Name:	00000003.00000003.850146547.00000000031CC000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31CC000
Size:	24576

Details

Name:	00000000.00000003.891690931.000000000093D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	93D000
Size:	69632

Details

Name:	00000011.00000002.904565963.00007FF5B40ED000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B40ED000
Size:	16384

Details

Name:	00000013.00000002.950651146.000001BBAAC90000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1BBAAC90000
Size:	4096

Details

Name:	00000007.00000002.1185256769.00007DF5221A0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5221A0000
Size:	4096

Details

Name:	00000000.00000003.799840711.00000000031FD000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	31FD000
Size:	4096

Details

Name:	0000000D.00000002.867515152.00007DF5906F0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5906F0000
Size:	4096

Details

Name:	00000005.00000002.796034668.0000000000D6B000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	D6B000
Size:	20480

Details

Name:	0000000D.00000002.867652344.00007FF57B461000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57B461000
Size:	4096

Details

Name:	00000011.00000002.904456599.00007FF5B4070000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B4070000
Size:	16384

Details

Name:	00000002.00000002.781997361.00000000008A0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	8A0000
Size:	102400

Details

Name:	0000000D.00000003.866777273.000001C992850000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C992850000
Size:	126976

Details

Name:	00000003.00000002.1186293019.0000000005A7E000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5A7E000
Size:	8192

Details

Name:	0000000A.00000000.783496764.00007DF507EF2000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF507EF2000
Size:	4096

Details

Name:	00000003.00000002.1185133151.0000000002DFF000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DFF000
Size:	4096

Details

Name:	0000000A.00000002.795190727.00007DF507F02000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF507F02000
Size:	4096

Details

Name:	00000007.00000002.1185490123.00007FF50CE45000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50CE45000
Size:	4096

Details

Name:	00000005.00000002.800544218.000000000338D000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	338D000
Size:	12288

Details

Name:	00000005.00000002.804828036.000000000553D000.00000004.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	553D000
Size:	8192

Details

Name:	00000013.00000002.951501071.00007FF523C4A000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523C4A000
Size:	4096

Details

Name:	00000003.00000002.1185714465.00000000031DC000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	31DC000
Size:	12288

Details

Name:	00000013.00000002.950836331.000001BBAAE8A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAAE8A000
Size:	94208

Details

Name:	0000000D.00000002.867419494.000001C992900000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C992900000
Size:	4096

Details

Name:	00000013.00000003.937547574.000001BBAB798000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB798000
Size:	28672

Details

Name:	00000013.00000002.950577366.00000047720FF000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	47720FF000
Size:	4096

Details

Name:	00000003.00000002.1186255891.000000000597D000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	597D000
Size:	12288

Details

Name:	00000000.00000002.1185433492.0000000002D8B000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2D8B000
Size:	20480

Details

Name:	00000003.00000003.895857628.00000000031D3000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31D3000
Size:	8192

Details

Name:	00000000.00000002.1185088448.0000000000ABD000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	ABD000
Size:	12288

Details

Name:	00000003.00000003.1020803025.00000000031C6000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31C6000
Size:	24576

Details

Name:	00000003.00000000.660699392.0000000000C60000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	C60000
Size:	102400

Details

Name:	00000013.00000002.951993501.00007FF523FD8000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523FD8000
Size:	12288

Details

Name:	00000011.00000002.904150669.000001E0C8A2A000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E0C8A2A000
Size:	69632

Details

Name:	00000003.00000002.1186432192.000000006E5B0000.00000020.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	6E5B0000
Size:	253952

Details

Name:	00000005.00000002.804918204.000000007FE40000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FE40000
Size:	12288

Details

Name:	00000000.00000002.1184670858.0000000000800000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	800000
Size:	8192

Details

Name:	0000000A.00000002.795111287.0000017C2F100000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C2F100000
Size:	4096

Details

Name:	00000003.00000003.975619211.00000000031F2000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31F2000
Size:	4096

Details

Name:	00000014.00000000.920126186.00007DF5CD3C0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5CD3C0000
Size:	4096

Details

Name:	0000000D.00000002.867607939.00007FF57B146000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57B146000
Size:	32768

Details

Name:	00000004.00000003.760535767.0000000004550000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4550000
Size:	4096

Details

Name:	00000004.00000003.788489250.0000000000A3A000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A3A000
Size:	53248

Details

Name:	00000005.00000002.796682595.0000000000F90000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F90000
Size:	4096

Details

Name:	0000000A.00000002.795177731.00007DF507EF0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF507EF0000
Size:	4096

Details

Name:	00000007.00000002.1185760227.00007FF50D01B000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50D01B000
Size:	4096

Details

Name:	0000000A.00000002.795391859.00007FF4F2DAF000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F2DAF000
Size:	16384

Details

Name:	00000002.00000002.782551043.000000007F970000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F970000
Size:	12288

