Automated Malware Analysis IOC Report for

Details

Name:	0000000C.00000000.415051620.0000000000400000.00000040.00000001.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	339968

Signature Hits	Behavior Group	Mitre Attack
Yara detected WebBrowserPassView password recovery tool	Stealing of Sensitive Information
Found strings which match to known social media urls	Networking
SQL strings found in memory and binary data	System Summary

Details

Name:	00000007.00000000.382709219.0000000000402000.00000040.00000001.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	402000
Size:	569344

Signature Hits	Behavior Group	Mitre Attack
Detected HawkEye Rat	Remote Access Functionality	Remote Access Software
Malicious sample detected (through community Yara rule)	System Summary
Yara detected HawkEye Keylogger	Key, Mouse, Clipboard, Microphone and Screen Capturing, Stealing of Sensitive Information, Remote Access Functionality
Sample file is different than original file name gathered from version info	System Summary
Yara signature match	System Summary
URLs found in memory or binary data	Networking

Details

Name:	0000001B.00000000.584728372.0000000000400000.00000040.00000001.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	98304

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected MailPassView	Stealing of Sensitive Information
Yara signature match	System Summary
URLs found in memory or binary data	Networking
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000007.00000002.606344857.0000000003AE1000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3AE1000
Size:	2678784

Signature Hits	Behavior Group	Mitre Attack
Yara detected MailPassView	Stealing of Sensitive Information
Yara detected WebBrowserPassView password recovery tool	Stealing of Sensitive Information
Sample file is different than original file name gathered from version info	System Summary
Found strings which match to known social media urls	Networking
SQL strings found in memory and binary data	System Summary
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	0000001B.00000002.585393509.0000000000400000.00000040.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	98304

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected MailPassView	Stealing of Sensitive Information
Yara signature match	System Summary

Details

Name:	00000007.00000002.604722336.0000000002B87000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2B87000
Size:	335872

Signature Hits	Behavior Group	Mitre Attack
Yara detected WebBrowserPassView password recovery tool	Stealing of Sensitive Information
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	0000000D.00000000.429195340.0000000000400000.00000040.00000001.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	339968

Signature Hits	Behavior Group	Mitre Attack
Yara detected WebBrowserPassView password recovery tool	Stealing of Sensitive Information
Found strings which match to known social media urls	Networking
SQL strings found in memory and binary data	System Summary
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000007.00000002.604997751.0000000002C11000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C11000
Size:	172032

Signature Hits	Behavior Group	Mitre Attack
Yara detected WebBrowserPassView password recovery tool	Stealing of Sensitive Information

Details

Name:	00000007.00000002.604881484.0000000002BE0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2BE0000
Size:	172032

Signature Hits	Behavior Group	Mitre Attack
Yara detected WebBrowserPassView password recovery tool	Stealing of Sensitive Information

Details

Name:	00000007.00000002.604385666.0000000002AF1000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2AF1000
Size:	577536

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected HawkEye Keylogger	Key, Mouse, Clipboard, Microphone and Screen Capturing, Stealing of Sensitive Information, Remote Access Functionality
Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)	Malware Analysis System Evasion	Security Software Discovery
Yara detected WebBrowserPassView password recovery tool	Stealing of Sensitive Information
AV process strings found (often used to terminate AV products)	Lowering of HIPS / PFW / Operating System Security Settings	Security Software Discovery
Yara signature match	System Summary
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.388044368.00000000042A9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	42A9000
Size:	565248

Signature Hits	Behavior Group	Mitre Attack
Detected HawkEye Rat	Remote Access Functionality	Remote Access Software
Malicious sample detected (through community Yara rule)	System Summary
Yara detected HawkEye Keylogger	Key, Mouse, Clipboard, Microphone and Screen Capturing, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary
URLs found in memory or binary data	Networking

Details

Name:	00000008.00000000.392634525.0000000000400000.00000040.00000001.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	331776

Signature Hits	Behavior Group	Mitre Attack
Yara detected WebBrowserPassView password recovery tool	Stealing of Sensitive Information
Found strings which match to known social media urls	Networking
SQL strings found in memory and binary data	System Summary

Details

Name:	00000011.00000000.444119712.0000000000400000.00000040.00000001.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	339968

Signature Hits	Behavior Group	Mitre Attack
Yara detected WebBrowserPassView password recovery tool	Stealing of Sensitive Information
Found strings which match to known social media urls	Networking
SQL strings found in memory and binary data	System Summary
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	0000000D.00000002.439502988.0000000000400000.00000040.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	372736

Signature Hits	Behavior Group	Mitre Attack
Yara detected WebBrowserPassView password recovery tool	Stealing of Sensitive Information

Details

Name:	0000001B.00000000.584242337.0000000000400000.00000040.00000001.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	98304

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected MailPassView	Stealing of Sensitive Information
Yara signature match	System Summary

Details

Name:	00000011.00000002.458049589.0000000000400000.00000040.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	372736

Signature Hits	Behavior Group	Mitre Attack
Yara detected WebBrowserPassView password recovery tool	Stealing of Sensitive Information

Details

Name:	0000001B.00000000.583483657.0000000000400000.00000040.00000001.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	94208

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected MailPassView	Stealing of Sensitive Information
Yara signature match	System Summary

Details

Name:	00000011.00000000.443122582.0000000000400000.00000040.00000001.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	331776

Signature Hits	Behavior Group	Mitre Attack
Yara detected WebBrowserPassView password recovery tool	Stealing of Sensitive Information

Details

Name:	0000000C.00000000.414637682.0000000000400000.00000040.00000001.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	339968

Signature Hits	Behavior Group	Mitre Attack
Yara detected WebBrowserPassView password recovery tool	Stealing of Sensitive Information

Details

Name:	00000007.00000002.606732949.0000000004FC0000.00000004.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	4FC0000
Size:	466944

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected MailPassView	Stealing of Sensitive Information
Yara detected WebBrowserPassView password recovery tool	Stealing of Sensitive Information
Yara signature match	System Summary

Details

Name:	0000000C.00000000.414189798.0000000000400000.00000040.00000001.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	339968

Signature Hits	Behavior Group	Mitre Attack
Yara detected WebBrowserPassView password recovery tool	Stealing of Sensitive Information

Details

Name:	0000000C.00000002.424952995.0000000000400000.00000040.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	372736

Signature Hits	Behavior Group	Mitre Attack
Yara detected WebBrowserPassView password recovery tool	Stealing of Sensitive Information

Details

Name:	00000008.00000000.394234087.0000000000400000.00000040.00000001.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	339968

Signature Hits	Behavior Group	Mitre Attack
Yara detected WebBrowserPassView password recovery tool	Stealing of Sensitive Information

Details

Name:	0000000C.00000000.413703386.0000000000400000.00000040.00000001.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	331776

Signature Hits	Behavior Group	Mitre Attack
Yara detected WebBrowserPassView password recovery tool	Stealing of Sensitive Information

Details

Name:	00000008.00000000.394776440.0000000000400000.00000040.00000001.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	339968

Signature Hits	Behavior Group	Mitre Attack
Yara detected WebBrowserPassView password recovery tool	Stealing of Sensitive Information

Details

Name:	00000008.00000000.393712124.0000000000400000.00000040.00000001.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	339968

Signature Hits	Behavior Group	Mitre Attack
Yara detected WebBrowserPassView password recovery tool	Stealing of Sensitive Information

Details

Name:	0000000D.00000000.429569305.0000000000400000.00000040.00000001.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	339968

Signature Hits	Behavior Group	Mitre Attack
Yara detected WebBrowserPassView password recovery tool	Stealing of Sensitive Information

Details

Name:	00000007.00000000.380988424.0000000000402000.00000040.00000001.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	402000
Size:	565248

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected HawkEye Keylogger	Key, Mouse, Clipboard, Microphone and Screen Capturing, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000000.00000002.387656235.000000000409C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	409C000
Size:	2084864

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected HawkEye Keylogger	Key, Mouse, Clipboard, Microphone and Screen Capturing, Stealing of Sensitive Information, Remote Access Functionality
Sample file is different than original file name gathered from version info	System Summary
Yara signature match	System Summary

Details

Name:	00000007.00000000.381541048.0000000000402000.00000040.00000001.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	402000
Size:	569344

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected HawkEye Keylogger	Key, Mouse, Clipboard, Microphone and Screen Capturing, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000007.00000003.384365256.0000000004355000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4355000
Size:	466944

Signature Hits	Behavior Group	Mitre Attack
Yara detected MailPassView	Stealing of Sensitive Information
Yara detected WebBrowserPassView password recovery tool	Stealing of Sensitive Information

Details

Name:	0000000D.00000000.428434291.0000000000400000.00000040.00000001.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	331776

Signature Hits	Behavior Group	Mitre Attack
Yara detected WebBrowserPassView password recovery tool	Stealing of Sensitive Information

Details

Name:	00000007.00000002.600470804.0000000000402000.00000040.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	402000
Size:	569344

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected HawkEye Keylogger	Key, Mouse, Clipboard, Microphone and Screen Capturing, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000007.00000000.382170553.0000000000402000.00000040.00000001.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	402000
Size:	569344

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected HawkEye Keylogger	Key, Mouse, Clipboard, Microphone and Screen Capturing, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000011.00000000.445590834.0000000000400000.00000040.00000001.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	339968

Signature Hits	Behavior Group	Mitre Attack
Yara detected WebBrowserPassView password recovery tool	Stealing of Sensitive Information

Details

Name:	00000000.00000002.385059771.0000000002E11000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2E11000
Size:	1908736

Signature Hits	Behavior Group	Mitre Attack
Yara detected AntiVM3	Malware Analysis System Evasion
Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)	Malware Analysis System Evasion	Security Software Discovery
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery
URLs found in memory or binary data	Networking

Details

Name:	00000011.00000000.443616731.0000000000400000.00000040.00000001.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	339968

Signature Hits	Behavior Group	Mitre Attack
Yara detected WebBrowserPassView password recovery tool	Stealing of Sensitive Information

Details

Name:	0000000D.00000000.428849255.0000000000400000.00000040.00000001.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	339968

Signature Hits	Behavior Group	Mitre Attack
Yara detected WebBrowserPassView password recovery tool	Stealing of Sensitive Information

Details

Name:	00000008.00000002.408592264.0000000000400000.00000040.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	372736

Signature Hits	Behavior Group	Mitre Attack
Yara detected WebBrowserPassView password recovery tool	Stealing of Sensitive Information

Details

Name:	0000001B.00000000.583887483.0000000000400000.00000040.00000001.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	98304

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected MailPassView	Stealing of Sensitive Information
Yara signature match	System Summary

Details

Name:	00000007.00000002.606069695.0000000002CBB000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CBB000
Size:	110592

Signature Hits	Behavior Group	Mitre Attack
Yara detected MailPassView	Stealing of Sensitive Information

Details

Name:	0000000D.00000000.426158536.00000000001A0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000000.00000003.341229943.0000000005D7B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7B000
Size:	8192

Details

Name:	00000000.00000003.348461272.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.341724735.0000000005D63000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D63000
Size:	61440

Details

Name:	00000008.00000002.408940594.000000000056E000.00000004.00000010.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	56E000
Size:	8192

Details

Name:	00000000.00000003.348337106.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000014.00000003.476198173.00000285CBB21000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	285CBB21000
Size:	57344

Details

Name:	0000000D.00000000.428502622.000000007FFB2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	0000000C.00000003.421984649.000000000222D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	222D000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000001B.00000000.582042773.000000007FFC2000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000000.00000003.374213760.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.350919975.00000000056E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	56E0000
Size:	65536

Details

Name:	00000000.00000003.344494689.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	114688

Details

Name:	00000000.00000003.338184741.0000000005D53000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D53000
Size:	4096

Details

Name:	00000000.00000003.342200528.0000000005D63000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D63000
Size:	69632

Details

Name:	00000000.00000003.339309878.0000000005D60000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D60000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.370137188.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000000.381772322.0000000000A00000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	A00000
Size:	102400

Details

Name:	00000018.00000003.516447471.000001550EFA1000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1550EFA1000
Size:	4096

Details

Name:	0000000C.00000003.421724233.000000000223D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	223D000
Size:	4096

Details

Name:	00000000.00000003.377234976.00000000086C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	86C0000
Size:	65536

Details

Name:	00000018.00000002.604386906.00007FF5983EF000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5983EF000
Size:	4096

Details

Name:	0000001B.00000000.584679864.0000000000040000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000000.00000003.338067194.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	81920

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000000.429630563.000000007FFB2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000011.00000003.454179451.00000000020FD000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20FD000
Size:	4096

Details

Name:	00000013.00000002.489512032.000001F9B458B000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B458B000
Size:	24576

Details

Name:	0000000E.00000002.443252228.00007FF5A0161000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A0161000
Size:	8192

Details

Name:	00000007.00000002.603285150.0000000000DE4000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	DE4000
Size:	12288

Details

Name:	00000013.00000003.472986661.000001F9B458E000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B458E000
Size:	8192

Details

Name:	0000000C.00000003.423645164.0000000002221000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2221000
Size:	49152

Details

Name:	00000013.00000003.475803219.000001F9B4599000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4599000
Size:	4096

Details

Name:	0000000C.00000003.422633961.0000000002234000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2234000
Size:	32768

Details

Name:	0000000A.00000002.601156263.0000022D47F02000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22D47F02000
Size:	53248

Details

Name:	0000001B.00000000.582794979.00000000001B0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000008.00000003.402345550.00000000022A0000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A0000
Size:	49152

Details

Name:	00000008.00000000.391058325.000000007FFC2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000000.00000003.370075870.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000D.00000003.439151922.0000000000B17000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	B17000
Size:	4096

Details

Name:	00000000.00000003.341386757.0000000005D71000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D71000
Size:	4096

Details

Name:	00000000.00000003.350344051.0000000005D42000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D42000
Size:	90112

Details

Name:	00000000.00000003.333156196.00000000011DA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11DA000
Size:	32768

Details

Name:	00000007.00000002.607520464.0000000005A30000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5A30000
Size:	65536

Details

Name:	00000000.00000003.340733132.0000000005D77000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D77000
Size:	32768

Details

Name:	00000000.00000003.347670969.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	131072

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000011.00000002.458547600.0000000002100000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2100000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking

Details

Name:	00000000.00000002.391930839.0000000007B1E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	7B1E000
Size:	8192

Details

Name:	0000000C.00000000.412832575.000000007FFC2000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000000.00000003.338786816.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	86016

Details

Name:	0000000C.00000003.423569179.0000000002231000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2231000
Size:	36864

Details

Name:	00000000.00000003.372921185.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.370222944.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.348293216.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.377222812.00000000086D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	86D0000
Size:	65536

Details

Name:	00000008.00000003.402680678.000000000229D000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229D000
Size:	12288

Details

Name:	00000007.00000000.381259375.000000007F870000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F870000
Size:	4096

Details

Name:	00000000.00000003.340897973.0000000005D54000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D54000
Size:	4096

Details

Name:	00000007.00000003.386378324.0000000005110000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5110000
Size:	8192

Details

Name:	00000004.00000002.364380305.00007FF567CC1000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF567CC1000
Size:	8192

Details

Name:	00000018.00000002.603264778.000001550F213000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1550F213000
Size:	49152

Details

Name:	00000000.00000003.334991200.0000000005D43000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D43000
Size:	4096

Details

Name:	00000018.00000002.604456554.00007FF59841A000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59841A000
Size:	12288

Details

Name:	00000000.00000003.346212059.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	49152

Details

Name:	00000007.00000002.602565955.0000000000B58000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	B58000
Size:	32768

Signature Hits	Behavior Group	Mitre Attack
Sample file is different than original file name gathered from version info	System Summary

Details

Name:	00000018.00000002.604838561.00007FF5985F4000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5985F4000
Size:	4096

Details

Name:	0000000C.00000003.424624475.0000000000BE9000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	BE9000
Size:	8192

Details

Name:	00000008.00000003.405479652.00000000022A1000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A1000
Size:	32768

Details

Name:	00000000.00000003.348799226.0000000005D74000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D74000
Size:	28672

Details

Name:	00000000.00000003.334201168.00000000054F0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54F0000
Size:	65536

Details

Name:	0000001B.00000000.583121518.00000000001B0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	0000001B.00000000.582519162.000000007FFC2000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000011.00000000.441181029.000000007FFD0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000000.00000003.369907135.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000018.00000000.515775164.00007DF5A24B2000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A24B2000
Size:	4096

Details

Name:	00000000.00000003.371191088.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.383728689.00000000011EF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11EF000
Size:	98304

Details

Name:	00000000.00000003.338508868.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000007.00000002.606939222.0000000005057000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5057000
Size:	8192

Details

Name:	00000007.00000002.607085041.0000000005090000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5090000
Size:	65536

Details

Name:	00000013.00000003.488420321.000001F9B3C4C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B3C4C000
Size:	4096

Details

Name:	00000000.00000003.337156897.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	77824

Details

Name:	0000001A.00000002.601797995.00007FF5152AC000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5152AC000
Size:	8192

Details

Name:	00000000.00000002.385027830.0000000002DF0000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2DF0000
Size:	4096

Details

Name:	00000004.00000002.363730508.00000022AF27B000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	22AF27B000
Size:	20480