Details

Name:	00000002.00000003.758760928.0000000000D40000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D40000
Size:	4096

Details

Name:	00000013.00000003.932315602.000001BBAB7B7000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB7B7000
Size:	94208

Details

Name:	00000000.00000003.1183642546.000000000098E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	98E000
Size:	4096

Details

Name:	00000003.00000003.766633570.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000005.00000003.765828428.0000000004D30000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D30000
Size:	4096

Details

Name:	00000013.00000002.950773171.000001BBAAE4E000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAAE4E000
Size:	8192

Details

Name:	00000000.00000000.658862496.000000007F0E0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F0E0000
Size:	12288

Details

Name:	00000013.00000002.951936534.00007FF523FB4000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523FB4000
Size:	4096

Details

Name:	00000002.00000002.782407569.00000000048ED000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	48ED000
Size:	12288

Details

Name:	00000003.00000002.1185261978.0000000002E93000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E93000
Size:	16384

Details

Name:	00000004.00000002.788887123.0000000002CC0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CC0000
Size:	4096

Details

Name:	00000011.00000002.903980377.0000001582F8C000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1582F8C000
Size:	16384

Details

Name:	00000013.00000002.951469914.00007FF523B45000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523B45000
Size:	4096

Details

Name:	00000011.00000002.904468099.00007FF5B407B000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B407B000
Size:	45056

Details

Name:	00000003.00000003.1154378784.00000000031C8000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31C8000
Size:	28672

Details

Name:	00000000.00000003.757952086.0000000000870000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	870000
Size:	4096

Details

Name:	00000005.00000002.797959291.0000000002DD9000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DD9000
Size:	40960

Details

Name:	00000005.00000003.795677260.00000000031A7000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31A7000
Size:	32768

Details

Name:	00000013.00000003.934707636.000001BBAB798000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB798000
Size:	40960

Details

Name:	00000000.00000002.1185182111.00000000010A0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	10A0000
Size:	380928

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	00000014.00000002.932394444.00007FF5B8278000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B8278000
Size:	24576

Details

Name:	00000004.00000002.789225639.0000000004ECF000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4ECF000
Size:	4096

Details

Name:	00000003.00000003.1063756497.00000000031F2000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31F2000
Size:	4096

Details

Name:	00000003.00000003.938847461.00000000031D4000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31D4000
Size:	20480

Details

Name:	00000003.00000003.1065703532.0000000005C45000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C45000
Size:	278528

Details

Name:	00000003.00000003.938867881.000000000314E000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	314E000
Size:	16384

Details

Name:	00000002.00000002.782523409.000000007F850000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F850000
Size:	20480

Details

Name:	00000005.00000002.797930165.0000000002DD0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DD0000
Size:	32768

Details

Name:	00000014.00000002.932158940.0000018B1B550000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	18B1B550000
Size:	73728

Details

Name:	00000003.00000002.1184743456.0000000001000000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1000000
Size:	4096

Details

Name:	00000003.00000003.1111286601.00000000031DD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31DD000
Size:	8192

Details

Name:	00000002.00000002.782138770.0000000000E1B000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E1B000
Size:	32768

Details

Name:	00000000.00000003.1001208383.000000000096D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	96D000
Size:	24576

Details

Name:	00000000.00000002.1185357574.000000000283D000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	283D000
Size:	12288

Details

Name:	00000000.00000000.658851919.000000007F0C2000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F0C2000
Size:	4096

Details

Name:	00000003.00000003.895731103.00000000031CE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31CE000
Size:	28672

Details

Name:	00000007.00000002.1184649990.000002402E450000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2402E450000
Size:	16384

Details

Name:	00000004.00000003.741771135.0000000000A32000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A32000
Size:	28672

Details

Name:	00000011.00000002.904078322.000001E0C8990000.00000004.00000040.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1E0C8990000
Size:	4096

Details

Name:	00000007.00000002.1185380427.00007FF50CC35000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50CC35000
Size:	4096

Details

Name:	00000013.00000003.939739588.000001BBAB77A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB77A000
Size:	12288

Details

Name:	00000004.00000003.758057415.0000000004550000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4550000
Size:	4096

Details

Name:	0000000A.00000000.783492218.00007DF507EF0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF507EF0000
Size:	4096

Details

Name:	00000013.00000002.952005919.00007FF523FDE000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523FDE000
Size:	16384

Details

Name:	00000000.00000002.1185283766.00000000025ED000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	25ED000
Size:	12288

Details

Name:	00000007.00000002.1185870159.00007FF50D04C000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50D04C000
Size:	4096

Details

Name:	00000004.00000002.788992747.0000000002DEF000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DEF000
Size:	8192

Details

Name:	00000014.00000002.932212468.00007DF5CD3C0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5CD3C0000
Size:	4096

Details

Name:	00000011.00000002.904476840.00007FF5B4087000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B4087000
Size:	49152

Details

Name:	00000002.00000003.740843346.0000000000D40000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D40000
Size:	4096

Details

Name:	00000004.00000002.788775913.0000000000C57000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	C57000
Size:	4096

Details

Name:	00000003.00000003.1173794293.00000000031C6000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31C6000
Size:	36864

Details

Name:	00000000.00000003.1090707843.0000000000969000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	969000
Size:	12288

Details

Name:	00000007.00000002.1185348332.00007FF50C8B6000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50C8B6000
Size:	4096

Details

Name:	00000000.00000003.1002769769.0000000000955000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	955000
Size:	53248

Details

Name:	00000004.00000003.762545516.0000000004550000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4550000
Size:	4096

Details

Name:	0000000D.00000002.867335495.000001C99283C000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C99283C000
Size:	32768

Details

Name:	00000013.00000002.951855332.00007FF523F7B000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523F7B000
Size:	45056

Details

Name:	00000011.00000002.904135841.000001E0C8A13000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E0C8A13000
Size:	90112

Details

Name:	00000013.00000002.951535419.00007FF523D36000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523D36000
Size:	4096

Details

Name:	00000005.00000002.800591757.00000000033E0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	33E0000
Size:	4096

Details

Name:	00000000.00000002.1184776754.0000000000890000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	890000
Size:	40960

Details

Name:	00000003.00000002.1184914715.0000000002D7F000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D7F000
Size:	4096

Details

Name:	00000003.00000003.1020820184.00000000055EA000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55EA000
Size:	4096

Details

Name:	00000003.00000003.850153745.0000000003164000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3164000
Size:	397312

Details

Name:	00000013.00000002.951385652.00007FF5238C3000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5238C3000
Size:	8192

Details

Name:	0000000A.00000002.794898588.0000007C2C67B000.00000004.00000010.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	7C2C67B000
Size:	20480

Details

Name:	00000011.00000000.892563061.00007DF5C91F0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5C91F0000
Size:	4096

Details

Name:	00000000.00000003.766532426.0000000000870000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	870000
Size:	4096

Details

Name:	0000000D.00000002.867710888.00007FF57B580000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57B580000
Size:	16384

Details

Name:	00000003.00000003.1173816939.00000000031C8000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31C8000
Size:	28672

Details

Name:	00000005.00000001.688332419.000000006E5A0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E5A0000
Size:	4096

Details

Name:	00000003.00000003.847950644.0000000003140000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3140000
Size:	73728

Details

Name:	00000000.00000003.1090580903.00000000031FB000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	31FB000
Size:	4096

Details

Name:	00000013.00000002.950601163.0000004772378000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4772378000
Size:	32768

Details

Name:	00000003.00000003.743555956.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000003.00000002.1185842975.00000000035B0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	35B0000
Size:	73728

Details

Name:	00000013.00000003.939393071.000001BBAB7C3000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB7C3000
Size:	61440

Details

Name:	0000000A.00000002.795081321.0000017C2F055000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C2F055000
Size:	106496

Details

Name:	00000003.00000002.1185192143.0000000002E61000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E61000
Size:	12288

Details

Name:	00000004.00000002.788827752.000000000102E000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	102E000
Size:	8192

Details

Name:	00000007.00000000.744581308.00007DF522192000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF522192000
Size:	4096

Details

Name:	0000000D.00000002.867674813.00007FF57B4D3000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57B4D3000
Size:	24576

Details

Name:	0000000A.00000002.795236635.00007FF4F2940000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F2940000
Size:	20480

Details

Name:	00000000.00000003.891646661.00000000008E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	8E0000
Size:	65536

Details

Name:	00000013.00000003.934722073.000001BBAB7A3000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB7A3000
Size:	77824

Details

Name:	00000004.00000000.669084381.00000000006F0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	6F0000
Size:	102400

Details

Name:	00000003.00000002.1185288870.0000000003100000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	3100000
Size:	36864

Details

Name:	00000003.00000002.1186512791.000000006E61E000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6E61E000
Size:	4096

Details

Name:	00000013.00000003.929778668.000001BBAB79F000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB79F000
Size:	106496

Details

Name:	00000000.00000003.1090675291.000000000094E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	94E000
Size:	20480

Details

Name:	0000000A.00000002.795116178.0000017C2F102000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C2F102000
Size:	12288

Details

Name:	00000013.00000000.918543925.00007DF5390F0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5390F0000
Size:	4096

Details

Name:	0000000A.00000002.795289405.00007FF4F2C7B000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F2C7B000
Size:	8192

Details

Name:	00000013.00000002.951277761.000001BBABD00000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBABD00000
Size:	8192

Details

Name:	00000000.00000003.762615239.0000000000870000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	870000
Size:	4096

Details

Name:	00000002.00000002.782189291.0000000002C69000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C69000
Size:	4096

Details

Name:	00000000.00000001.693823650.000000006E5A0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E5A0000
Size:	4096