Details

Name:	00000000.00000003.339451735.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000007.00000002.603322031.0000000000F50000.00000004.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	F50000
Size:	4096

Details

Name:	0000000C.00000002.425513765.000000007FFD0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000013.00000002.489949828.00007FF56B7F7000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B7F7000
Size:	4096

Details

Name:	0000000E.00000002.443064501.00007FF59FD17000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59FD17000
Size:	32768

Details

Name:	0000000C.00000003.421760911.000000000223D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	223D000
Size:	4096

Details

Name:	00000000.00000003.345026792.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.350663013.00000000056F0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	56F0000
Size:	8192

Details

Name:	00000000.00000003.334900328.0000000005D43000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D43000
Size:	4096

Details

Name:	00000000.00000003.349566939.0000000005D91000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D91000
Size:	8192

Details

Name:	00000018.00000002.603956189.00007DF5A24C2000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A24C2000
Size:	4096

Details

Name:	00000013.00000003.470228493.000001F9B4568000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4568000
Size:	28672

Details

Name:	0000000B.00000002.412331809.00000165C603C000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	165C603C000
Size:	61440

Details

Name:	00000008.00000003.403228171.00000000022AD000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22AD000
Size:	4096

Details

Name:	00000005.00000002.378468362.000000000302E000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	302E000
Size:	16384

Details

Name:	00000007.00000002.606655817.0000000004B1E000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4B1E000
Size:	8192

Details

Name:	00000008.00000000.389952585.00000000001A0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000000.00000003.335434507.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.348300950.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000005.00000000.376798767.000000007EFF0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7EFF0000
Size:	12288

Details

Name:	00000007.00000003.503327777.0000000000DD8000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DD8000
Size:	24576

Details

Name:	00000007.00000002.603692112.0000000001120000.00000004.00000040.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1120000
Size:	16384

Details

Name:	00000007.00000002.604947886.0000000002C0B000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C0B000
Size:	4096

Details

Name:	00000000.00000003.346508093.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	98304

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.370886435.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000018.00000002.602422059.000001550A1F3000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1550A1F3000
Size:	4096

Details

Name:	00000000.00000003.371405445.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000011.00000003.456796027.000000000215F000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	215F000
Size:	4096

Details

Name:	00000004.00000002.365724956.00007FF56800D000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56800D000
Size:	12288

Details

Name:	0000000C.00000003.422689806.0000000002234000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2234000
Size:	32768

Details

Name:	00000013.00000002.489391855.000001F9B451E000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B451E000
Size:	4096

Details

Name:	0000000C.00000000.414706027.000000007FFB0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000000.00000003.342932704.0000000005D63000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D63000
Size:	73728

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000001B.00000000.583876297.00000000001B0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	0000000D.00000003.436712850.0000000000A34000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A34000
Size:	32768

Details

Name:	00000000.00000003.371912587.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000011.00000000.440695400.0000000000040000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	0000000C.00000003.422757804.000000000222D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	222D000
Size:	20480

Details

Name:	00000000.00000003.343336844.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000000.00000003.370214080.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000013.00000003.474754033.000001F9B45B6000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B45B6000
Size:	212992

Details

Name:	00000014.00000002.477086959.00007FF5B37F5000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B37F5000
Size:	16384

Details

Name:	00000000.00000003.372695743.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.341130151.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.347025448.0000000005D74000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D74000
Size:	16384

Details

Name:	00000007.00000002.603933368.000000000290E000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	290E000
Size:	8192

Details

Name:	00000007.00000003.408625728.0000000000DD3000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DD3000
Size:	12288

Details

Name:	0000001B.00000000.584778081.000000007FFB2000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000000.00000003.370485228.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000004.00000002.363999721.00000171B7E64000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	171B7E64000
Size:	98304

Details

Name:	00000000.00000003.343427750.0000000005D73000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D73000
Size:	8192

Details

Name:	0000000A.00000002.602422083.00007FF598967000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF598967000
Size:	20480

Details

Name:	00000000.00000003.369145319.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000002.384884031.0000000001527000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1527000
Size:	32768

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000013.00000003.470350037.000001F9B4588000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4588000
Size:	32768

Details

Name:	0000000C.00000003.416129280.000000000222D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	222D000
Size:	114688

Details

Name:	00000000.00000003.333847687.00000000011E9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11E9000
Size:	16384

Details

Name:	00000014.00000000.464955351.00007DF5BD680000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BD680000
Size:	4096

Details

Name:	00000004.00000002.364094538.00000171B7F08000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	171B7F08000
Size:	24576

Details

Name:	00000018.00000002.602901382.000001550AA70000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1550AA70000
Size:	65536

Details

Name:	00000000.00000002.392574396.00000000086BC000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	86BC000
Size:	16384

Details

Name:	00000014.00000002.477356305.00007FF5B38D6000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B38D6000
Size:	16384

Details

Name:	00000000.00000003.344174872.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000013.00000002.490355721.00007FF56B9E7000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B9E7000
Size:	32768

Details

Name:	00000014.00000002.476839089.00000285CBD30000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	285CBD30000
Size:	32768

Details

Name:	00000000.00000003.371804376.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000003.385729567.0000000005090000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5090000
Size:	65536

Details

Name:	00000013.00000003.477030216.000001F9B4A02000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4A02000
Size:	794624

Details

Name:	0000001A.00000000.565650546.00007DF51F2D2000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51F2D2000
Size:	4096

Details

Name:	00000000.00000003.347965324.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.340687102.0000000005D74000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D74000
Size:	45056

Details

Name:	00000000.00000002.391299919.000000000765D000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	765D000
Size:	12288

Details

Name:	00000008.00000003.403764467.00000000022AD000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22AD000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000008.00000000.391030136.000000007FFB2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000011.00000003.455351584.00000000020ED000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20ED000
Size:	20480

Details

Name:	0000000E.00000000.430714696.00007FF5A0267000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A0267000
Size:	16384

Details

Name:	00000000.00000003.342263490.0000000005D63000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D63000
Size:	69632

Details

Name:	0000000D.00000000.429250813.000000007FFB0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	0000000D.00000000.425811084.000000007FFB0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	0000000C.00000000.413256831.000000007FFC0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000013.00000002.489413461.000001F9B452B000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B452B000
Size:	131072

Details

Name:	00000000.00000003.371939006.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000002.605402429.0000000002C61000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C61000
Size:	4096

Details

Name:	00000013.00000003.467559178.000001F9B45CF000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B45CF000
Size:	122880

Details

Name:	0000000A.00000002.601272774.0000022D48390000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	22D48390000
Size:	4096

Details

Name:	00000000.00000003.346916334.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000C.00000003.422372108.000000000222C000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	222C000
Size:	4096

Details

Name:	00000000.00000002.388657234.00000000054D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	54D0000
Size:	65536

Details

Name:	00000011.00000003.455444203.00000000020E4000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20E4000
Size:	12288

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000003.363489872.00000171B7E61000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	171B7E61000
Size:	110592

Details

Name:	00000008.00000000.392499993.0000000000040000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	0000000C.00000000.414109655.0000000000040000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000000.00000003.347928849.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.369575115.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000C.00000002.424827833.0000000000040000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000000.00000003.372335851.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000008.00000003.403858463.00000000022A4000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A4000
Size:	32768

Details

Name:	00000000.00000002.389232863.00000000055F0000.00000040.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	55F0000
Size:	4096

Details

Name:	00000000.00000003.350708493.00000000056E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	56E0000
Size:	4096

Details

Name:	00000005.00000002.378261436.00000000006BA000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6BA000
Size:	24576

Details

Name:	0000001B.00000000.581040636.000000007FFC0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000008.00000003.403088256.0000000002294000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2294000
Size:	16384

Details

Name:	0000000D.00000003.436183213.0000000000A34000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A34000
Size:	32768

Details

Name:	00000000.00000003.349630566.0000000005D4A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D4A000
Size:	4096

Details

Name:	00000000.00000003.369204892.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000C.00000003.424523864.000000000222E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	222E000
Size:	4096

Details

Name:	0000000D.00000003.439000376.0000000000A31000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A31000
Size:	24576

Details

Name:	00000007.00000002.606048665.0000000002CB9000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CB9000
Size:	4096

Details

Name:	00000008.00000003.400338814.00000000027B1000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	27B1000
Size:	1286144

Details

Name:	00000000.00000003.370678836.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.338120791.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	86016

Details

Name:	00000018.00000003.520882547.000001550F0E0000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1550F0E0000
Size:	4096

Details

Name:	00000014.00000000.465014869.00007DF5BD6A0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BD6A0000
Size:	12288

Details

Name:	00000018.00000002.604418961.00007FF598409000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF598409000
Size:	4096

Details

Name:	00000000.00000003.339593731.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.341923457.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000007.00000002.607060213.0000000005071000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5071000
Size:	49152

Details

Name:	00000007.00000002.603553185.000000000109D000.00000040.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	109D000
Size:	4096

Details

Name:	0000001B.00000000.583554802.000000007FFB2000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000000.00000003.343215254.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	106496

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000E.00000002.442319251.0000018111429000.00000004.00000001.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18111429000
Size:	73728

Details

Name:	0000000B.00000002.413167518.00007FF5DB6BA000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5DB6BA000
Size:	12288

Details

Name:	00000014.00000002.476787558.00000285CBC40000.00000004.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	285CBC40000
Size:	4096

Details

Name:	0000000C.00000002.425349252.0000000002238000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2238000
Size:	16384

Details

Name:	0000000D.00000002.440124069.00000000027B0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	27B0000
Size:	4096

Details

Name:	00000008.00000002.409718918.00000000022AC000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22AC000
Size:	4096

Details

Name:	00000000.00000003.339240599.0000000005D60000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D60000
Size:	65536

Details

Name:	00000007.00000002.605080252.0000000002C3E000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C3E000
Size:	4096

Details

Name:	00000008.00000003.403621468.00000000022A4000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A4000
Size:	32768

Details

Name:	00000008.00000000.394143273.0000000000040000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	0000000E.00000002.442081719.0000000BEBFF7000.00000004.00000010.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	BEBFF7000
Size:	36864

Details

Name:	00000005.00000000.376246350.00000000006C0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	6C0000
Size:	16384

Details

Name:	0000000A.00000002.600511332.00000072144FB000.00000004.00000010.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	72144FB000
Size:	20480

Details

Name:	00000011.00000003.454316310.00000000020FD000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20FD000
Size:	4096

Details

Name:	0000000A.00000002.601420142.00007DF5A2760000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A2760000
Size:	4096

Details

Name:	00000013.00000003.469158729.000001F9B4584000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4584000
Size:	16384

Details

Name:	00000014.00000002.476658752.00000285CBAFD000.00000004.00000020.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	285CBAFD000
Size:	20480

Details

Name:	00000011.00000000.441857372.000000007FFC0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000011.00000000.441883798.000000007FFD0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000004.00000002.365619728.00007FF567F96000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF567F96000
Size:	16384

Details

Name:	0000000C.00000000.411673323.000000007FFC2000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000000.00000003.371970349.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000002.384637456.000000000135E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	135E000
Size:	8192

Details

Name:	0000001A.00000002.602146357.00007FF515479000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF515479000
Size:	4096

Details

Name:	00000000.00000003.368980394.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	4096

Details

Name:	00000000.00000003.338515392.0000000005D6F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D6F000
Size:	8192

Details

Name:	00000007.00000003.409572587.0000000005D90000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D90000
Size:	12288

Details

Name:	0000001B.00000002.585552385.0000000000728000.00000004.00000020.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	728000
Size:	73728

Details

Name:	00000011.00000000.439923812.000000007FFB2000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	0000000D.00000003.437101405.0000000000614000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	614000
Size:	4096

Details

Name:	0000000B.00000002.412236124.00000165C5F20000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	165C5F20000
Size:	4096

Details

Name:	00000013.00000003.469147293.000001F9B457C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B457C000
Size:	8192

Details

Name:	00000000.00000003.338375310.0000000005D4A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D4A000
Size:	4096

Details

Name:	00000007.00000000.381848233.000000007F882000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F882000
Size:	4096

Details

Name:	00000000.00000003.371061206.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000013.00000003.476509771.000001F9B45A1000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B45A1000
Size:	32768

Details

Name:	00000000.00000003.371978227.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000D.00000003.436725657.0000000000A3D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A3D000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000008.00000003.403942068.0000000002294000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2294000
Size:	12288

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.372514438.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000003.388032529.00000000059C0000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	59C0000
Size:	65536

Details

Name:	00000007.00000000.378546677.000000007F880000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F880000
Size:	4096

Details

Name:	00000007.00000000.382825709.00000000006F2000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	6F2000
Size:	901120

Signature Hits	Behavior Group	Mitre Attack
Sample file is different than original file name gathered from version info	System Summary

Details

Name:	0000000D.00000000.426636740.000000007FFB2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	0000000D.00000002.440100203.00000000022C0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22C0000
Size:	4096

Details

Name:	00000007.00000002.605294406.0000000002C54000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C54000
Size:	4096

Details

Name:	0000000C.00000003.422866313.0000000002234000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2234000
Size:	32768

Details

Name:	00000007.00000002.602290989.00000000007F0000.00000004.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	7F0000
Size:	4096

Details

Name:	00000013.00000003.467723923.000001F9B4A02000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4A02000
Size:	122880

Details

Name:	00000000.00000003.353196161.0000000007620000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7620000
Size:	16384

Details

Name:	00000000.00000003.370768511.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000018.00000002.600470967.00000034B107B000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	34B107B000
Size:	20480

Details

Name:	00000008.00000002.409817799.000000007FFB2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000008.00000000.390580015.000000007FFB2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000000.00000003.352449694.0000000007CF0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7CF0000
Size:	65536

Details

Name:	00000011.00000000.439965007.000000007FFD0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000000.00000003.370204908.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.366311215.0000000007960000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7960000
Size:	20480

Details

Name:	0000000D.00000000.429609869.0000000000454000.00000040.00000001.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	454000
Size:	28672

Details

Name:	00000000.00000002.392545073.00000000084AE000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	84AE000
Size:	8192

Details

Name:	00000007.00000002.607838017.000000007F870000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F870000
Size:	4096

Details

Name:	00000000.00000003.372791459.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.337697443.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	77824

Details

Name:	00000000.00000002.388269703.0000000005347000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5347000
Size:	16384

Details

Name:	00000005.00000002.378458899.0000000003021000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3021000
Size:	16384

Details

Name:	00000004.00000002.365806651.00007FF56801B000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56801B000
Size:	16384

Details

Name:	00000000.00000003.371633110.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.336213445.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.348140723.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.336354947.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.368712129.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	4096

Details

Name:	00000013.00000003.466566577.000001F9B4575000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4575000
Size:	24576

Details

Name:	0000000C.00000002.425390820.0000000002650000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2650000
Size:	4096

Details

Name:	00000018.00000002.602817344.000001550AA40000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1550AA40000
Size:	65536

Details

Name:	00000011.00000003.455081268.00000000020FD000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20FD000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.384760193.000000000148A000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	148A000
Size:	4096

Details

Name:	0000000D.00000003.436144213.0000000000A34000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A34000
Size:	32768

Details

Name:	00000000.00000003.377194280.00000000086C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	86C0000
Size:	12288

Details

Name:	00000005.00000000.376273042.00000000006E0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	6E0000
Size:	4096

Details

Name:	00000000.00000003.340261649.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000007.00000002.602944922.0000000000D85000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	D85000
Size:	102400

Details

Name:	00000000.00000003.343552285.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000008.00000000.390018292.000000007FFC0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000007.00000003.408979364.0000000005AB0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AB0000
Size:	28672

Details

Name:	0000000D.00000003.436819908.0000000000A3D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A3D000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000C.00000003.420755187.00000000028D0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	28D0000
Size:	925696

Details

Name:	00000000.00000003.350108119.0000000005D92000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D92000
Size:	4096

Details

Name:	00000007.00000000.378947591.0000000000A00000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	A00000
Size:	102400

Details

Name:	00000013.00000003.473609930.000001F9B458F000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B458F000
Size:	53248

Details

Name:	00000000.00000003.369326978.00000000010D5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D5000
Size:	4096

Details

Name:	0000000C.00000000.411598090.00000000001B0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	0000000E.00000002.443454577.00007FF5A023A000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A023A000
Size:	12288

Details

Name:	0000000D.00000002.440163923.000000007FFB2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	0000001B.00000000.582825968.000000007FFB2000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000007.00000002.603265469.0000000000DD9000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	DD9000
Size:	20480

Details

Name:	0000000D.00000003.438850598.0000000000A44000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A44000
Size:	4096

Details

Name:	00000000.00000003.342303209.0000000005D5C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5C000
Size:	24576

Details

Name:	00000007.00000003.386617456.0000000005110000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5110000
Size:	12288

Details

Name:	00000000.00000003.350960653.0000000007C00000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7C00000
Size:	16384

Details

Name:	0000000A.00000002.601797016.00007FF59872F000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59872F000
Size:	4096

Details

Name:	00000000.00000003.353211447.0000000007620000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7620000
Size:	36864

Details

Name:	00000018.00000002.602147601.0000015509C00000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	15509C00000
Size:	4096

Details

Name:	00000007.00000002.605121219.0000000002C43000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C43000
Size:	4096