Details

Name:	00000005.00000003.763891505.0000000004D30000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D30000
Size:	4096

Details

Name:	00000013.00000003.924277939.000001BBAB750000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB750000
Size:	4096

Details

Name:	00000005.00000003.754951499.00000000031B9000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31B9000
Size:	86016

Details

Name:	00000007.00000002.1185075802.000002402EB60000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2402EB60000
Size:	4096

Details

Name:	0000000A.00000002.794927886.0000007C2C8FE000.00000004.00000010.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	7C2C8FE000
Size:	8192

Details

Name:	00000013.00000002.951004984.000001BBAAF16000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAAF16000
Size:	8192

Details

Name:	00000003.00000003.1154358527.00000000031F2000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31F2000
Size:	4096

Details

Name:	0000000D.00000002.867716870.00007FF57B585000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57B585000
Size:	12288

Details

Name:	00000003.00000002.1184620475.0000000000D10000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	D10000
Size:	4096

Details

Name:	00000003.00000002.1185681313.00000000031D0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	31D0000
Size:	12288

Details

Name:	00000011.00000002.904369273.00007FF5B3D4A000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B3D4A000
Size:	4096

Details

Name:	00000003.00000002.1185088925.0000000002DED000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DED000
Size:	4096

Details

Name:	00000003.00000002.1186212934.00000000051CC000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	51CC000
Size:	16384

Details

Name:	00000013.00000003.931303202.000001BBAB7D5000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB7D5000
Size:	122880

Details

Name:	00000002.00000002.782346268.0000000002E74000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E74000
Size:	28672

Details

Name:	00000002.00000002.782098853.0000000000DE0000.00000004.00000020.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	DE0000
Size:	32768

Details

Name:	00000002.00000002.782058158.0000000000CD0000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	CD0000
Size:	4096

Details

Name:	00000004.00000002.789220351.0000000004E8E000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4E8E000
Size:	8192

Details

Name:	00000007.00000002.1185612664.00007FF50CF3C000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50CF3C000
Size:	4096

Details

Name:	00000004.00000002.789086166.0000000004520000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	4520000
Size:	12288

Details

Name:	00000003.00000003.748378696.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000002.00000002.782285529.0000000002DED000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DED000
Size:	4096

Details

Name:	00000003.00000002.1185112081.0000000002DF3000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DF3000
Size:	12288

Details

Name:	00000002.00000003.735987674.0000000000D40000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D40000
Size:	4096

Details

Name:	00000011.00000002.904373779.00007FF5B3DE7000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B3DE7000
Size:	8192

Details

Name:	00000003.00000002.1185172769.0000000002E1B000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E1B000
Size:	49152

Details

Name:	00000004.00000002.788705873.0000000000A0A000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	A0A000
Size:	106496

Details

Name:	00000003.00000002.1185819876.00000000033B0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	33B0000
Size:	36864

Details

Name:	00000003.00000003.762176897.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000003.00000002.1184804293.0000000001080000.00000040.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	1080000
Size:	4096

Details

Name:	00000004.00000002.788685508.0000000000823000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	823000
Size:	12288

Details

Name:	00000002.00000002.782032029.00000000009A0000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	9A0000
Size:	4096

Details

Name:	00000000.00000003.764964139.0000000000870000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	870000
Size:	4096

Details

Name:	00000003.00000002.1185632899.00000000031C6000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	31C6000
Size:	8192

Details

Name:	00000003.00000003.850302506.0000000003158000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3158000
Size:	24576

Details

Name:	00000013.00000002.951435113.00007FF523B30000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523B30000
Size:	20480

Details

Name:	00000003.00000002.1184823127.0000000002C49000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C49000
Size:	16384

Details

Name:	0000000A.00000002.795371927.00007FF4F2D8B000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F2D8B000
Size:	45056

Details

Name:	00000014.00000002.932017516.00000020DBBFE000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	20DBBFE000
Size:	8192

Details

Name:	00000002.00000002.782541352.000000007F960000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F960000
Size:	4096

Details

Name:	00000003.00000002.1186340783.0000000005BC0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5BC0000
Size:	4096

Details

Name:	00000002.00000002.782249909.0000000002DC3000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DC3000
Size:	28672

Details

Name:	0000000D.00000002.867816104.00007FF57B5F9000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57B5F9000
Size:	12288

Details

Name:	00000000.00000003.1002738445.000000000096D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	96D000
Size:	40960

Details

Name:	00000004.00000002.789016771.0000000002E01000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E01000
Size:	16384

Details

Name:	00000000.00000002.1184636080.00000000005B0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	5B0000
Size:	4096

Details

Name:	00000002.00000003.741446172.0000000000D40000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D40000
Size:	4096

Details

Name:	00000013.00000002.951711341.00007FF523EDC000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523EDC000
Size:	8192