Details

Name:	00000000.00000003.333827982.00000000011CF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11CF000
Size:	16384

Details

Name:	00000013.00000003.467599016.000001F9B451E000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B451E000
Size:	4096

Details

Name:	00000000.00000003.350469166.0000000005D92000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D92000
Size:	4096

Details

Name:	00000000.00000003.373281717.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.370811658.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.371412810.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000011.00000003.457401558.00000000020F1000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20F1000
Size:	24576

Details

Name:	00000000.00000003.373157369.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000001B.00000002.585380360.0000000000223000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	223000
Size:	4096

Details

Name:	00000007.00000002.605313465.0000000002C57000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C57000
Size:	4096

Details

Name:	0000000D.00000002.439683592.0000000000610000.00000004.00000020.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	610000
Size:	16384

Details

Name:	00000008.00000000.389976204.00000000001B0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000000.00000003.348793237.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000B.00000002.413104858.00007FF5DB697000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5DB697000
Size:	20480

Details

Name:	00000007.00000003.387901884.0000000000DC6000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DC6000
Size:	16384

Details

Name:	0000000B.00000002.412271942.00000165C6000000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	165C6000000
Size:	73728

Details

Name:	00000000.00000003.345202768.0000000005D68000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D68000
Size:	57344

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.371827928.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.336932083.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.352595311.0000000007F60000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7F60000
Size:	65536

Details

Name:	00000000.00000002.392949915.000000007F680000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F680000
Size:	4096

Details

Name:	0000000C.00000000.410816343.000000007FFB0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000007.00000003.387243774.0000000005270000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5270000
Size:	16384

Details

Name:	00000000.00000003.370776576.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000C.00000003.421903798.0000000002224000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2224000
Size:	16384

Details

Name:	00000007.00000002.604977375.0000000002C0F000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C0F000
Size:	4096

Details

Name:	00000000.00000002.384316635.0000000000C32000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C32000
Size:	4096

Details

Name:	00000000.00000003.341815694.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	0000000E.00000002.443399743.00007FF5A0214000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A0214000
Size:	8192

Details

Name:	00000000.00000003.342747793.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000000.00000003.342429364.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000013.00000003.468808627.000001F9B457D000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B457D000
Size:	61440

Details

Name:	00000000.00000002.391891676.0000000007A9E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	7A9E000
Size:	8192

Details

Name:	00000000.00000003.369958080.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000004.00000002.363858765.00000171B7E00000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	171B7E00000
Size:	73728

Details

Name:	00000013.00000002.490170770.00007FF56B933000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B933000
Size:	24576

Details

Name:	00000000.00000003.341250297.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.346642246.0000000005D75000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D75000
Size:	16384

Details

Name:	00000007.00000002.607699237.0000000005D6C000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5D6C000
Size:	16384

Details

Name:	00000007.00000003.408581998.0000000000DCC000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DCC000
Size:	20480

Details

Name:	0000000D.00000002.439358534.0000000000030000.00000004.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	30000
Size:	4096

Details

Name:	00000000.00000003.336406658.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000008.00000003.405578810.00000000022A1000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A1000
Size:	24576

Details

Name:	00000007.00000002.605796827.0000000002C99000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C99000
Size:	4096

Details

Name:	00000000.00000003.369542039.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000008.00000003.405422417.000000000230F000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	230F000
Size:	4096

Details

Name:	00000000.00000003.346321138.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000001A.00000002.600471343.000000010007B000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	10007B000
Size:	20480

Details

Name:	00000018.00000003.516456847.000001550EFA4000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1550EFA4000
Size:	4096

Details

Name:	00000018.00000002.604631352.00007FF5984DE000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5984DE000
Size:	4096

Details

Name:	00000000.00000003.372578957.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000008.00000002.409708853.00000000022A8000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22A8000
Size:	8192

Details

Name:	00000008.00000002.409803402.000000007FFB0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000007.00000003.388086672.00000000058E0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	58E0000
Size:	40960

Details

Name:	00000000.00000003.370292026.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000001A.00000002.601662655.00007FF514D67000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF514D67000
Size:	4096

Details

Name:	0000000B.00000000.396974971.00007FF5DB6E7000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5DB6E7000
Size:	16384

Details

Name:	00000000.00000003.371820067.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.345950794.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	49152

Details

Name:	00000007.00000000.382385548.0000000000B60000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	B60000
Size:	16384

Details

Name:	00000007.00000000.380128700.000000007F872000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F872000
Size:	4096

Details

Name:	00000004.00000002.364214455.00007DF46FCC0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF46FCC0000
Size:	20480

Details

Name:	0000000D.00000000.427577892.000000007FFC0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000011.00000002.458659200.000000007FFC2000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	0000000E.00000002.442478936.0000018111508000.00000004.00000001.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18111508000
Size:	24576

Details

Name:	00000000.00000003.368646042.0000000007761000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7761000
Size:	167936

Details

Name:	00000007.00000000.378988408.000000007F870000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F870000
Size:	4096

Details

Name:	0000001A.00000002.601698852.00007FF514DA1000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF514DA1000
Size:	12288

Details

Name:	00000000.00000003.335109876.0000000005D6D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D6D000
Size:	4096

Details

Name:	00000000.00000003.372358550.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.371928687.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.340656136.0000000005D5C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5C000
Size:	143360

Details

Name:	0000000C.00000000.414687025.0000000000454000.00000040.00000001.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	454000
Size:	28672

Details

Name:	00000013.00000002.489639834.00007FF56B237000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B237000
Size:	4096

Details

Name:	00000007.00000000.380112673.000000007F870000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F870000
Size:	4096

Details

Name:	00000007.00000000.380673385.000000007F872000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F872000
Size:	4096

Details

Name:	00000008.00000002.406829834.000000000019C000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	19C000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.347391160.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	126976

Details

Name:	00000000.00000003.348056236.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000B.00000002.412286260.00000165C6013000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	165C6013000
Size:	86016

Details

Name:	0000000D.00000000.425829826.000000007FFC0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000011.00000000.440788992.000000007FFC0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000000.00000003.335778817.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.370004473.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000001B.00000000.583073685.0000000000040000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	0000000C.00000002.424886279.0000000000195000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	195000
Size:	24576

Details

Name:	0000000C.00000003.423270369.0000000002650000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2650000
Size:	126976

Details

Name:	0000000D.00000000.427104857.000000007FFD0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	0000000C.00000003.424487107.000000000223E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	223E000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000011.00000000.441534121.000000007FFB0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	0000001B.00000000.582531606.000000007FFD0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000000.00000003.344331499.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000001A.00000002.602447070.00007FF515516000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF515516000
Size:	16384

Details

Name:	0000000C.00000003.422730292.0000000002234000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2234000
Size:	32768

Details

Name:	00000007.00000002.607569261.0000000005A80000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5A80000
Size:	4096

Details

Name:	00000008.00000000.393794866.000000007FFC2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000008.00000003.404227792.00000000005E5000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5E5000
Size:	4096

Details

Name:	00000013.00000003.488430304.000001F9B3C4B000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B3C4B000
Size:	4096

Details

Name:	00000000.00000003.369775804.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.345985415.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	49152

Details

Name:	00000011.00000002.457922865.000000000019C000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	19C000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000B.00000002.413120609.00007FF5DB69D000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5DB69D000
Size:	12288

Details

Name:	00000008.00000003.405407419.00000000022B1000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22B1000
Size:	61440

Details

Name:	00000000.00000003.340551272.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.334683490.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	16384

Details

Name:	00000013.00000002.490131493.00007FF56B914000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B914000
Size:	8192

Details

Name:	00000018.00000002.600965205.00000155098D0000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	155098D0000
Size:	102400

Details

Name:	00000013.00000003.469290094.000001F9B4584000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4584000
Size:	8192

Details

Name:	00000007.00000000.379485233.0000000000B70000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	B70000
Size:	4096

Details

Name:	00000000.00000003.372146606.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.373959265.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.333980293.00000000054F0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54F0000
Size:	61440

Details

Name:	00000000.00000003.372969645.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000001B.00000002.585367900.000000000021F000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	21F000
Size:	8192

Details

Name:	00000008.00000003.403973914.00000000022A4000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A4000
Size:	32768

Details

Name:	00000000.00000002.388371557.0000000005370000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5370000
Size:	53248

Details

Name:	00000013.00000003.475208743.000001F9B4596000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4596000
Size:	16384

Details

Name:	00000008.00000000.390556044.000000007FFB0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000000.00000003.372756481.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000014.00000002.476996254.00007DF5BD6A0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BD6A0000
Size:	12288

Details

Name:	0000000B.00000002.412422878.00000165C6082000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	165C6082000
Size:	61440

Details

Name:	00000000.00000003.334433726.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	4096

Details

Name:	00000000.00000003.341609658.0000000005D5E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5E000
Size:	4096

Details

Name:	00000000.00000003.374457555.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000003.384893228.00000000029C0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	29C0000
Size:	28672

Details

Name:	00000013.00000002.490411654.00007FF56BA22000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56BA22000
Size:	12288

Details

Name:	00000000.00000003.336722290.0000000005D6B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D6B000
Size:	4096

Details

Name:	00000000.00000002.389389937.0000000005725000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5725000
Size:	40960

Details

Name:	00000008.00000000.390036703.000000007FFC2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	0000000C.00000003.423135663.00000000005C4000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C4000
Size:	8192

Details

Name:	00000007.00000000.382405665.000000007F870000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F870000
Size:	4096

Details

Name:	00000007.00000002.603775618.00000000014B0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	14B0000
Size:	4096

Details

Name:	00000000.00000003.338229815.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000E.00000002.442681314.00007DF5AA002000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5AA002000
Size:	4096

Details

Name:	00000013.00000002.489227604.000001F9B3D16000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B3D16000
Size:	4096

Details

Name:	00000011.00000003.455414270.00000000020E1000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20E1000
Size:	24576

Details

Name:	00000014.00000002.477237711.00007FF5B3894000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B3894000
Size:	4096

Details

Name:	0000000D.00000000.428423179.00000000001B0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000000.00000003.335189997.0000000005D44000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D44000
Size:	8192

Details

Name:	00000000.00000003.341565083.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000014.00000003.476177297.00000285CBB02000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	285CBB02000
Size:	122880

Details

Name:	00000007.00000002.603583328.00000000010A6000.00000040.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	10A6000
Size:	8192

Details

Name:	00000007.00000003.383601564.0000000002950000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2950000
Size:	65536

Details

Name:	00000011.00000003.454522278.00000000020FD000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20FD000
Size:	4096

Details

Name:	00000007.00000002.603790196.00000000014C0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	14C0000
Size:	294912

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	00000000.00000003.339882061.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000007.00000003.503314719.0000000000DD2000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DD2000
Size:	20480

Details

Name:	00000000.00000003.345627362.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.374316011.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.350859613.00000000056E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	56E0000
Size:	49152

Details

Name:	00000013.00000002.488981302.000001F9B3C88000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B3C88000
Size:	139264

Details

Name:	00000007.00000002.602596104.0000000000B60000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	B60000
Size:	16384

Details

Name:	00000000.00000003.353117825.0000000007620000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7620000
Size:	12288

Details

Name:	00000007.00000002.607904332.000000007F890000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F890000
Size:	12288

Details

Name:	00000000.00000003.346014344.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.336641442.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000D.00000000.428898922.000000007FFB2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000000.00000003.371245871.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000B.00000002.412458259.00000165C6100000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	165C6100000
Size:	4096

Details

Name:	0000000C.00000003.424548254.000000000222E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	222E000
Size:	4096

Details

Name:	00000000.00000003.348648127.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000011.00000002.458567026.0000000002105000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2105000
Size:	4096

Details

Name:	00000018.00000002.604037863.00007FF597F3B000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF597F3B000
Size:	12288

Details

Name:	00000007.00000000.381859502.000000007F890000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F890000
Size:	12288

Details

Name:	00000014.00000002.476479707.000000CD991AF000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	CD991AF000
Size:	4096

Details

Name:	00000007.00000003.408767056.0000000005AA0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA0000
Size:	65536

Details

Name:	0000000C.00000000.412416122.000000007FFB2000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000000.00000003.369761478.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.341155141.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000018.00000002.605313371.00007FF5986D7000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5986D7000
Size:	32768

Details

Name:	0000000D.00000003.435940088.0000000000A2D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A2D000
Size:	12288

Details

Name:	0000000C.00000003.422702275.000000000223D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	223D000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000C.00000000.411227599.000000007FFC0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000013.00000003.465619431.000001F9B3CA9000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B3CA9000
Size:	36864

Details

Name:	00000007.00000000.382688228.0000000000400000.00000040.00000001.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	4096

Details

Name:	00000004.00000002.364363044.00007FF567B07000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF567B07000
Size:	32768

Details

Name:	0000001A.00000002.601515536.00007DF51F2C2000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51F2C2000
Size:	4096

Details

Name:	00000000.00000003.350120231.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	0000001B.00000000.581015590.000000007FFB0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	0000000C.00000002.425125842.00000000005B0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	5B0000
Size:	16384

Details

Name:	00000000.00000003.370067790.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.343580142.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	94208

Details

Name:	0000000B.00000002.412467384.00000165C6102000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	165C6102000
Size:	12288

Details

Name:	00000000.00000003.369531183.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.344674691.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.336065858.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000007.00000002.606104122.0000000002CD7000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD7000
Size:	4096

Details

Name:	0000000D.00000003.436071637.0000000000A21000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A21000
Size:	8192

Details

Name:	00000000.00000003.340424202.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.350284730.0000000005D92000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D92000
Size:	4096

Details

Name:	00000000.00000003.370239002.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000001B.00000000.583457268.00000000001A0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000000.00000003.333333242.00000000011DE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11DE000
Size:	20480

Details

Name:	0000000B.00000002.412936372.00007FF5DB5EF000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5DB5EF000
Size:	8192

Details

Name:	00000013.00000002.490205416.00007FF56B94A000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B94A000
Size:	24576

Details

Name:	00000011.00000003.454223219.00000000020ED000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20ED000
Size:	12288

Details

Name:	0000001B.00000000.582835974.000000007FFC0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	0000000D.00000000.426211588.000000007FFB2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000000.00000003.348856529.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	147456

Details

Name:	00000007.00000002.605332219.0000000002C59000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C59000
Size:	4096

Details

Name:	00000000.00000003.333098593.00000000011DA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11DA000
Size:	8192

Details

Name:	0000000D.00000003.438015449.0000000000A3E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A3E000
Size:	12288

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.371587760.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000002.606006688.0000000002CB5000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CB5000
Size:	4096

Details

Name:	00000018.00000002.600673636.00000034B157E000.00000004.00000010.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	34B157E000
Size:	8192

Details

Name:	00000007.00000002.607044840.000000000506C000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	506C000
Size:	12288

Details

Name:	00000000.00000003.370562332.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000013.00000003.471873808.000001F9B45A9000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B45A9000
Size:	147456

Details

Name:	00000000.00000003.343253465.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000018.00000002.604167021.00007FF59828C000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59828C000
Size:	8192

Details

Name:	00000011.00000003.456144012.00000000005A4000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A4000
Size:	8192

Details

Name:	00000007.00000003.409239502.0000000005AA0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA0000
Size:	36864

Details

Name:	00000000.00000003.333385329.00000000053B0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	53B0000
Size:	32768

Details

Name:	00000000.00000003.341178557.0000000005D61000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D61000
Size:	4096

Details

Name:	0000000E.00000002.443364480.00007FF5A01AD000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A01AD000
Size:	20480

Details

Name:	00000000.00000003.340163125.0000000005D4A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D4A000
Size:	4096

Details

Name:	00000000.00000003.373671758.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000002.605927625.0000000002CAA000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CAA000
Size:	4096

Details

Name:	00000000.00000003.373331876.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.371563159.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000A.00000002.601755748.00007FF59870A000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59870A000
Size:	4096

Details

Name:	00000014.00000002.477206761.00007FF5B3837000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B3837000
Size:	4096

Details

Name:	00000018.00000003.516370380.000001550F0E0000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1550F0E0000
Size:	8192

Details

Name:	00000011.00000000.439844066.0000000000040000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000000.00000003.369457787.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.340917824.0000000005D63000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D63000
Size:	65536

Details

Name:	00000007.00000002.604848452.0000000002BDC000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2BDC000
Size:	4096

Details

Name:	00000007.00000002.607178896.000000000526E000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	526E000
Size:	8192

Details

Name:	00000000.00000003.348063956.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.335873864.0000000005D68000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D68000
Size:	4096

Details

Name:	00000008.00000002.409594521.0000000002260000.00000004.00000040.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2260000
Size:	8192

Details

Name:	00000011.00000003.456041248.00000000005A5000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A5000
Size:	4096

Details

Name:	00000000.00000003.350079807.0000000005D92000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D92000
Size:	4096

Details

Name:	00000000.00000003.370616083.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.342991908.0000000005D63000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D63000
Size:	73728

Details

Name:	0000000D.00000002.439895248.0000000000A31000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A31000
Size:	24576

Details

Name:	00000000.00000003.336539244.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000001A.00000002.601773583.00007FF5150EE000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5150EE000
Size:	4096

Details

Name:	00000000.00000003.373068576.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000002.606189742.0000000002CDF000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CDF000
Size:	16384

Details

Name:	00000007.00000003.386856634.0000000005280000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5280000
Size:	12288