Details

Name:	00000000.00000002.1184611035.000000000059B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	59B000
Size:	20480

Details

Name:	00000003.00000003.1065859292.00000000031C6000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31C6000
Size:	36864

Details

Name:	00000003.00000003.1082969336.00000000031F2000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31F2000
Size:	4096

Details

Name:	00000013.00000003.937266217.000001BBAB788000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB788000
Size:	20480

Details

Name:	00000002.00000003.766631560.0000000000D40000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D40000
Size:	4096

Details

Name:	0000000D.00000002.867256631.000001C992760000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C992760000
Size:	4096

Details

Name:	00000007.00000002.1184551885.0000005F8E39C000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5F8E39C000
Size:	16384

Details

Name:	00000003.00000002.1184546737.0000000000C50000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	C50000
Size:	4096

Details

Name:	00000014.00000002.932333220.00007FF5B8240000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B8240000
Size:	16384

Details

Name:	0000000A.00000002.795340967.00007FF4F2D6A000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F2D6A000
Size:	4096

Details

Name:	00000003.00000002.1186026585.0000000004B90000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4B90000
Size:	4096

Details

Name:	00000003.00000003.739338674.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000007.00000000.744578451.00007DF522190000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF522190000
Size:	4096

Details

Name:	00000013.00000003.932269022.000001BBAB7CE000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB7CE000
Size:	90112

Details

Name:	00000000.00000003.891633849.0000000000969000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	969000
Size:	4096

Details

Name:	00000002.00000002.781992389.0000000000890000.00000004.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	890000
Size:	4096

Details

Name:	00000005.00000002.804787890.0000000004D30000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4D30000
Size:	4096

Details

Name:	0000000D.00000002.867307194.000001C992829000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C992829000
Size:	73728

Details

Name:	00000013.00000002.951311365.00007DF5390E2000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5390E2000
Size:	4096

Details

Name:	0000000A.00000002.795045764.0000017C2F013000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C2F013000
Size:	86016

Details

Name:	00000003.00000003.975701036.00000000031C6000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31C6000
Size:	24576

Details

Name:	00000004.00000002.788933718.0000000002DC3000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DC3000
Size:	28672

Details

Name:	00000002.00000003.781824035.0000000000E1A000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E1A000
Size:	36864

Details

Name:	00000013.00000002.951810052.00007FF523F6A000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523F6A000
Size:	8192

Details

Name:	00000002.00000002.782511521.0000000006850000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6850000
Size:	4096

Details

Name:	00000011.00000002.904379263.00007FF5B3EC1000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B3EC1000
Size:	12288

Details

Name:	00000002.00000003.759933469.0000000000D40000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D40000
Size:	4096

Details

Name:	00000000.00000003.765594535.0000000000870000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	870000
Size:	4096

Details

Name:	0000000D.00000002.867696453.00007FF57B56C000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57B56C000
Size:	8192

Details

Name:	00000013.00000003.928624963.000001BBAB7AF000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB7AF000
Size:	49152

Details

Name:	00000004.00000002.788748999.0000000000BD0000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	BD0000
Size:	20480

Details

Name:	00000014.00000002.932468637.00007FF5B8324000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B8324000
Size:	20480

Details

Name:	00000005.00000002.799841696.0000000002E74000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E74000
Size:	28672

Details

Name:	00000013.00000003.927943144.000001BBAB71D000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB71D000
Size:	110592

Details

Name:	00000003.00000002.1185003257.0000000002DC3000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DC3000
Size:	28672

Details

Name:	0000000A.00000002.795476743.00007FF4F2E6A000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F2E6A000
Size:	12288

Details

Name:	00000004.00000002.788857740.0000000002C69000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C69000
Size:	4096

Details

Name:	00000005.00000002.797668632.0000000002CA4000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CA4000
Size:	24576

Details

Name:	00000014.00000002.932400890.00007FF5B8284000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B8284000
Size:	4096

Details

Name:	00000000.00000002.1185955112.000000007EFC0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7EFC0000
Size:	20480

Details

Name:	00000000.00000002.1185133461.0000000000D10000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	D10000
Size:	36864

Details

Name:	00000013.00000002.951041299.000001BBAB380000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1BBAB380000
Size:	4096

Details

Name:	00000011.00000000.892556948.00007DF5C91E2000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5C91E2000
Size:	4096

Details

Name:	00000002.00000002.782281033.0000000002DE7000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DE7000
Size:	12288

Details

Name:	00000003.00000003.850131027.00000000031D2000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31D2000
Size:	135168

Details

Name:	00000007.00000002.1185439905.00007FF50CD95000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50CD95000
Size:	12288

Details

Name:	00000000.00000002.1185964253.000000007F0C0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F0C0000
Size:	4096

Details

Name:	00000003.00000003.1082961040.00000000031DC000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31DC000
Size:	12288

Details

Name:	00000013.00000002.950569898.0000004771FFB000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4771FFB000
Size:	20480