Details

Name:	00000008.00000003.405380836.00000000005E4000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5E4000
Size:	8192

Details

Name:	00000000.00000003.351936645.0000000007CD0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7CD0000
Size:	16384

Details

Name:	00000000.00000003.364086849.0000000007860000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7860000
Size:	32768

Details

Name:	00000008.00000000.393358807.000000007FFC2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000000.00000003.342694728.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000011.00000003.454042559.00000000020F4000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20F4000
Size:	32768

Details

Name:	00000000.00000003.371985671.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000001B.00000000.582783502.00000000001A0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000000.00000003.369741913.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.374248961.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000018.00000002.601293464.0000015509A29000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15509A29000
Size:	94208

Details

Name:	00000013.00000003.469444997.000001F9B4580000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4580000
Size:	4096

Details

Name:	00000007.00000002.602617235.0000000000B70000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	B70000
Size:	4096

Details

Name:	00000000.00000003.353320638.0000000007770000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7770000
Size:	8192

Details

Name:	00000000.00000003.342609989.0000000005D74000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D74000
Size:	4096

Details

Name:	00000000.00000003.371001561.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000000.381239857.0000000000B60000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	B60000
Size:	16384

Details

Name:	00000018.00000002.604024617.00007FF597F27000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF597F27000
Size:	4096

Details

Name:	00000000.00000003.337323982.0000000005D6C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D6C000
Size:	4096

Details

Name:	00000007.00000002.607356910.00000000058E0000.00000040.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	58E0000
Size:	65536

Details

Name:	00000000.00000002.384350487.0000000000F37000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F37000
Size:	36864

Details

Name:	0000000D.00000000.429297764.000000007FFD0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000008.00000000.394663340.0000000000040000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	0000000D.00000003.434487903.0000000000A71000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A71000
Size:	380928

Details

Name:	00000007.00000000.382443068.000000007F890000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F890000
Size:	12288

Details

Name:	00000000.00000002.388864839.0000000005510000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5510000
Size:	8192

Details

Name:	00000000.00000003.373871949.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.335162245.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	40960

Details

Name:	00000013.00000003.467515049.000001F9B45CF000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B45CF000
Size:	122880

Details

Name:	00000013.00000003.469176761.000001F9B457C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B457C000
Size:	8192

Details

Name:	00000008.00000000.391743945.000000007FFC0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000008.00000000.394901558.000000007FFB0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000000.00000003.369914447.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.346494286.0000000005D75000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D75000
Size:	16384

Details

Name:	00000004.00000002.365523311.00007FF567F63000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF567F63000
Size:	24576

Details

Name:	0000000D.00000003.439080976.0000000000A31000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A31000
Size:	24576

Details

Name:	00000013.00000003.468769426.000001F9B45A5000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B45A5000
Size:	90112

Details

Name:	0000000C.00000003.421943675.000000000222C000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	222C000
Size:	4096

Details

Name:	00000005.00000000.376735424.00000000006C0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	6C0000
Size:	16384

Details

Name:	00000008.00000000.391693760.0000000000400000.00000040.00000001.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	4096

Details

Name:	00000000.00000003.373768737.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000C.00000003.423082972.00000000005C4000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C4000
Size:	8192

Details

Name:	00000004.00000002.364299981.00007DF571E10000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF571E10000
Size:	12288

Details

Name:	00000008.00000003.404339846.00000000005E5000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5E5000
Size:	4096

Details

Name:	00000000.00000002.384425492.000000000111E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	111E000
Size:	8192

Details

Name:	00000011.00000003.454535819.00000000020ED000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20ED000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000007.00000002.605533948.0000000002C74000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C74000
Size:	8192

Details

Name:	00000000.00000003.341885734.0000000005D5E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5E000
Size:	4096

Details

Name:	0000000B.00000002.412793580.00007FF5DB47A000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5DB47A000
Size:	16384

Details

Name:	00000008.00000000.394749010.00000000001B0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000000.00000003.335453903.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	40960

Details

Name:	00000000.00000003.349650268.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	180224

Details

Name:	00000000.00000003.336154965.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000018.00000002.604882394.00007FF598604000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF598604000
Size:	8192

Details

Name:	0000000D.00000002.440152775.000000007FFB0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000007.00000003.387807346.0000000005280000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5280000
Size:	16384

Details

Name:	00000008.00000002.409216774.00000000007D8000.00000004.00000020.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	7D8000
Size:	81920

Details

Name:	00000011.00000002.458515969.00000000020F1000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20F1000
Size:	24576

Details

Name:	00000013.00000003.467905421.000001F9B457F000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B457F000
Size:	16384

Details

Name:	00000013.00000002.489828414.00007FF56B76B000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B76B000
Size:	4096

Details

Name:	0000000D.00000003.435801679.0000000000A30000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A30000
Size:	49152

Details

Name:	00000000.00000003.348344028.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000014.00000002.476721175.00000285CBB27000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	285CBB27000
Size:	24576

Details

Name:	00000000.00000003.333011455.00000000011CF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11CF000
Size:	32768

Details

Name:	00000000.00000003.383647193.0000000008A80000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	8A80000
Size:	49152

Details

Name:	00000000.00000003.372592635.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.334849106.0000000005D42000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D42000
Size:	8192

Details

Name:	00000000.00000002.392654411.000000000893F000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	893F000
Size:	4096

Details

Name:	00000000.00000003.342005288.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000013.00000002.489112117.000001F9B3CEB000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B3CEB000
Size:	53248

Details

Name:	00000011.00000002.458233368.00000000005A5000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5A5000
Size:	4096

Details

Name:	0000000D.00000003.436374004.0000000000A9F000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A9F000
Size:	4096

Details

Name:	00000013.00000002.489587895.00007DF5757E0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5757E0000
Size:	12288

Details

Name:	00000000.00000003.353183442.0000000007620000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7620000
Size:	20480

Details

Name:	00000007.00000000.378965762.0000000000B60000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	B60000
Size:	16384

Details

Name:	00000011.00000000.441840385.000000007FFB0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	0000000B.00000000.396890245.00000165C5EF0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	165C5EF0000
Size:	102400

Details

Name:	00000008.00000003.403565944.0000000002294000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2294000
Size:	28672

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000000.427059408.000000007FFB2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000018.00000002.603554478.000001550F260000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1550F260000
Size:	233472

Details

Name:	00000013.00000002.489690236.00007FF56B4A6000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B4A6000
Size:	4096

Details

Name:	0000001A.00000002.601538573.00007DF51F2D2000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51F2D2000
Size:	4096

Details

Name:	0000000D.00000002.440078492.0000000000EA0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	EA0000
Size:	4096

Details

Name:	00000000.00000003.372828794.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000018.00000002.603691054.000001550F29E000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1550F29E000
Size:	212992

Details

Name:	0000000C.00000003.422569295.0000000002221000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2221000
Size:	12288

Details

Name:	00000000.00000003.343510616.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	94208

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000002.378371808.0000000000A0F000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A0F000
Size:	4096

Details

Name:	00000007.00000003.388383801.0000000005A50000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A50000
Size:	65536

Details

Name:	00000000.00000003.334303287.00000000011D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11D0000
Size:	20480

Details

Name:	00000008.00000000.389169469.000000007FFC2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000000.00000003.373626712.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.346985285.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	118784

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000018.00000002.603815019.000001550F2E3000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1550F2E3000
Size:	4096

Details

Name:	00000000.00000003.348242649.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	135168

Details

Name:	0000000B.00000002.412153104.00000012E0E77000.00000004.00000010.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	12E0E77000
Size:	36864

Details

Name:	00000007.00000000.380466105.00000000006F0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	6F0000
Size:	4096

Details

Name:	0000000E.00000002.443093941.00007FF59FED1000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59FED1000
Size:	8192

Details

Name:	00000000.00000003.339404879.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.339332941.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000007.00000003.408896725.0000000000DCA000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DCA000
Size:	57344

Details

Name:	00000000.00000003.370012678.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000C.00000003.421893437.0000000002221000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2221000
Size:	8192

Details

Name:	00000000.00000003.342013838.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000011.00000003.453809369.00000000020FE000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20FE000
Size:	401408

Details

Name:	00000000.00000003.342817579.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	28672

Details

Name:	0000001B.00000000.583577198.000000007FFC0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000000.00000003.339858704.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.373171072.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000013.00000003.469491043.000001F9B4588000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4588000
Size:	32768

Details

Name:	00000011.00000003.457392134.00000000020EE000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20EE000
Size:	4096

Details

Name:	0000000D.00000002.440021705.0000000000B20000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	B20000
Size:	32768

Details

Name:	0000001B.00000000.582053432.000000007FFD0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000007.00000003.408691027.0000000000DBF000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DBF000
Size:	16384

Details

Name:	0000000D.00000003.437044418.0000000000614000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	614000
Size:	4096

Details

Name:	00000000.00000003.352793108.0000000007D50000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7D50000
Size:	20480

Details

Name:	00000000.00000003.347579085.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	131072

Details

Name:	00000000.00000003.348934878.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000007.00000003.384666545.0000000002940000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2940000
Size:	24576

Details

Name:	0000000D.00000003.435786539.0000000000A29000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A29000
Size:	16384

Details

Name:	0000000C.00000000.411687132.000000007FFD0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000000.00000003.343143033.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000000.00000003.350275239.0000000005D92000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D92000
Size:	4096

Details

Name:	00000000.00000003.342437240.0000000005D74000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D74000
Size:	4096

Details

Name:	00000000.00000003.340565961.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	94208

Details

Name:	00000000.00000003.350132579.0000000005D92000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D92000
Size:	4096

Details

Name:	00000018.00000002.603789507.000001550F2D8000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1550F2D8000
Size:	40960

Details

Name:	0000000D.00000003.437822312.0000000000A9F000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A9F000
Size:	4096

Details

Name:	0000001A.00000002.600590580.00000001001FE000.00000004.00000010.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	1001FE000
Size:	8192

Details

Name:	0000000E.00000002.442509906.00000181118D0000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	181118D0000
Size:	12288

Details

Name:	00000013.00000002.489628066.00007FF56B230000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B230000
Size:	8192

Details

Name:	00000013.00000002.489680285.00007FF56B4A3000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B4A3000
Size:	8192

Details

Name:	0000000D.00000003.435869550.0000000000A2D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A2D000
Size:	12288

Details

Name:	00000000.00000002.384433378.0000000001120000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1120000
Size:	16384

Details

Name:	00000007.00000002.605466050.0000000002C6A000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C6A000
Size:	4096

Details

Name:	00000000.00000003.374029161.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.346545216.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000007.00000002.607311139.000000000564E000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	564E000
Size:	8192

Details

Name:	0000000E.00000002.442139438.00000181112C0000.00000004.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	181112C0000
Size:	4096

Details

Name:	00000000.00000003.333640564.00000000053C1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	53C1000
Size:	61440

Details

Name:	00000000.00000003.339157771.0000000005D60000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D60000
Size:	65536

Details

Name:	00000000.00000003.345766908.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.349688587.0000000005D92000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D92000
Size:	4096

Details

Name:	0000000C.00000003.424608134.0000000000BE7000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	BE7000
Size:	4096

Details

Name:	00000011.00000003.456121301.00000000005A4000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A4000
Size:	8192

Details

Name:	00000007.00000003.386030619.0000000005270000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5270000
Size:	36864

Details

Name:	00000008.00000003.403490798.00000000022AD000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22AD000
Size:	16384

Details

Name:	00000000.00000003.372561309.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000D.00000003.436200244.0000000000A3D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A3D000
Size:	4096

Details

Name:	0000000D.00000000.428890221.000000007FFB0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000011.00000003.454461417.00000000020EC000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20EC000
Size:	4096

Details

Name:	0000000C.00000003.421338064.0000000002A00000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2A00000
Size:	524288

Details

Name:	00000013.00000003.472554440.000001F9B457B000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B457B000
Size:	24576

Details

Name:	00000000.00000003.353259974.0000000007620000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7620000
Size:	65536

Details

Name:	00000007.00000002.603032277.0000000000D9F000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	D9F000
Size:	208896

Details

Name:	00000018.00000003.516494522.000001550F0D0000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1550F0D0000
Size:	4096

Details

Name:	00000014.00000002.476629672.00000285CBAF0000.00000004.00000020.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	285CBAF0000
Size:	40960

Details

Name:	00000013.00000002.489809554.00007FF56B75E000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B75E000
Size:	4096

Details

Name:	00000005.00000000.376791700.000000007EFE2000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7EFE2000
Size:	4096

Details

Name:	00000000.00000003.352684739.0000000007F30000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7F30000
Size:	28672

Details

Name:	00000000.00000003.345164944.0000000005D68000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D68000
Size:	57344

Details

Name:	0000000A.00000002.602059554.00007FF5988BC000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5988BC000
Size:	4096

Details

Name:	0000000C.00000002.425433678.000000007FEB0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FEB0000
Size:	20480

Details

Name:	0000000D.00000003.435836536.0000000000A34000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A34000
Size:	32768

Details

Name:	00000018.00000002.601699357.0000015509A8A000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15509A8A000
Size:	4096

Details

Name:	0000001A.00000002.600846803.00000170C9A60000.00000004.00000020.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	170C9A60000
Size:	28672

Details

Name:	0000000C.00000003.421746972.0000000002234000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2234000
Size:	32768

Details

Name:	00000007.00000003.387273202.0000000005270000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5270000
Size:	12288

Details

Name:	00000007.00000000.383186582.000000007F890000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F890000
Size:	12288

Details

Name:	0000001B.00000000.581392529.000000007FFB0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000000.00000003.348787966.0000000005D7B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7B000
Size:	4096

Details

Name:	0000001B.00000000.584230469.00000000001B0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000000.00000002.388522870.00000000053D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	53D0000
Size:	4096

Details

Name:	0000000B.00000002.412654378.00007DF5E5492000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E5492000
Size:	4096

Details

Name:	00000000.00000002.392713556.000000007F570000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F570000
Size:	20480

Details

Name:	00000008.00000003.404371651.00000000005E4000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5E4000
Size:	8192

Details

Name:	00000000.00000003.337945449.0000000005D53000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D53000
Size:	4096

Details

Name:	00000000.00000002.384177798.0000000000BD0000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	BD0000
Size:	4096

Details

Name:	00000000.00000003.372098839.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.334870858.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	40960

Details

Name:	00000011.00000003.453234907.0000000002780000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2780000
Size:	925696

Details

Name:	00000000.00000003.338432190.0000000005D6F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D6F000
Size:	8192

Details

Name:	00000000.00000002.388545917.00000000053E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	53E0000
Size:	4096

Details

Name:	00000014.00000000.465061376.00007FF5B38E7000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B38E7000
Size:	16384

Details

Name:	00000000.00000003.348748280.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	135168

Details

Name:	00000008.00000003.403127396.00000000022AD000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22AD000
Size:	4096

Details

Name:	00000007.00000003.387202441.0000000005270000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5270000
Size:	32768

Details

Name:	00000007.00000002.606301432.0000000002CE6000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CE6000
Size:	4096

Details

Name:	00000008.00000003.404200891.00000000005E4000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5E4000
Size:	8192

Details

Name:	00000000.00000003.370650139.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.369899335.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000008.00000000.389869558.0000000000040000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000007.00000003.409129889.0000000005AB0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AB0000
Size:	32768

Details

Name:	0000000C.00000003.422046044.0000000002234000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2234000
Size:	32768

Details

Name:	00000014.00000002.477179416.00007FF5B3826000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B3826000
Size:	16384

Details

Name:	00000000.00000003.343877260.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	94208

Details

Name:	00000000.00000003.373546662.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000002.384388549.0000000001070000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1070000
Size:	8192

Details

Name:	00000005.00000000.376777041.000000007EFD2000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7EFD2000
Size:	4096

Details

Name:	00000018.00000002.605343011.00007FF5986EA000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5986EA000
Size:	12288

Details

Name:	00000018.00000002.602660676.000001550A940000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1550A940000
Size:	4096

Details

Name:	00000000.00000003.339697432.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.349187299.0000000005D42000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D42000
Size:	4096

Details

Name:	00000000.00000002.388192610.0000000004FEC000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4FEC000
Size:	16384

Details

Name:	00000000.00000003.342900142.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000000.00000003.371479280.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000A.00000002.601320903.0000022D48480000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22D48480000
Size:	4096

Details

Name:	0000001B.00000000.581736185.000000007FFD0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000000.00000003.373829990.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000003.406407273.0000000005B71000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B71000
Size:	65536

Details

Name:	00000000.00000003.369272986.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000018.00000000.515762066.00007DF5A24B0000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A24B0000
Size:	4096

Details

Name:	0000001B.00000000.582467184.000000007FFB0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	0000000D.00000003.436243121.0000000000A3D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A3D000
Size:	4096

Details

Name:	00000013.00000003.467609704.000001F9B4520000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4520000
Size:	40960

Details

Name:	00000007.00000002.606848412.000000000504A000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	504A000
Size:	28672

Details

Name:	00000000.00000003.349610988.0000000005D91000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D91000
Size:	8192

Details

Name:	00000000.00000003.351785366.0000000007CC0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7CC0000
Size:	16384

Details

Name:	00000013.00000002.488631351.0000004D02BF7000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4D02BF7000
Size:	36864

Details

Name:	00000000.00000003.339298231.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	16384

Details

Name:	0000001B.00000000.584765678.000000007FFB0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000004.00000000.352235250.00007DF571DF2000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF571DF2000
Size:	4096

Details

Name:	00000000.00000003.343828203.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000002.384365709.0000000000F40000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	F40000
Size:	16384

Details

Name:	00000000.00000003.337644382.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	77824

Details

Name:	00000000.00000003.334004402.00000000054D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54D0000
Size:	65536

Details

Name:	00000000.00000003.373259297.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.364121472.0000000007860000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7860000
Size:	16384

Details

Name:	00000000.00000003.347832639.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000013.00000003.469209157.000001F9B457C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B457C000
Size:	8192

Details

Name:	00000000.00000003.369925819.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000000.382811994.00000000006F0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	6F0000
Size:	4096

Details

Name:	00000013.00000003.488396792.000001F9B3C54000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B3C54000
Size:	4096

Details

Name:	0000001B.00000000.581382135.00000000001C0000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	1C0000
Size:	4096

Details

Name:	00000013.00000003.469401892.000001F9B4584000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4584000
Size:	8192

Details

Name:	00000007.00000000.383117721.000000007F870000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F870000
Size:	4096

Details

Name:	00000004.00000002.365678675.00007FF568004000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF568004000
Size:	8192

Details

Name:	0000001A.00000002.600810024.00000170C9960000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	170C9960000
Size:	12288

Details

Name:	0000000D.00000003.436172488.0000000000A2D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A2D000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.347353626.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.370255354.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000C.00000000.415141219.000000007FFC2000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000008.00000003.403805755.00000000022A4000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A4000
Size:	32768

Details

Name:	00000000.00000003.335004103.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	40960

Details

Name:	0000000D.00000000.428552060.000000007FFC2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000000.00000003.337747368.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.369334741.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000C.00000002.425248116.0000000000BA0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	BA0000
Size:	4096

Details

Name:	00000000.00000003.347306036.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	118784

Details

Name:	00000000.00000003.383227010.0000000008A80000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	8A80000
Size:	28672

Details

Name:	00000000.00000003.334440793.0000000005D43000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D43000
Size:	4096

Details

Name:	00000004.00000002.364323907.00007FF56783C000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56783C000
Size:	8192

Details

Name:	00000018.00000002.600900350.00000034B1D7B000.00000004.00000010.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	34B1D7B000
Size:	20480

Details

Name:	00000000.00000003.339720163.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	90112

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.383668263.0000000008A80000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	8A80000
Size:	20480

Details

Name:	0000000D.00000003.435825880.0000000000A28000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A28000
Size:	4096

Details

Name:	0000000D.00000003.436034437.0000000000A2D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A2D000
Size:	12288

Details

Name:	00000011.00000002.458411770.0000000001F8E000.00000004.00000010.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	1F8E000
Size:	8192

Details

Name:	00000007.00000003.409048538.0000000005AB0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AB0000
Size:	32768

Details

Name:	00000000.00000003.349806023.0000000005D83000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D83000
Size:	53248

Details

Name:	00000004.00000002.365563399.00007FF567F76000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF567F76000
Size:	12288

Details

Name:	00000000.00000002.384810282.00000000014FE000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	14FE000
Size:	8192

Details

Name:	0000001A.00000002.601527554.00007DF51F2D0000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51F2D0000
Size:	4096

Details

Name:	0000001B.00000000.584279561.000000007FFB0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000014.00000003.476234971.00000285CBB21000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	285CBB21000
Size:	57344

Details

Name:	0000000C.00000000.414726130.000000007FFC0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000007.00000000.383178388.000000007F882000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F882000
Size:	4096

Details

Name:	00000000.00000003.337275779.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	73728

Details

Name:	00000000.00000003.369448937.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.335822815.0000000005D67000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D67000
Size:	8192

Details

Name:	00000000.00000003.371299539.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000003.503225721.0000000000D80000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D80000
Size:	356352

Details

Name:	0000000C.00000003.422942777.0000000002701000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2701000
Size:	167936

Details

Name:	00000000.00000003.344241564.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	102400

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000B.00000002.412729312.00007FF5DB197000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5DB197000
Size:	32768

Details

Name:	00000000.00000003.345658956.0000000005D67000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D67000
Size:	81920

Details

Name:	0000000C.00000003.421955263.0000000002234000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2234000
Size:	32768

Details

Name:	00000000.00000003.351769746.0000000007CC0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7CC0000
Size:	12288

Details

Name:	0000000A.00000000.392761033.00007FF5989B7000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5989B7000
Size:	16384

Details

Name:	00000007.00000003.386394505.0000000005110000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5110000
Size:	16384

Details

Name:	00000005.00000002.378320655.00000000007E0000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	7E0000
Size:	24576

Details

Name:	00000013.00000003.474695417.000001F9B458F000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B458F000
Size:	319488

Details

Name:	00000007.00000003.386271541.0000000005280000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5280000
Size:	65536

Details

Name:	00000007.00000003.409483870.0000000005AC0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AC0000
Size:	65536

Details

Name:	00000000.00000003.346844575.0000000005D74000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D74000
Size:	20480

Details

Name:	00000000.00000003.368780844.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	4096

Details

Name:	00000000.00000003.339285236.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.374283045.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000C.00000003.422425527.0000000002234000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2234000
Size:	32768

Details

Name:	0000000A.00000002.601912377.00007FF598867000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF598867000
Size:	24576

Details

Name:	00000011.00000003.455503892.00000000020FD000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20FD000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.351972668.0000000007CD0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7CD0000
Size:	20480

Details

Name:	00000000.00000003.371069081.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000013.00000002.489939917.00007FF56B7E7000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B7E7000
Size:	8192

Details

Name:	0000000A.00000002.602627695.00007FF5989B4000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5989B4000
Size:	28672

Details

Name:	00000008.00000003.399618237.00000000022A5000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A5000
Size:	782336

Details

Name:	0000000D.00000000.429149160.0000000000040000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000007.00000002.604350102.0000000002AE1000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2AE1000
Size:	61440

Details

Name:	0000000E.00000000.430654121.00007DF5AA010000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5AA010000
Size:	4096

Details

Name:	0000000C.00000003.423149937.00000000005C4000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C4000
Size:	8192

Details

Name:	00000008.00000003.403891208.0000000002291000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2291000
Size:	24576

Details

Name:	00000000.00000003.348740872.0000000005D42000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D42000
Size:	4096

Details

Name:	00000000.00000003.344481910.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.371789461.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000002.604306506.00000000029D0000.00000004.00000040.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	29D0000
Size:	4096

Details

Name:	00000000.00000003.349990302.0000000005D92000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D92000
Size:	4096

Details

Name:	00000000.00000003.334629214.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	16384

Details

Name:	00000000.00000003.346826727.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000011.00000003.455556761.00000000020FD000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20FD000
Size:	16384

Details

Name:	00000000.00000003.337976146.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.373358524.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000013.00000003.472524482.000001F9B456A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B456A000
Size:	49152

Details

Name:	0000001B.00000000.584751945.0000000000419000.00000040.00000001.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	419000
Size:	12288

Details

Name:	00000008.00000002.409642102.000000000229E000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	229E000
Size:	4096

Details

Name:	0000000E.00000002.443408276.00007FF5A0217000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A0217000
Size:	20480

Details

Name:	00000007.00000002.601038380.00000000006F2000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6F2000
Size:	901120

Details

Name:	00000007.00000000.380647872.0000000000B60000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	B60000
Size:	16384

Details

Name:	00000000.00000003.334213909.00000000054D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54D0000
Size:	65536

Details

Name:	00000000.00000002.384048080.0000000000AD2000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	AD2000
Size:	901120

Signature Hits	Behavior Group	Mitre Attack
Sample file is different than original file name gathered from version info	System Summary

Details

Name:	00000000.00000002.392070768.0000000007CDB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7CDB000
Size:	8192

Details

Name:	00000013.00000002.489799298.00007FF56B730000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B730000
Size:	8192

Details

Name:	00000000.00000003.347838733.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000C.00000002.425333518.0000000002231000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2231000
Size:	24576

Details

Name:	00000000.00000003.370739391.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000005.00000002.378379858.0000000000B30000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	B30000
Size:	16384

Details

Name:	00000000.00000003.369715132.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000004.00000002.363840566.00000171B7D70000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	171B7D70000
Size:	16384

Details

Name:	00000007.00000002.605726517.0000000002C8E000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C8E000
Size:	4096

Details

Name:	00000000.00000003.344052123.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000008.00000003.406099531.000000000229E000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229E000
Size:	4096

Details

Name:	00000000.00000003.371528221.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000008.00000002.409750587.000000000230F000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	230F000
Size:	4096

Details

Name:	00000013.00000003.472718387.000001F9B4598000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4598000
Size:	32768

Details

Name:	00000000.00000003.334480446.0000000005D5E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5E000
Size:	4096

Details

Name:	00000008.00000003.406484564.00000000005E4000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5E4000
Size:	8192

Details

Name:	0000000C.00000000.413826991.000000007FFC2000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000000.00000003.372991299.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.372676668.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.340348012.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000018.00000002.604214980.00007FF5982C3000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5982C3000
Size:	4096

Details

Name:	00000013.00000002.489997477.00007FF56B838000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B838000
Size:	12288

Details

Name:	0000000C.00000000.413816548.000000007FFC0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000000.00000003.341845082.0000000005D63000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D63000
Size:	61440

Details

Name:	00000000.00000003.346922318.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.339010225.0000000005D4A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D4A000
Size:	4096

Details

Name:	00000018.00000002.601079490.0000015509A00000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15509A00000
Size:	73728

Details

Name:	0000000C.00000000.414280987.000000007FFC0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000000.00000003.349847977.0000000005D83000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D83000
Size:	53248

Details

Name:	00000000.00000003.346112840.0000000005D68000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D68000
Size:	77824

Details

Name:	00000007.00000002.603712554.0000000001127000.00000004.00000040.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1127000
Size:	4096

Details

Name:	0000001A.00000002.601402368.00000170CA880000.00000002.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	170CA880000
Size:	4096

Details

Name:	00000000.00000003.364166021.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	4096

Details

Name:	00000000.00000003.342802087.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000000.00000002.392501181.00000000082AE000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	82AE000
Size:	8192

Details

Name:	00000005.00000000.377118476.000000007EFD0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7EFD0000
Size:	4096

Details

Name:	00000008.00000000.394976144.000000007FFD0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000000.00000002.388888059.0000000005520000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5520000
Size:	8192

Details

Name:	00000000.00000003.371436126.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000C.00000003.415945496.0000000002800000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2800000
Size:	126976

Details

Name:	00000011.00000003.454344076.00000000020E1000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20E1000
Size:	8192

Details

Name:	00000007.00000003.503341429.0000000000D9E000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D9E000
Size:	212992

Details

Name:	0000000C.00000003.423602825.000000000223E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	223E000
Size:	12288

Details

Name:	00000000.00000003.338005434.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	77824

Details

Name:	00000000.00000003.340403377.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000018.00000002.602775934.000001550AA30000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1550AA30000
Size:	65536

Details

Name:	0000000A.00000002.602577118.00007FF5989A3000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5989A3000
Size:	8192

Details

Name:	00000007.00000003.387285304.0000000005270000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5270000
Size:	16384

Details

Name:	00000000.00000003.347019923.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000002.389460792.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	163840

Details

Name:	00000007.00000000.379582370.000000007F880000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F880000
Size:	4096

Details

Name:	0000000E.00000002.442993101.00007DF5AA010000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5AA010000
Size:	4096

Details

Name:	00000000.00000003.342682343.0000000005D75000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D75000
Size:	4096

Details

Name:	00000011.00000003.454799669.00000000020FD000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20FD000
Size:	8192

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.352382329.00000000011FB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11FB000
Size:	57344

Details

Name:	00000005.00000002.378573841.000000007EFE0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7EFE0000
Size:	4096

Details

Name:	00000000.00000002.384800537.00000000014B0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	14B0000
Size:	4096

Details

Name:	00000000.00000003.345826775.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	49152

Details

Name:	00000008.00000003.402498596.00000000022A4000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A4000
Size:	32768

Details

Name:	00000000.00000003.342028005.0000000005D5E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5E000
Size:	16384

Details

Name:	00000007.00000000.380447667.0000000000400000.00000040.00000001.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	4096

Details

Name:	00000000.00000003.334069421.00000000054D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54D0000
Size:	53248

Details

Name:	00000011.00000003.455337803.00000000020FD000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20FD000
Size:	16384

Details

Name:	00000013.00000002.488701584.0000004D030FE000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4D030FE000
Size:	8192

Details

Name:	00000000.00000003.371859943.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000004.00000002.363906482.00000171B7E22000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	171B7E22000
Size:	28672

Details

Name:	00000000.00000003.368949274.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	4096

Details

Name:	00000018.00000002.602447756.000001550A200000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1550A200000
Size:	4096

Details

Name:	00000000.00000003.334190669.0000000005500000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5500000
Size:	65536

Details

Name:	00000000.00000003.333174685.00000000011E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11E0000
Size:	32768

Details

Name:	00000000.00000002.388400043.000000000537E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	537E000
Size:	8192

Details

Name:	00000014.00000002.476459113.000000CD9912E000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	CD9912E000
Size:	8192

Details

Name:	00000000.00000003.336076136.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	61440

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000A.00000002.602596617.00007FF5989A6000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5989A6000
Size:	16384

Details

Name:	00000000.00000003.333169170.00000000011E7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11E7000
Size:	4096

Details

Name:	00000000.00000003.371149460.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000C.00000000.411580439.00000000001A0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000007.00000002.605608646.0000000002C7F000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C7F000
Size:	4096

Details

Name:	00000011.00000003.457545570.00000000020EE000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20EE000
Size:	4096

Details

Name:	00000014.00000000.464929001.00000285CB9C0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	285CB9C0000
Size:	102400

Details

Name:	00000000.00000003.341716306.0000000005D61000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D61000
Size:	4096

Details

Name:	0000000D.00000003.436097560.0000000000A2C000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A2C000
Size:	4096

Details

Name:	00000004.00000002.365580201.00007FF567F7A000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF567F7A000
Size:	24576

Details

Name:	00000013.00000003.474481193.000001F9B458F000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B458F000
Size:	53248

Details

Name:	00000013.00000003.466554706.000001F9B4564000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4564000
Size:	36864

Details

Name:	00000000.00000003.340983604.0000000005D5F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5F000
Size:	131072

Details

Name:	00000007.00000003.388106660.00000000058E0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	58E0000
Size:	4096

Details

Name:	00000007.00000003.384850001.0000000002940000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2940000
Size:	16384

Details

Name:	00000008.00000003.406060265.00000000022A1000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A1000
Size:	24576

Details

Name:	00000007.00000002.605362554.0000000002C5D000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C5D000
Size:	4096

Details

Name:	00000000.00000003.370959615.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000003.409415977.0000000005D70000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D70000
Size:	65536

Details

Name:	00000000.00000003.340196837.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.373477486.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000B.00000002.412126456.00000012E0CFB000.00000004.00000010.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	12E0CFB000
Size:	20480

Details

Name:	0000000D.00000003.436279584.0000000000A33000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A33000
Size:	36864

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000C.00000000.413769691.000000007FFB2000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000000.00000003.338177060.0000000005D4A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D4A000
Size:	4096

Details

Name:	0000000D.00000000.426557618.00000000001A0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000000.00000003.373096340.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.347141247.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000011.00000000.441513206.00000000001A0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000000.00000003.345851739.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000D.00000002.439491966.0000000000245000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	245000
Size:	4096

Details

Name:	00000011.00000000.440286620.000000007FFB0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000000.00000003.373143830.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000003.385659099.0000000005090000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5090000
Size:	40960

Details

Name:	00000000.00000003.334406248.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	4096

Details

Name:	00000000.00000003.342332465.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000013.00000002.490293453.00007FF56B9D4000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B9D4000
Size:	8192

Details

Name:	0000000D.00000000.428345631.0000000000040000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000000.00000003.372230761.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000A.00000000.392672945.00007DF5A2750000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A2750000
Size:	4096

Details

Name:	0000000C.00000003.421848550.000000000222D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	222D000
Size:	12288

Details

Name:	0000000D.00000003.435061867.00000000027B1000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	27B1000
Size:	380928

Details

Name:	00000005.00000000.376283877.0000000003078000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	3078000
Size:	16384

Details

Name:	00000013.00000002.489710545.00007FF56B4D7000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B4D7000
Size:	32768

Details

Name:	00000000.00000002.388251395.000000000533B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	533B000
Size:	45056

Details

Name:	0000000A.00000002.602028018.00007FF5988B1000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5988B1000
Size:	8192

Details

Name:	00000007.00000003.405931824.0000000005A30000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	5A30000
Size:	28672

Details

Name:	0000000B.00000002.412859491.00007FF5DB4F5000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5DB4F5000
Size:	8192

Details

Name:	00000011.00000003.455258929.00000000020FD000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20FD000
Size:	16384

Details

Name:	0000000C.00000003.419878055.000000000223E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	223E000
Size:	712704

Details

Name:	00000011.00000003.457475127.00000000020EE000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20EE000
Size:	4096