Details

Name:	00000003.00000003.849977736.0000000005D50000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D50000
Size:	520192

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000002.797922723.0000000002DCC000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DCC000
Size:	8192

Details

Name:	00000004.00000002.789110652.0000000004570000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	4570000
Size:	733184

Details

Name:	00000011.00000002.904428968.00007FF5B3FDC000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B3FDC000
Size:	8192

Details

Name:	00000011.00000000.892549976.00007DF5C91E0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5C91E0000
Size:	4096

Details

Name:	00000013.00000000.918537897.00007DF5390E2000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5390E2000
Size:	4096

Details

Name:	00000007.00000002.1185419186.00007FF50CD8B000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50CD8B000
Size:	36864

Details

Name:	00000003.00000003.1065783458.0000000003152000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3152000
Size:	12288

Details

Name:	00000014.00000002.932201004.00007DF5CD3B0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5CD3B0000
Size:	4096

Details

Name:	00000004.00000002.788863816.0000000002C8D000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C8D000
Size:	32768

Details

Name:	00000003.00000002.1186193296.000000000514B000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	514B000
Size:	20480

Details

Name:	00000003.00000003.804577619.00000000055ED000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55ED000
Size:	4096

Details

Name:	00000013.00000002.951697141.00007FF523EC3000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523EC3000
Size:	24576

Details

Name:	00000000.00000003.800190449.0000000000957000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	957000
Size:	4096

Details

Name:	0000000D.00000003.866843092.000001C992849000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1C992849000
Size:	28672

Details

Name:	00000013.00000003.928079393.000001BBAB74C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB74C000
Size:	16384

Details

Name:	00000003.00000002.1185247321.0000000002E88000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E88000
Size:	20480

Details

Name:	00000011.00000002.904230479.000001E0C8B13000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E0C8B13000
Size:	12288

Details

Name:	00000013.00000003.931388735.000001BBABC02000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBABC02000
Size:	122880

Details

Name:	00000005.00000002.800620035.0000000003437000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3437000
Size:	8192

Details

Name:	00000000.00000003.795414069.0000000000AC0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	AC0000
Size:	4096

Details

Name:	00000005.00000002.804832916.000000000553F000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	553F000
Size:	4096

Details

Name:	00000002.00000002.782185141.0000000001030000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1030000
Size:	4096

Details

Name:	00000014.00000002.932025012.00000020DBC7E000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	20DBC7E000
Size:	8192

Details

Name:	00000013.00000002.951360802.00007FF5237B8000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5237B8000
Size:	16384

Details

Name:	00000013.00000002.951110764.000001BBAB700000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB700000
Size:	77824

Details

Name:	00000002.00000002.782367222.00000000030D0000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	30D0000
Size:	36864

Details

Name:	0000000A.00000002.795139222.0000017C2F200000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	17C2F200000
Size:	4096

Details

Name:	00000003.00000003.895862936.00000000031D6000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31D6000
Size:	4096

Details

Name:	00000003.00000003.749584731.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	0000000A.00000002.794889707.0000007C2C57C000.00000004.00000010.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	7C2C57C000
Size:	16384

Details

Name:	00000004.00000002.789022722.0000000002E12000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E12000
Size:	8192

Details

Name:	00000000.00000003.1001348623.0000000000969000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	969000
Size:	4096

Details

Name:	00000000.00000003.766767705.0000000000870000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	870000
Size:	4096

Details

Name:	00000013.00000003.938366534.000001BBAB79C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB79C000
Size:	397312

Details

Name:	00000000.00000002.1184648577.00000000007C2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7C2000
Size:	8192

Details

Name:	0000000D.00000000.852359311.00007DF590700000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF590700000
Size:	4096

Details

Name:	00000000.00000003.800220553.000000000094E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	94E000
Size:	20480

Details

Name:	0000000A.00000002.794958636.0000017C2EDB0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	17C2EDB0000
Size:	102400

Details

Name:	00000013.00000003.937532211.000001BBAB784000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB784000
Size:	36864

Details

Name:	00000000.00000003.1183616229.00000000031FD000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	31FD000
Size:	4096

Details

Name:	0000000D.00000002.867425555.000001C992902000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C992902000
Size:	12288

Details

Name:	00000003.00000003.1173840310.00000000031D0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31D0000
Size:	12288

Details

Name:	00000007.00000002.1185223760.00007DF420060000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF420060000
Size:	20480

Details

Name:	0000000A.00000002.795230351.00007FF4F25DD000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F25DD000
Size:	4096

Details

Name:	00000003.00000002.1186184911.00000000050F8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	50F8000
Size:	4096

Details

Name:	00000005.00000002.797470036.0000000002C8D000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C8D000
Size:	32768

Details

Name:	00000003.00000003.938827825.00000000031F2000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31F2000
Size:	4096

Details

Name:	00000003.00000000.660720799.000000007FDE2000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FDE2000
Size:	4096

Details

Name:	00000003.00000002.1185404040.000000000314F000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	314F000
Size:	12288

Details

Name:	00000000.00000002.1184767797.000000000088F000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	88F000
Size:	4096

Details

Name:	00000004.00000003.739474504.0000000001050000.00000040.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	1050000
Size:	4096

Details

Name:	0000000A.00000002.795009846.0000017C2EEE0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	17C2EEE0000
Size:	16384

Details

Name:	00000013.00000003.932303711.000001BBAB796000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB796000
Size:	49152

Details

Name:	00000002.00000002.782180752.000000000102A000.00000004.00000040.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	102A000
Size:	12288

Details

Name:	00000013.00000003.937012477.000001BBABC02000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBABC02000
Size:	425984

Details

Name:	00000013.00000003.939758333.000001BBAB796000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB796000
Size:	28672

Details

Name:	00000003.00000003.804770399.00000000055EA000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55EA000
Size:	4096

Details

Name:	00000013.00000002.952023276.00007FF523FE9000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523FE9000
Size:	32768

Details

Name:	00000003.00000003.895634468.00000000031F2000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31F2000
Size:	4096

Details

Name:	00000005.00000002.797416207.0000000002C69000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C69000
Size:	4096

Details

Name:	00000013.00000002.951418912.00007FF523ADE000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523ADE000
Size:	12288

Details

Name:	00000003.00000003.804590036.00000000031CE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31CE000
Size:	45056

Details

Name:	00000003.00000003.1018691357.0000000003152000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3152000
Size:	12288

Details

Name:	00000003.00000003.1018682017.00000000031D4000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31D4000
Size:	20480

Details

Name:	00000003.00000003.1018636092.00000000031DF000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31DF000
Size:	16384

Details

Name:	00000000.00000003.891559528.000000000096A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	96A000
Size:	12288

Details

Name:	00000011.00000002.904025174.00000015833FB000.00000004.00000010.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	15833FB000
Size:	20480

Details

Name:	00000000.00000003.1090665291.0000000000970000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	970000
Size:	28672

Details

Name:	0000000A.00000003.794708945.0000017C2F04F000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	17C2F04F000
Size:	131072

Details

Name:	00000013.00000002.951769000.00007FF523F44000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF523F44000
Size:	16384

Details

Name:	00000014.00000000.920190905.00007FF5B8332000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B8332000
Size:	16384

Details

Name:	00000000.00000002.1185622995.000000006E5A5000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6E5A5000
Size:	4096

Details

Name:	00000007.00000002.1185596402.00007FF50CF28000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50CF28000
Size:	28672

Details

Name:	00000003.00000003.938840302.00000000031CF000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31CF000
Size:	16384

Details

Name:	0000000D.00000002.867348166.000001C992845000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1C992845000
Size:	16384

Details

Name:	00000013.00000002.950968418.000001BBAAF08000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAAF08000
Size:	28672

Details

Name:	00000004.00000003.764353983.0000000004550000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4550000
Size:	4096

Details

Name:	00000003.00000003.1111396836.00000000031D3000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31D3000
Size:	8192

Details

Name:	00000004.00000002.789240494.00000000061A0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	61A0000
Size:	4096

Details

Name:	00000007.00000002.1185834659.00007FF50D02B000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50D02B000
Size:	45056

Details

Name:	00000003.00000002.1186624681.000000007FDF0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FDF0000
Size:	4096

Details

Name:	00000002.00000002.782244663.0000000002DBC000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DBC000
Size:	12288

Details

Name:	00000011.00000002.904559358.00007FF5B40E9000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B40E9000
Size:	12288

Details

Name:	00000003.00000002.1184878404.0000000002CA4000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CA4000
Size:	12288

Details

Name:	00000013.00000002.950895055.000001BBAAEC5000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAAEC5000
Size:	102400

Details

Name:	00000007.00000002.1184619029.0000005F8E97D000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5F8E97D000
Size:	12288

Details

Name:	00000003.00000002.1186322109.0000000005B3C000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5B3C000
Size:	16384

Details

Name:	00000002.00000003.737829577.0000000000D40000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D40000
Size:	4096

Details

Name:	00000003.00000003.895653724.0000000003158000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3158000
Size:	24576

Details

Name:	0000000A.00000002.795345303.00007FF4F2D6C000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F2D6C000
Size:	8192

Details

Name:	00000003.00000002.1186391012.000000006E5A0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E5A0000
Size:	4096

Details

Name:	00000003.00000003.895851485.00000000031CE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31CE000
Size:	8192

Details

Name:	00000000.00000003.891591043.000000000094E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	94E000
Size:	20480

Details

Name:	00000013.00000003.933645715.000001BBAB7BA000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB7BA000
Size:	147456

Details

Name:	00000003.00000003.1065559452.0000000005D58000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D58000
Size:	462848