Details

Name:	0000000D.00000003.436680755.0000000000A3D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A3D000
Size:	16384

Details

Name:	0000000D.00000003.438978576.0000000000A2E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A2E000
Size:	4096

Details

Name:	00000005.00000000.377152567.000000007EFE0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7EFE0000
Size:	4096

Details

Name:	00000000.00000003.335478585.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	40960

Details

Name:	00000000.00000003.369797010.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000A.00000002.602235891.00007FF5988FD000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5988FD000
Size:	20480

Details

Name:	0000001A.00000002.602467784.00007FF515527000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF515527000
Size:	16384

Details

Name:	00000007.00000003.408637095.0000000000DBF000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DBF000
Size:	28672

Details

Name:	0000001B.00000002.585270093.0000000000030000.00000004.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	30000
Size:	4096

Details

Name:	0000000C.00000000.412041561.000000007FFC0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	0000000D.00000000.425851845.000000007FFD0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000000.00000003.371642751.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000A.00000002.602204626.00007FF5988F6000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5988F6000
Size:	16384

Details

Name:	00000008.00000000.394338568.0000000000454000.00000040.00000001.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	454000
Size:	28672

Details

Name:	00000000.00000003.334138402.00000000011ED000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11ED000
Size:	32768

Details

Name:	00000000.00000003.370052506.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000008.00000003.405430689.000000000229D000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229D000
Size:	57344

Details

Name:	00000000.00000003.368770973.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	4096

Details

Name:	00000018.00000002.600618871.00000034B137B000.00000004.00000010.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	34B137B000
Size:	20480

Details

Name:	00000000.00000003.333141829.00000000011DA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11DA000
Size:	57344

Details

Name:	00000000.00000003.372433195.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000011.00000000.443771224.000000007FFD0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000007.00000003.406653104.0000000000DC6000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DC6000
Size:	126976

Details

Name:	00000011.00000003.456615695.000000000215F000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	215F000
Size:	4096

Details

Name:	00000000.00000003.338000866.0000000005D53000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D53000
Size:	4096

Details

Name:	0000001B.00000000.583618320.000000007FFD0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	0000000D.00000003.435464613.0000000002880000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2880000
Size:	925696

Details

Name:	00000000.00000003.372047718.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.370571125.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000014.00000002.476703157.00000285CBB21000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	285CBB21000
Size:	20480

Details

Name:	00000007.00000002.606711385.0000000004C7E000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4C7E000
Size:	8192

Details

Name:	00000000.00000003.342526044.0000000005D74000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D74000
Size:	4096

Details

Name:	00000000.00000003.341010798.0000000005D79000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D79000
Size:	16384

Details

Name:	00000000.00000003.370329161.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000008.00000003.406121915.000000000229E000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229E000
Size:	4096

Details

Name:	00000000.00000003.370036736.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.335652250.0000000005D42000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D42000
Size:	4096

Details

Name:	0000000C.00000000.412818711.000000007FFC0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000000.00000003.342774157.0000000005D63000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D63000
Size:	73728

Details

Name:	00000000.00000003.343075898.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000013.00000003.472573882.000001F9B4585000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4585000
Size:	4096

Details

Name:	0000000C.00000000.413174243.00000000001B0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000000.00000003.352923333.0000000007D20000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7D20000
Size:	65536

Details

Name:	00000000.00000003.334468537.0000000005D42000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D42000
Size:	8192

Details

Name:	00000008.00000000.394721502.00000000001A0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000011.00000002.458131842.0000000000460000.00000004.00000020.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	460000
Size:	24576

Details

Name:	00000004.00000002.363943486.00000171B7E3C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	171B7E3C000
Size:	94208

Details

Name:	00000000.00000003.368732973.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	4096

Details

Name:	00000000.00000003.341237038.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000007.00000002.606634893.00000000042E5000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	42E5000
Size:	12288

Details

Name:	00000013.00000002.488814197.000001F9B3BD0000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B3BD0000
Size:	4096

Details

Name:	00000000.00000002.388348815.0000000005361000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5361000
Size:	49152

Details

Name:	0000001A.00000003.578748667.00000170C9CD0000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	170C9CD0000
Size:	4096

Details

Name:	0000000C.00000003.423372948.0000000002701000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2701000
Size:	167936

Details

Name:	0000000A.00000002.600645216.0000022D47CD0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	22D47CD0000
Size:	102400

Details

Name:	0000001A.00000002.601456609.00000170CA8A0000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	170CA8A0000
Size:	4096

Details

Name:	00000000.00000003.374192845.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000000.332614201.000000007F682000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F682000
Size:	4096

Details

Name:	00000008.00000000.393181823.000000007FFB0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000000.00000003.338296978.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000D.00000002.439630260.00000000005B0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5B0000
Size:	4096

Details

Name:	00000000.00000003.370160914.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.342958283.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000000.00000003.345254374.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000018.00000002.604256530.00007FF5982E5000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5982E5000
Size:	4096

Details

Name:	00000008.00000003.402467576.000000000229D000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229D000
Size:	12288

Details

Name:	00000007.00000002.605282724.0000000002C52000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C52000
Size:	4096

Details

Name:	0000000B.00000002.413017045.00007FF5DB612000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5DB612000
Size:	49152

Details

Name:	00000014.00000002.477287016.00007FF5B38A7000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B38A7000
Size:	12288

Details

Name:	00000013.00000003.469427833.000001F9B4588000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4588000
Size:	32768

Details

Name:	00000008.00000003.402381165.00000000022A4000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A4000
Size:	32768

Details

Name:	0000000A.00000002.601341182.0000022D48602000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22D48602000
Size:	4096

Details

Name:	00000000.00000003.347000488.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.347867856.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000007.00000003.408781895.0000000005AA0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA0000
Size:	32768

Details

Name:	00000007.00000003.383583714.00000000029B0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	29B0000
Size:	45056

Details

Name:	00000011.00000000.442328102.000000007FFC2000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000008.00000000.391016723.000000007FFB0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000011.00000002.458220491.00000000005A0000.00000004.00000020.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	5A0000
Size:	16384

Details

Name:	00000000.00000003.369093944.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000018.00000002.603826497.000001550F2E9000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1550F2E9000
Size:	20480

Details

Name:	00000000.00000003.334418909.0000000005D4A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D4A000
Size:	4096

Details

Name:	00000000.00000003.369026585.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000002.388603721.00000000054C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	54C0000
Size:	4096

Details

Name:	0000000C.00000003.421673730.000000000223D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	223D000
Size:	4096

Details

Name:	00000000.00000003.370409353.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000013.00000003.474783152.000001F9B458F000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B458F000
Size:	425984

Details

Name:	00000013.00000003.473042737.000001F9B457D000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B457D000
Size:	8192

Details

Name:	00000013.00000003.465702380.000001F9B43C0000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B43C0000
Size:	4096

Details

Name:	0000000C.00000003.422769802.0000000002234000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2234000
Size:	32768

Details

Name:	0000000D.00000003.438124663.0000000000A2E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A2E000
Size:	4096

Details

Name:	00000011.00000000.445801486.000000007FFB2000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000013.00000002.489979126.00007FF56B835000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B835000
Size:	8192

Details

Name:	00000011.00000000.443718426.000000007FFB0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	0000000D.00000000.427958128.00000000001A0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000018.00000002.602215967.0000015509E10000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	15509E10000
Size:	12288

Details

Name:	00000011.00000000.441789818.0000000000040000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000000.00000003.340839977.0000000005D5C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5C000
Size:	94208

Details

Name:	0000001A.00000002.601207461.00000170C9D15000.00000004.00000040.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	170C9D15000
Size:	12288

Details

Name:	00000000.00000003.337392005.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000A.00000002.601715938.00007FF5986C4000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5986C4000
Size:	4096

Details

Name:	00000011.00000003.456213543.00000000005A4000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A4000
Size:	8192

Details

Name:	00000007.00000002.607213942.0000000005280000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5280000
Size:	65536

Details

Name:	00000000.00000003.369673933.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000002.386805246.0000000003E11000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3E11000
Size:	28672

Details

Name:	0000000C.00000000.415132233.000000007FFC0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000004.00000000.352219540.00007DF571DF0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF571DF0000
Size:	4096

Details

Name:	00000008.00000003.403667025.00000000022AD000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22AD000
Size:	16384

Details

Name:	00000000.00000003.371672966.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000011.00000003.455571617.00000000025B1000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	25B1000
Size:	155648

Details

Name:	00000000.00000003.347332468.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.341028286.0000000005D71000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D71000
Size:	32768

Details

Name:	00000011.00000000.443549520.0000000000040000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	0000000D.00000000.427079559.000000007FFC0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000007.00000003.387973619.0000000005290000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5290000
Size:	45056

Details

Name:	00000007.00000003.386756632.0000000005110000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5110000
Size:	32768

Details

Name:	00000000.00000002.384186435.0000000000BE0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	BE0000
Size:	102400

Details

Name:	00000000.00000003.340755767.0000000005D5C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5C000
Size:	98304

Details

Name:	0000001A.00000003.566095578.00000170C9AA5000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	170C9AA5000
Size:	4096

Details

Name:	00000007.00000003.406198455.0000000005A40000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A40000
Size:	12288

Details

Name:	00000011.00000003.454086129.00000000020ED000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20ED000
Size:	12288

Details

Name:	00000000.00000003.337097609.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	73728

Details

Name:	00000000.00000003.371282492.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.337879369.0000000005D53000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D53000
Size:	4096

Details

Name:	00000000.00000003.371076732.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.371519458.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000003.385019076.0000000002940000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2940000
Size:	24576

Details

Name:	00000000.00000003.352406396.00000000011FB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11FB000
Size:	57344

Details

Name:	00000000.00000003.335086843.0000000005D6D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D6D000
Size:	4096

Details

Name:	00000011.00000003.454749260.000000000215F000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	215F000
Size:	4096

Details

Name:	00000007.00000002.605695178.0000000002C8A000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C8A000
Size:	4096

Details

Name:	00000000.00000003.348277711.0000000005D7B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7B000
Size:	4096

Details

Name:	00000000.00000002.388583017.0000000005400000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	5400000
Size:	65536

Details

Name:	0000000D.00000003.437850225.0000000000A2D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A2D000
Size:	57344

Details

Name:	00000011.00000000.440309920.000000007FFC0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000000.00000003.336476043.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	69632

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000011.00000000.441560512.000000007FFC2000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000008.00000003.406082134.00000000022AE000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22AE000
Size:	12288

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.340017900.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.337845728.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000C.00000000.414990263.0000000000040000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000007.00000002.607851161.000000007F872000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F872000
Size:	4096

Details

Name:	00000011.00000003.455044350.00000000020EC000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20EC000
Size:	4096

Details

Name:	0000000D.00000003.436616230.0000000000A3D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A3D000
Size:	16384

Details

Name:	00000011.00000003.454588956.00000000020ED000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20ED000
Size:	20480

Details

Name:	00000004.00000002.365686375.00007FF568007000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF568007000
Size:	20480

Details

Name:	0000001B.00000000.583172830.000000007FFC0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000007.00000000.381273924.000000007F880000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F880000
Size:	4096

Details

Name:	00000000.00000003.348774815.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.335755747.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000011.00000000.440244640.00000000001A0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000018.00000002.605020564.00007FF59863A000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59863A000
Size:	24576

Details

Name:	00000000.00000003.372074870.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000014.00000002.476733175.00000285CBB2E000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	285CBB2E000
Size:	4096

Details

Name:	00000013.00000003.474972357.000001F9B4A6A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4A6A000
Size:	425984

Details

Name:	00000000.00000003.383806119.0000000005D83000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D83000
Size:	94208

Details

Name:	00000013.00000002.490379817.00007FF56BA13000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56BA13000
Size:	8192

Details

Name:	00000000.00000003.334525181.0000000005D63000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D63000
Size:	8192

Details

Name:	00000007.00000000.381212873.0000000000A00000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	A00000
Size:	102400

Details

Name:	00000000.00000003.369666156.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000C.00000002.424934385.00000000001B0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000007.00000003.386890659.0000000005270000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5270000
Size:	65536

Details

Name:	00000007.00000003.387912273.0000000000D6B000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D6B000
Size:	323584

Details

Name:	0000000C.00000003.424477006.0000000002231000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2231000
Size:	24576

Details

Name:	00000000.00000003.371444554.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.348112548.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000011.00000003.454110035.00000000020F4000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20F4000
Size:	32768

Details

Name:	00000000.00000003.344371355.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.347752728.0000000005D42000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D42000
Size:	4096

Details

Name:	0000000D.00000003.434607146.0000000000A35000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A35000
Size:	782336

Details

Name:	0000000B.00000002.412082533.00000012E0AFE000.00000004.00000010.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	12E0AFE000
Size:	8192

Details

Name:	0000000D.00000002.440111839.0000000002460000.00000004.00000040.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2460000
Size:	8192

Details

Name:	00000000.00000003.372395621.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000003.385836514.0000000005092000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5092000
Size:	57344

Details

Name:	00000008.00000000.394362509.000000007FFB0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000000.00000003.343699969.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.337004058.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.338190350.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	81920

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.340336138.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000008.00000003.403651776.00000000022A4000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A4000
Size:	32768

Details

Name:	00000000.00000003.346409894.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	102400

Details

Name:	00000008.00000000.389561172.000000007FFD0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	0000000C.00000002.424859218.000000000009D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	9D000
Size:	12288

Details

Name:	00000013.00000003.476880228.000001F9B4590000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4590000
Size:	397312

Details

Name:	00000000.00000003.336799086.0000000005D6E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D6E000
Size:	4096

Details

Name:	00000000.00000003.333102919.00000000011C9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11C9000
Size:	28672

Details

Name:	00000000.00000003.350483386.0000000005D92000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D92000
Size:	4096

Details

Name:	0000000B.00000002.413205455.00007FF5DB6E2000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5DB6E2000
Size:	12288

Details

Name:	00000007.00000003.408610105.0000000000DC6000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DC6000
Size:	24576

Details

Name:	00000007.00000002.605711731.0000000002C8C000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C8C000
Size:	4096

Details

Name:	0000000C.00000000.412346753.0000000000040000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	0000000A.00000002.601108029.0000022D47E75000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22D47E75000
Size:	45056

Details

Name:	00000014.00000002.476551996.00000285CB9A0000.00000004.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	285CB9A0000
Size:	4096

Details

Name:	00000000.00000003.351843699.0000000007CD0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7CD0000
Size:	65536

Details

Name:	00000000.00000002.384921190.0000000001730000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1730000
Size:	61440

Details

Name:	00000000.00000003.370084370.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000008.00000003.403596921.000000000229C000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229C000
Size:	4096

Details

Name:	00000007.00000002.603609037.00000000010B0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	10B0000
Size:	4096

Details

Name:	00000013.00000003.469224507.000001F9B4584000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4584000
Size:	16384

Details

Name:	00000008.00000002.408979765.0000000000580000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	580000
Size:	16384

Details

Name:	00000011.00000000.441108483.00000000001A0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000013.00000003.475171269.000001F9B4588000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4588000
Size:	32768

Details

Name:	00000007.00000003.385317741.0000000005080000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5080000
Size:	16384

Details

Name:	00000007.00000002.605942684.0000000002CAC000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CAC000
Size:	4096

Details

Name:	0000000D.00000003.437124325.0000000000614000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	614000
Size:	4096

Details

Name:	00000000.00000003.341962623.0000000005D63000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D63000
Size:	69632

Details

Name:	0000001A.00000002.602265818.00007FF5154E4000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5154E4000
Size:	8192

Details

Name:	00000000.00000003.344003681.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000000.332500672.0000000000AD2000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	AD2000
Size:	901120

Details

Name:	00000000.00000003.371886029.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000013.00000002.488690283.0000004D02FFE000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4D02FFE000
Size:	8192

Details

Name:	00000000.00000003.345102567.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000004.00000000.352305850.00007FF568057000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF568057000
Size:	16384

Details

Name:	0000001A.00000002.602164978.00007FF5154D1000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5154D1000
Size:	8192

Details

Name:	00000004.00000002.365631982.00007FF567F9D000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF567F9D000
Size:	20480

Details

Name:	00000000.00000003.333744156.00000000011D1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11D1000
Size:	114688

Details

Name:	00000000.00000003.341840252.0000000005D60000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D60000
Size:	8192

Details

Name:	00000007.00000002.605248322.0000000002C50000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C50000
Size:	4096

Details

Name:	00000008.00000002.409651153.00000000022A1000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22A1000
Size:	24576

Details

Name:	00000000.00000003.344293097.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000001A.00000002.601329236.00000170CA2B0000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	170CA2B0000
Size:	4096

Details

Name:	00000007.00000003.385047561.0000000002940000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2940000
Size:	12288

Details

Name:	0000000B.00000002.412825290.00007FF5DB4B7000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5DB4B7000
Size:	4096

Details

Name:	00000000.00000003.372933450.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000002.388427710.0000000005385000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5385000
Size:	45056

Details

Name:	00000000.00000003.348840775.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000001B.00000000.582805387.0000000000400000.00000040.00000001.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	4096

Details

Name:	0000001B.00000000.581372007.00000000001B0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000013.00000003.471783794.000001F9B45A7000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B45A7000
Size:	4096