Details

Name:	00000003.00000003.850102860.0000000005C45000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C45000
Size:	278528

Details

Name:	00000014.00000002.932152038.0000018B1B540000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	18B1B540000
Size:	16384

Details

Name:	00000003.00000002.1185017628.0000000002DCB000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DCB000
Size:	12288

Details

Name:	0000000A.00000002.795458883.00007FF4F2DF9000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F2DF9000
Size:	12288

Details

Name:	00000003.00000003.1111404181.00000000055EB000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55EB000
Size:	4096

Details

Name:	00000002.00000003.726558575.0000000000E12000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E12000
Size:	28672

Details

Name:	0000000D.00000002.867582010.00007FF57ADC8000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57ADC8000
Size:	16384

Details

Name:	00000007.00000002.1185206003.000002402FF80000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2402FF80000
Size:	57344

Details

Name:	00000007.00000002.1185034071.000002402E9E0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2402E9E0000
Size:	73728

Details

Name:	00000007.00000002.1185714769.00007FF50CFE3000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50CFE3000
Size:	4096

Details

Name:	00000005.00000002.804880299.0000000006E50000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6E50000
Size:	4096

Details

Name:	00000000.00000002.1185294227.000000000262C000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	262C000
Size:	16384

Details

Name:	00000000.00000003.1001320756.0000000000969000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	969000
Size:	4096

Details

Name:	00000004.00000003.764153001.0000000004550000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4550000
Size:	4096

Details

Name:	00000005.00000002.797740115.0000000002D93000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D93000
Size:	4096

Details

Name:	0000000A.00000002.795330628.00007FF4F2CE4000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F2CE4000
Size:	4096

Details

Name:	00000002.00000002.782018222.000000000093B000.00000004.00000001.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	93B000
Size:	20480

Details

Name:	00000003.00000002.1185759734.000000000338E000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	338E000
Size:	8192

Details

Name:	00000005.00000003.757950529.0000000004D30000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4D30000
Size:	4096

Details

Name:	00000000.00000002.1184561750.0000000000440000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	440000
Size:	102400

Details

Name:	00000002.00000002.782308930.0000000002E01000.00000002.00020000.sdmp
TargetID:	2
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E01000
Size:	16384

Details

Name:	00000003.00000003.1108865530.00000000031D6000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31D6000
Size:	32768

Details

Name:	00000003.00000002.1185228480.0000000002E7C000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E7C000
Size:	12288

Details

Name:	00000014.00000002.932388693.00007FF5B826F000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B826F000
Size:	16384

Details

Name:	00000000.00000003.1181929764.0000000000969000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	969000
Size:	24576

Details

Name:	00000013.00000002.950780800.000001BBAAE53000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAAE53000
Size:	98304

Details

Name:	00000014.00000000.920115670.00007DF5CD3B0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5CD3B0000
Size:	4096

Details

Name:	00000013.00000003.939712149.000001BBAB773000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1BBAB773000
Size:	40960

Details

Name:	00000003.00000003.895621585.00000000055EA000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	55EA000
Size:	4096

Details

Name:	0000000A.00000002.795254569.00007FF4F2A00000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F2A00000
Size:	4096

Details

Name:	00000014.00000002.932087718.0000018B1B136000.00000004.00000020.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	18B1B136000
Size:	61440

Details

Name:	00000014.00000002.932370621.00007FF5B824B000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B824B000
Size:	20480

Details

Name:	00000003.00000002.1184963127.0000000002DAD000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DAD000
Size:	4096

Details

Name:	00000007.00000000.744638802.00007FF50050E000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50050E000
Size:	8192

Details

Name:	00000000.00000002.1184620579.00000000005A0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	5A0000
Size:	16384

Details

Name:	00000007.00000002.1185730000.00007FF50D00A000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50D00A000
Size:	4096

Details

Name:	00000004.00000002.789101071.0000000004560000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4560000
Size:	8192

Details

Name:	00000003.00000002.1186524636.000000006E620000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	6E620000
Size:	4096

Details

Name:	00000002.00000003.736590407.0000000000D40000.00000004.00000010.sdmp
TargetID:	2
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	D40000
Size:	4096

Details

Name:	00000003.00000003.847886284.00000000031C4000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	31C4000
Size:	4096

Details

Name:	00000005.00000002.800249987.0000000003150000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	3150000
Size:	4096

Details

Name:	00000003.00000002.1186538780.000000006E621000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6E621000
Size:	16384

Details

Name:	0000000A.00000002.795028287.0000017C2F000000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C2F000000
Size:	4096

Details

Name:	00000003.00000003.765929297.0000000000DE0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DE0000
Size:	4096

Details

Name:	00000003.00000002.1186129422.0000000004CDC000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4CDC000
Size:	16384

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

IOC Report

Processes

URLs

Domains

IPs

Memdumps