Details

Name:	00000000.00000003.369891351.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000005.00000002.378350073.0000000000808000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	808000
Size:	102400

Details

Name:	00000000.00000003.370516127.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.339077946.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000D.00000000.429176034.00000000001A0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000018.00000002.601477544.0000015509A57000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15509A57000
Size:	65536

Details

Name:	0000000A.00000002.601008839.0000022D47E57000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22D47E57000
Size:	98304

Details

Name:	00000008.00000000.394944913.000000007FFC0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	0000000C.00000000.414297647.000000007FFC2000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	0000000D.00000003.436931182.0000000000A34000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A34000
Size:	32768

Details

Name:	00000014.00000002.476920458.00007DF5BD682000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BD682000
Size:	4096

Details

Name:	00000008.00000003.402333783.0000000002299000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2299000
Size:	16384

Details

Name:	00000000.00000003.372625131.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.347155377.0000000005D78000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D78000
Size:	4096

Details

Name:	00000018.00000002.600866015.00000034B1A7F000.00000004.00000010.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	34B1A7F000
Size:	4096

Details

Name:	0000000C.00000002.425109478.000000000059E000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	59E000
Size:	8192

Details

Name:	00000013.00000003.468842413.000001F9B4A02000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4A02000
Size:	94208

Details

Name:	0000000D.00000003.436256591.0000000000A2D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A2D000
Size:	20480

Details

Name:	00000013.00000000.463312168.00007DF5757D0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5757D0000
Size:	4096

Details

Name:	0000000D.00000002.439663406.00000000005D0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5D0000
Size:	4096

Details

Name:	00000000.00000003.337598455.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.344738567.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	114688

Details

Name:	00000011.00000000.443761927.000000007FFC2000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000011.00000002.458639805.000000007FFB2000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	0000000C.00000000.411129105.0000000000040000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	0000000D.00000003.436215331.0000000000A2D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A2D000
Size:	20480

Details

Name:	00000000.00000002.391974519.0000000007CA6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7CA6000
Size:	40960

Details

Name:	00000011.00000000.439955769.000000007FFC2000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000000.00000003.344539855.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.343156222.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000000.00000003.338224177.0000000005D6D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D6D000
Size:	8192

Details

Name:	0000000D.00000000.428907465.000000007FFC0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	0000001B.00000002.585704848.000000007FFB2000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000013.00000002.488712809.0000004D031FF000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4D031FF000
Size:	4096

Details

Name:	0000000B.00000002.412514940.00000165C64D0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	165C64D0000
Size:	12288

Details

Name:	00000011.00000003.448872537.00000000020ED000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20ED000
Size:	114688

Details

Name:	00000004.00000003.363467184.00000171B7E7C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	171B7E7C000
Size:	40960

Details

Name:	0000000B.00000002.413092912.00007FF5DB694000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5DB694000
Size:	8192

Details

Name:	0000000C.00000002.425097457.000000000047F000.00000004.00000020.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	47F000
Size:	24576

Details

Name:	00000000.00000003.338168892.0000000005D43000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D43000
Size:	4096

Details

Name:	00000011.00000000.444350989.000000007FFC2000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000013.00000002.490059530.00007FF56B8D5000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B8D5000
Size:	4096

Details

Name:	00000000.00000003.338971702.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000D.00000003.435922152.0000000000A3D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A3D000
Size:	4096

Details

Name:	00000000.00000003.347761544.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	135168

Details

Name:	00000000.00000002.391443721.0000000007770000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7770000
Size:	172032

Details

Name:	0000001A.00000002.601139675.00000170C9CE0000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	170C9CE0000
Size:	4096

Details

Name:	00000000.00000003.339422429.0000000005D60000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D60000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000B.00000002.412898477.00007FF5DB5DF000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5DB5DF000
Size:	4096

Details

Name:	00000000.00000003.337917786.0000000005D6E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D6E000
Size:	4096

Details

Name:	00000000.00000002.384646789.000000000145F000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	145F000
Size:	4096

Details

Name:	0000001A.00000002.602246465.00007FF5154DD000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5154DD000
Size:	12288

Details

Name:	0000000E.00000002.442049065.0000000BEBD7C000.00000004.00000010.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	BEBD7C000
Size:	16384

Details

Name:	00000000.00000003.337470504.0000000005D6D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D6D000
Size:	4096

Details

Name:	0000000D.00000000.425463975.000000007FFD0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000011.00000000.443600218.00000000001B0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	0000000C.00000002.424802063.0000000000030000.00000004.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	30000
Size:	4096

Details

Name:	00000000.00000003.368879884.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	4096

Details

Name:	00000018.00000002.604136401.00007FF598242000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF598242000
Size:	8192

Details

Name:	00000000.00000003.368971797.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	4096

Details

Name:	00000000.00000003.335956423.0000000005D67000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D67000
Size:	12288

Details

Name:	00000007.00000002.605068211.0000000002C3C000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C3C000
Size:	4096

Details

Name:	00000000.00000003.338598211.0000000005D6F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D6F000
Size:	8192

Details

Name:	00000000.00000003.334501971.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	4096

Details

Name:	00000007.00000002.603646425.00000000010BB000.00000040.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	10BB000
Size:	4096

Details

Name:	00000000.00000003.374443257.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000A.00000002.601187719.0000022D47F13000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22D47F13000
Size:	20480

Details

Name:	00000000.00000003.343188769.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000000.00000002.391728353.0000000007871000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7871000
Size:	143360

Details

Name:	00000000.00000003.374473245.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.370820500.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000D.00000000.425431771.000000007FFC0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000008.00000003.405456086.00000000005E5000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5E5000
Size:	4096

Details

Name:	00000000.00000003.339567433.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000011.00000003.452543993.00000000020FE000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20FE000
Size:	712704

Details

Name:	0000000C.00000003.422995234.00000000005C4000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C4000
Size:	8192

Details

Name:	00000013.00000002.489526051.000001F9B4A00000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4A00000
Size:	8192

Details

Name:	00000007.00000002.602350552.0000000000933000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	933000
Size:	8192

Details

Name:	00000000.00000003.350640748.00000000056E1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	56E1000
Size:	61440

Details

Name:	00000004.00000002.363769840.00000022AF57F000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	22AF57F000
Size:	4096

Details

Name:	00000000.00000003.334299646.00000000011CE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11CE000
Size:	4096

Details

Name:	00000000.00000003.348954457.0000000005D42000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D42000
Size:	4096

Details

Name:	00000000.00000003.348225360.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000008.00000003.403679616.0000000002291000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2291000
Size:	12288

Details

Name:	00000000.00000003.344650176.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000A.00000002.601245078.0000022D48210000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	22D48210000
Size:	12288

Details

Name:	00000000.00000003.373749072.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000000.380143715.000000007F880000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F880000
Size:	4096

Details

Name:	0000000C.00000003.422909378.0000000002234000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2234000
Size:	32768

Details

Name:	00000000.00000002.389443361.0000000005D40000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5D40000
Size:	8192

Details

Name:	0000001A.00000000.565752015.00007FF515527000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF515527000
Size:	16384

Details

Name:	00000018.00000002.601633820.0000015509A74000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15509A74000
Size:	12288

Details

Name:	00000013.00000002.489439326.000001F9B454C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B454C000
Size:	86016

Details

Name:	0000000D.00000003.435724052.0000000000A3E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A3E000
Size:	401408

Details

Name:	00000000.00000003.370153057.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.353305162.0000000007760000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7760000
Size:	65536

Details

Name:	00000000.00000003.338551015.0000000005D4A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D4A000
Size:	4096

Details

Name:	00000000.00000003.337669527.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000A.00000002.602079960.00007FF5988C0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5988C0000
Size:	4096

Details

Name:	00000000.00000002.388467837.00000000053A0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	53A0000
Size:	8192

Details

Name:	00000007.00000003.387766703.0000000005270000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5270000
Size:	8192

Details

Name:	00000013.00000003.477349248.000001F9B4587000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4587000
Size:	36864

Details

Name:	00000007.00000003.388370620.0000000005A60000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A60000
Size:	4096

Details

Name:	00000013.00000002.489174275.000001F9B3D02000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B3D02000
Size:	16384

Details

Name:	00000000.00000003.333835019.00000000011DA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11DA000
Size:	77824

Details

Name:	00000018.00000003.520961648.000001550EF80000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1550EF80000
Size:	4096

Details

Name:	00000000.00000002.388564131.00000000053F0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	53F0000
Size:	65536

Details

Name:	00000007.00000002.605521819.0000000002C72000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C72000
Size:	4096

Details

Name:	00000007.00000000.381789781.0000000000B60000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	B60000
Size:	16384

Details

Name:	00000008.00000003.403993310.00000000022AD000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22AD000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000013.00000003.472583980.000001F9B4587000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4587000
Size:	4096

Details

Name:	00000000.00000003.371779625.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.343648195.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	94208

Details

Name:	00000011.00000003.454415697.00000000020EC000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20EC000
Size:	4096

Details

Name:	0000000D.00000003.436560876.0000000000A34000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A34000
Size:	32768

Details

Name:	00000000.00000003.347187036.0000000005D74000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D74000
Size:	16384

Details

Name:	00000018.00000002.602028639.0000015509AFD000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15509AFD000
Size:	16384

Details

Name:	00000018.00000002.605081091.00007FF59865D000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59865D000
Size:	20480

Details

Name:	00000011.00000000.441812071.00000000001A0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000007.00000002.602850433.0000000000D36000.00000004.00000020.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	D36000
Size:	16384

Details

Name:	00000000.00000003.350295083.0000000005D86000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D86000
Size:	24576

Details

Name:	00000008.00000000.393691718.00000000001A0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	0000000D.00000003.436427229.0000000000A2D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A2D000
Size:	20480

Details

Name:	00000008.00000003.403475154.00000000022A4000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A4000
Size:	32768

Details

Name:	00000018.00000002.603297493.000001550F222000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1550F222000
Size:	49152

Details

Name:	00000000.00000003.372108128.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000002.388962960.0000000005530000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	5530000
Size:	733184

Details

Name:	00000011.00000003.457424591.00000000020FE000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20FE000
Size:	12288

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	0000000C.00000002.425189215.000000000091E000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	91E000
Size:	8192

Details

Name:	0000001A.00000002.600628435.00000001004F9000.00000004.00000010.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	1004F9000
Size:	28672

Details

Name:	00000008.00000002.409603604.0000000002270000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2270000
Size:	4096

Details

Name:	00000004.00000002.365842472.00007FF568043000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF568043000
Size:	8192

Details

Name:	0000000D.00000003.436749633.0000000000A34000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A34000
Size:	32768

Details

Name:	00000000.00000003.368718565.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	4096

Details

Name:	00000013.00000003.467853054.000001F9B454E000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B454E000
Size:	77824

Details

Name:	00000000.00000003.369412655.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000E.00000002.442529397.0000018111A50000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	18111A50000
Size:	4096

Details

Name:	00000000.00000003.369657528.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000011.00000003.456592489.0000000002101000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2101000
Size:	57344

Details

Name:	00000000.00000003.371682375.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000018.00000002.604712814.00007FF598581000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF598581000
Size:	4096

Details

Name:	00000008.00000000.390537057.00000000001B0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000000.00000003.372490936.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000E.00000002.442225492.0000018111330000.00000004.00000020.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	18111330000
Size:	8192

Details

Name:	00000000.00000003.333991579.00000000054E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54E0000
Size:	65536

Details

Name:	0000000C.00000000.413263855.000000007FFC2000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000000.00000003.345148561.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	49152

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.374172009.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.371579483.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.342036363.0000000005D63000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D63000
Size:	69632

Details

Name:	00000018.00000002.601671294.0000015509A78000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15509A78000
Size:	12288

Details

Name:	00000008.00000003.405571878.000000000229E000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229E000
Size:	4096

Details

Name:	00000011.00000000.440320843.000000007FFC2000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	0000000C.00000000.414626178.00000000001B0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000000.00000003.340545604.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000011.00000000.441848760.000000007FFB2000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	0000000B.00000002.412056730.00000012E0A7E000.00000004.00000010.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	12E0A7E000
Size:	8192

Details

Name:	0000000C.00000003.421706645.0000000002234000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2234000
Size:	32768

Details

Name:	00000018.00000000.515788686.00007DF5A24C0000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A24C0000
Size:	4096

Details

Name:	00000000.00000003.370390969.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000004.00000002.365857173.00007FF568046000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF568046000
Size:	16384

Details

Name:	00000000.00000003.370145449.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000018.00000002.604361599.00007FF5983D8000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5983D8000
Size:	4096

Details

Name:	0000001B.00000002.585615610.0000000000A80000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	A80000
Size:	32768

Details

Name:	00000000.00000002.384340245.0000000000E3B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E3B000
Size:	20480

Details

Name:	00000000.00000002.388220379.0000000005330000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5330000
Size:	12288

Details

Name:	0000001B.00000000.583602089.000000007FFC2000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	0000000D.00000003.437963578.0000000000A31000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A31000
Size:	36864

Details

Name:	00000000.00000003.370553321.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.336340599.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000018.00000002.604532660.00007FF5984AA000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5984AA000
Size:	16384

Details

Name:	00000004.00000002.364392946.00007FF567DEA000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF567DEA000
Size:	16384

Details

Name:	00000007.00000000.381810004.000000007F870000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F870000
Size:	4096

Details

Name:	00000014.00000002.477071522.00007FF5B37F3000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B37F3000
Size:	4096

Details

Name:	00000000.00000003.334517474.0000000005D60000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D60000
Size:	4096

Details

Name:	0000000C.00000003.424440668.0000000002220000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2220000
Size:	4096

Details

Name:	00000013.00000002.489476637.000001F9B457B000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B457B000
Size:	12288

Details

Name:	00000013.00000003.467673037.000001F9B456E000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B456E000
Size:	12288

Details

Name:	0000000D.00000000.425357212.0000000000040000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000008.00000002.409739469.00000000022B2000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22B2000
Size:	8192

Details

Name:	00000018.00000002.601000014.00000155098F0000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	155098F0000
Size:	12288

Details

Name:	0000000C.00000003.422310117.0000000002234000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2234000
Size:	32768

Details

Name:	00000018.00000002.600510760.00000034B10FE000.00000004.00000010.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	34B10FE000
Size:	8192

Details

Name:	00000018.00000002.604188721.00007FF598299000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF598299000
Size:	8192

Details

Name:	00000000.00000003.371291213.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000002.389645120.0000000006F52000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F52000
Size:	1818624

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.369161932.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.374486860.00000000010D5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D5000
Size:	4096

Details

Name:	00000000.00000003.372166110.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000011.00000003.455482997.00000000020F4000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20F4000
Size:	32768

Details

Name:	0000000C.00000003.422786505.000000000223D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	223D000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.344223755.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000014.00000002.477264551.00007FF5B389D000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B389D000
Size:	12288

Details

Name:	00000013.00000002.489059414.000001F9B3CC8000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B3CC8000
Size:	36864

Details

Name:	00000000.00000003.344074741.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	102400

Details

Name:	00000000.00000003.347280255.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.333302944.00000000011E6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11E6000
Size:	8192

Details

Name:	00000011.00000003.456567005.00000000005A4000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A4000
Size:	8192

Details

Name:	00000000.00000003.347439270.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000002.384234026.0000000000C14000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C14000
Size:	4096

Details

Name:	00000007.00000002.602680089.0000000000C15000.00000004.00000020.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	C15000
Size:	12288

Details

Name:	00000000.00000003.342672197.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000007.00000003.503204625.0000000000DEA000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DEA000
Size:	45056

Details

Name:	00000013.00000002.489733301.00007FF56B691000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B691000
Size:	8192

Details

Name:	00000013.00000002.490237963.00007FF56B966000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B966000
Size:	16384

Details

Name:	00000000.00000003.371876143.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000003.409690248.0000000005D80000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D80000
Size:	8192

Details

Name:	00000000.00000003.336671986.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000013.00000003.467698527.000001F9B456D000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B456D000
Size:	16384

Details

Name:	00000007.00000002.606961412.000000000505A000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	505A000
Size:	4096

Details

Name:	0000000C.00000003.422130530.000000000223D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	223D000
Size:	4096

Details

Name:	00000007.00000003.408756544.0000000005AB0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AB0000
Size:	16384

Details

Name:	00000000.00000003.336239997.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	61440

Details

Name:	00000013.00000002.490320735.00007FF56B9DD000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B9DD000
Size:	12288

Details

Name:	0000000C.00000000.411985571.00000000001B0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000000.00000003.374065435.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000001B.00000000.581646240.0000000000040000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	0000000B.00000002.413041864.00007FF5DB62D000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5DB62D000
Size:	20480

Details

Name:	0000000C.00000000.412089889.000000007FFD0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	0000000C.00000002.425294445.0000000000BEA000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	BEA000
Size:	4096

Details

Name:	00000000.00000003.348817051.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	131072

Details

Name:	00000007.00000002.602387835.0000000000937000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	937000
Size:	4096

Details

Name:	00000013.00000002.490368267.00007FF56B9FA000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B9FA000
Size:	12288

Details

Name:	00000000.00000003.345575211.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.342647297.0000000005D63000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D63000
Size:	77824

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000001B.00000002.585603905.0000000000A70000.00000004.00000040.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	A70000
Size:	12288

Details

Name:	00000007.00000002.603474300.0000000001083000.00000040.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	1083000
Size:	4096

Details

Name:	00000008.00000000.389159627.000000007FFC0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000007.00000002.607799520.00000000097AE000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	97AE000
Size:	8192

Details

Name:	00000000.00000003.336060898.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000008.00000003.403371133.000000000230F000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	230F000
Size:	4096

Details

Name:	00000000.00000003.333122425.00000000011DC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11DC000
Size:	32768

Details

Name:	00000000.00000002.384874480.0000000001520000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1520000
Size:	20480

Details

Name:	00000007.00000002.605579935.0000000002C7B000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C7B000
Size:	4096

Details

Name:	00000000.00000003.353234848.0000000007620000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7620000
Size:	8192

Details

Name:	00000005.00000002.378287717.000000000075E000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	75E000
Size:	8192

Details

Name:	00000000.00000002.384035633.0000000000AD0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	AD0000
Size:	4096

Details

Name:	00000004.00000002.363707197.00000022AEDAE000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	22AEDAE000
Size:	8192

Details

Name:	0000000C.00000000.414715631.000000007FFB2000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000000.00000003.343328486.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000013.00000003.473020621.000001F9B4592000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4592000
Size:	32768

Details

Name:	0000000E.00000002.443342121.00007FF5A0192000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A0192000
Size:	49152

Details

Name:	00000000.00000003.341988324.0000000005D71000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D71000
Size:	12288

Details

Name:	00000000.00000003.344475498.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.334506227.0000000005D5E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5E000
Size:	4096

Details

Name:	0000000A.00000002.601571903.00007FF598064000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF598064000
Size:	4096

Details

Name:	00000000.00000000.332605193.000000007F670000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F670000
Size:	4096

Details

Name:	0000000C.00000003.424500363.000000000222E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	222E000
Size:	4096

Details

Name:	00000007.00000002.603595851.00000000010AA000.00000040.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	10AA000
Size:	8192

Details

Name:	0000000D.00000002.439852951.00000000009FF000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	9FF000
Size:	4096

Details

Name:	0000000D.00000002.439738943.0000000000808000.00000004.00000020.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	808000
Size:	86016

Details

Name:	00000007.00000003.406006705.0000000005A30000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	5A30000
Size:	65536

Details

Name:	00000008.00000003.406424665.00000000022A1000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A1000
Size:	24576

Details

Name:	00000000.00000003.343353659.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	106496

Details

Name:	00000000.00000003.346947319.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	118784

Details

Name:	0000000E.00000000.430665938.00007DF5AA012000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5AA012000
Size:	4096

Details

Name:	00000000.00000002.393013666.000000007F690000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F690000
Size:	12288

Details

Name:	00000008.00000003.403962298.000000000229C000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229C000
Size:	4096

Details

Name:	00000000.00000003.370505416.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.341488894.0000000005D7B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7B000
Size:	16384

Details

Name:	00000000.00000003.347221497.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	102400

Details

Name:	00000000.00000002.391651147.0000000007860000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7860000
Size:	65536

Details

Name:	00000000.00000003.370400050.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000003.408737478.0000000005AA0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA0000
Size:	28672

Details

Name:	0000000D.00000000.426685835.000000007FFD0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000014.00000003.476305474.00000285CBB07000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	285CBB07000
Size:	61440

Details

Name:	0000001B.00000002.585463160.000000000064E000.00000004.00000010.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	64E000
Size:	8192

Details

Name:	00000000.00000003.370426153.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.335928094.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.371133111.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000001B.00000000.584822159.000000007FFD0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000018.00000002.600847521.00000034B19FF000.00000004.00000010.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	34B19FF000
Size:	4096

Details

Name:	00000000.00000003.374333058.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000013.00000003.469371181.000001F9B4584000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4584000
Size:	8192

Details

Name:	00000000.00000003.371308310.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000018.00000002.603976212.00007DF5A24D0000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A24D0000
Size:	12288

Details

Name:	00000000.00000003.336783504.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000005.00000002.378487454.000000000303E000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	303E000
Size:	12288

Details

Name:	00000000.00000003.370967671.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000013.00000002.489578972.00007DF5757D2000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5757D2000
Size:	4096

Details

Name:	0000001A.00000002.601620763.00007FF514CDC000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF514CDC000
Size:	16384

Details

Name:	00000000.00000000.332617133.000000007F690000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F690000
Size:	12288

Details

Name:	00000005.00000002.378305103.000000000079F000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	79F000
Size:	4096

Details

Name:	00000000.00000003.334747889.0000000005D63000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D63000
Size:	8192

Details

Name:	00000000.00000003.369075306.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000018.00000002.604444546.00007FF598416000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF598416000
Size:	4096

Details

Name:	00000000.00000003.342725610.0000000005D63000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D63000
Size:	73728

Details

Name:	0000000E.00000002.443305643.00007FF5A017D000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A017D000
Size:	20480

Details

Name:	00000007.00000000.379012060.000000007F882000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F882000
Size:	4096

Details

Name:	00000000.00000003.373003800.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000D.00000000.429186444.00000000001B0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000000.00000003.345067382.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	110592

Details

Name:	00000018.00000002.604373782.00007FF5983E5000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5983E5000
Size:	8192

Details

Name:	00000000.00000003.335471218.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000018.00000002.603913478.00007DF5A24B2000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A24B2000
Size:	4096

Details

Name:	00000000.00000003.341657296.0000000005D63000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D63000
Size:	61440

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.342282975.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000000.00000003.350474924.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	12288

Details

Name:	00000000.00000003.348496451.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	131072

Details

Name:	00000018.00000003.528422712.000001550A359000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1550A359000
Size:	4096

Details

Name:	0000000D.00000003.437203720.0000000000614000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	614000
Size:	4096

Details

Name:	00000000.00000003.333138053.00000000011D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11D0000
Size:	8192

Details

Name:	00000013.00000002.489287599.000001F9B4250000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F9B4250000
Size:	4096

Details

Name:	00000000.00000003.337405134.0000000005D6C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D6C000
Size:	4096

Details

Name:	00000013.00000002.489500390.000001F9B4587000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4587000
Size:	8192

Details

Name:	00000007.00000000.378996027.000000007F872000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F872000
Size:	4096

Details

Name:	00000018.00000002.602516046.000001550A300000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1550A300000
Size:	4096

Details

Name:	00000000.00000003.352428282.0000000007D00000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7D00000
Size:	20480

Details

Name:	00000008.00000000.391722100.000000007FFB2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000000.00000003.372947620.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.369700412.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000004.00000003.363508425.00000171B7E5D000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	171B7E5D000
Size:	16384

Details

Name:	00000004.00000002.365422700.00007FF567E65000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF567E65000
Size:	8192

Details

Name:	00000000.00000003.349215980.0000000005D45000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D45000
Size:	4096

Details

Name:	00000000.00000003.338149280.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000013.00000002.489075918.000001F9B3CD5000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B3CD5000
Size:	49152

Details

Name:	00000000.00000003.371369464.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000003.387046504.0000000005116000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5116000
Size:	40960

Details

Name:	00000011.00000000.442190845.00000000001B0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000011.00000000.439941183.000000007FFC0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000000.00000003.344058269.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000018.00000003.516545225.000001550EFC4000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1550EFC4000
Size:	4096

Details

Name:	00000000.00000003.341441114.0000000005D63000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D63000
Size:	57344

Details

Name:	0000001B.00000002.585415447.0000000000419000.00000040.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	419000
Size:	12288

Details

Name:	0000000C.00000003.422204903.000000000229F000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229F000
Size:	4096

Details

Name:	0000001B.00000002.585529101.00000000006E0000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6E0000
Size:	4096

Details

Name:	00000007.00000002.605784501.0000000002C97000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C97000
Size:	4096

Details

Name:	00000000.00000003.371690028.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.348000133.0000000005D42000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D42000
Size:	4096

Details

Name:	00000000.00000003.345324851.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.369351634.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.371699365.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000005.00000002.378427892.0000000002FF1000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2FF1000
Size:	12288

Details

Name:	00000000.00000003.346964825.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.337069357.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000007.00000003.409581456.0000000005D80000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D80000
Size:	65536

Details

Name:	00000005.00000000.376747391.00000000006D0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	6D0000
Size:	4096

Details

Name:	00000000.00000003.343898563.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000C.00000003.423680772.0000000002231000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2231000
Size:	24576

Details

Name:	00000000.00000003.370875777.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000013.00000003.467809228.000001F9B456E000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B456E000
Size:	12288

Details

Name:	0000000C.00000003.422167377.0000000002233000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2233000
Size:	36864

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000018.00000002.603237260.000001550F200000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1550F200000
Size:	73728

Details

Name:	00000011.00000000.444303368.000000007FFB0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000000.00000003.341284538.0000000005D63000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D63000
Size:	57344

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000013.00000003.465722969.000001F9B43C0000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B43C0000
Size:	4096

Details

Name:	00000000.00000003.350317493.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	151552

Details

Name:	0000001A.00000002.600737495.00000170C9940000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	170C9940000
Size:	102400

Details

Name:	00000000.00000003.369863612.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000003.405993105.0000000005A40000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A40000
Size:	65536

Details

Name:	0000000C.00000003.424575255.000000000222E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	222E000
Size:	4096

Details

Name:	00000005.00000000.376326579.000000007EFF0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7EFF0000
Size:	12288

Details

Name:	00000000.00000003.371811774.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000001A.00000002.601274482.00000170C9F30000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	170C9F30000
Size:	4096

Details

Name:	00000000.00000003.338383485.0000000005D53000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D53000
Size:	8192

Details

Name:	00000008.00000002.409427182.00000000008D0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	8D0000
Size:	32768

Details

Name:	00000008.00000000.393659637.0000000000040000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000011.00000003.455103194.00000000020F4000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20F4000
Size:	32768

Details

Name:	0000001A.00000002.601504969.00007DF51F2C0000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51F2C0000
Size:	4096

Details

Name:	00000000.00000003.334474820.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	4096

Details

Name:	00000014.00000002.476534907.000000CD9957F000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	CD9957F000
Size:	4096

Details

Name:	00000018.00000002.604776087.00007FF5985D8000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5985D8000
Size:	4096

Details

Name:	00000005.00000002.378502198.000000000304C000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	304C000
Size:	12288

Details

Name:	0000000B.00000002.412707716.00007FF5DB191000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5DB191000
Size:	20480

Details

Name:	00000000.00000003.372476757.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000001A.00000002.600821007.00000170C9970000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	170C9970000
Size:	4096

Details

Name:	00000013.00000002.490273794.00007FF56B979000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B979000
Size:	4096

Details

Name:	00000000.00000003.344027176.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	102400

Details

Name:	00000008.00000002.409760106.00000000026B0000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	26B0000
Size:	4096

Details

Name:	00000007.00000003.386203590.00000000058E0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	58E0000
Size:	40960

Details

Name:	00000000.00000003.369680776.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.341207271.0000000005D7B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7B000
Size:	8192

Details

Name:	00000000.00000003.373434323.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000008.00000003.405503275.00000000022AE000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22AE000
Size:	12288

Details

Name:	00000000.00000003.371796822.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000018.00000002.600774775.00000034B187F000.00000004.00000010.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	34B187F000
Size:	4096

Details

Name:	0000001A.00000002.602373629.00007FF5154FA000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5154FA000
Size:	12288

Details

Name:	00000008.00000000.392612881.00000000001B0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	0000000D.00000002.440204819.000000007FFD0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000018.00000002.603484294.000001550F243000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1550F243000
Size:	20480

Details

Name:	00000000.00000003.336516411.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.347199843.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000011.00000003.457381990.00000000020E0000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20E0000
Size:	4096

Details

Name:	00000000.00000003.371503457.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000B.00000002.412560934.00000165C6802000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	165C6802000
Size:	4096

Details

Name:	00000008.00000003.404139683.00000000005E4000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5E4000
Size:	8192

Details

Name:	00000000.00000003.339950870.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000007.00000003.408599584.0000000000DD2000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DD2000
Size:	16384

Details

Name:	0000000B.00000002.413152903.00007FF5DB6AB000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5DB6AB000
Size:	16384

Details

Name:	00000000.00000003.373407988.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000C.00000000.412451127.000000007FFD0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000007.00000000.381632218.00000000006F2000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	6F2000
Size:	901120

Details

Name:	00000018.00000002.602494521.000001550A215000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1550A215000
Size:	4096

Details

Name:	00000000.00000003.370380929.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.343937159.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000005.00000000.377143999.000000007EFD2000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7EFD2000
Size:	4096

Details

Name:	00000000.00000002.384277454.0000000000C23000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C23000
Size:	4096

Details

Name:	00000005.00000002.378450660.000000000301D000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	301D000
Size:	12288

Details

Name:	00000004.00000002.364261368.00007DF571DF2000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF571DF2000
Size:	4096

Details

Name:	00000005.00000002.378210051.00000000003F0000.00000004.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	3F0000
Size:	4096

Details

Name:	00000008.00000002.409156052.00000000006F0000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F0000
Size:	4096

Details

Name:	0000001B.00000000.581986839.00000000001A0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000000.00000003.372728823.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000000.379896810.00000000006F0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	6F0000
Size:	4096

Details

Name:	00000008.00000002.409561043.0000000000C50000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	C50000
Size:	4096

Details

Name:	00000008.00000003.401799626.00000000027B1000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	27B1000
Size:	991232

Details

Name:	00000011.00000000.440217585.0000000000040000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000000.00000003.369105367.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.377208198.00000000086E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	86E0000
Size:	45056

Details

Name:	00000011.00000002.458382653.0000000000940000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	940000
Size:	32768

Details

Name:	0000000C.00000000.411937843.0000000000040000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000011.00000002.457963494.00000000001A0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000018.00000002.603031561.000001550EFA0000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1550EFA0000
Size:	4096

Details

Name:	00000008.00000003.399878628.00000000022AE000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22AE000
Size:	712704

Details

Name:	00000007.00000002.604641852.0000000002B7F000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2B7F000
Size:	4096

Details

Name:	00000000.00000003.341122985.0000000005D7B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7B000
Size:	8192

Details

Name:	0000000D.00000002.439404959.000000000017C000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C000
Size:	4096

Details

Name:	00000000.00000002.384224059.0000000000C11000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C11000
Size:	4096

Details

Name:	00000000.00000003.345970245.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000C.00000003.421815046.000000000222D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	222D000
Size:	12288

Details

Name:	0000000E.00000002.442458029.0000018111500000.00000004.00000001.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18111500000
Size:	4096

Details

Name:	00000000.00000003.371273609.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000001B.00000000.581716164.000000007FFC0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	0000000B.00000002.412615831.00007DF5E5482000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E5482000
Size:	4096

Details

Name:	00000018.00000002.604745872.00007FF598595000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF598595000
Size:	12288

Details

Name:	00000000.00000003.373858581.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.372880041.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000E.00000002.443187959.00007FF5A0056000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A0056000
Size:	4096

Details

Name:	00000000.00000003.348474681.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000007.00000003.386936346.0000000005110000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5110000
Size:	65536

Details

Name:	0000000D.00000000.425792425.00000000001B0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000000.00000003.334697496.0000000005D60000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D60000
Size:	4096

Details

Name:	00000000.00000000.332611559.000000007F680000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F680000
Size:	4096

Details

Name:	0000000D.00000003.430393711.0000000000A21000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A21000
Size:	90112

Details

Name:	00000000.00000003.334241899.00000000054D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54D0000
Size:	4096

Details

Name:	00000011.00000003.457491407.00000000020F1000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20F1000
Size:	24576

Details

Name:	00000000.00000003.371140829.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.374565761.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000013.00000002.489126816.000001F9B3CF9000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B3CF9000
Size:	32768

Details

Name:	00000000.00000002.384398297.00000000010BD000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	10BD000
Size:	12288

Details

Name:	00000011.00000000.441830314.0000000000400000.00000040.00000001.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	4096

Details

Name:	00000000.00000003.346055643.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000002.392015102.0000000007CC0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7CC0000
Size:	4096

Details

Name:	00000018.00000002.602681339.000001550AA20000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1550AA20000
Size:	65536

Details

Name:	00000000.00000003.370542493.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.369170304.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.338058959.0000000005D53000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D53000
Size:	4096

Details

Name:	0000000B.00000002.412847263.00007FF5DB4F0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5DB4F0000
Size:	4096

Details

Name:	00000005.00000000.376311117.000000007EFE0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7EFE0000
Size:	4096

Details

Name:	00000000.00000003.344874454.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000C.00000000.414252311.000000007FFB2000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000013.00000003.467684235.000001F9B4572000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4572000
Size:	40960

Details

Name:	00000000.00000003.345196091.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000D.00000000.429269329.000000007FFB2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000000.00000003.352960087.0000000007D00000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7D00000
Size:	65536

Details

Name:	00000018.00000002.602466398.000001550A202000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1550A202000
Size:	4096

Details

Name:	00000008.00000003.402458472.00000000022AD000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22AD000
Size:	4096

Details

Name:	00000000.00000003.344431755.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.346900702.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	118784

Details

Name:	00000007.00000002.603739848.0000000001330000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1330000
Size:	65536

Details

Name:	00000000.00000003.343025729.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	28672

Details

Name:	0000000C.00000003.422243341.000000000223D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	223D000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.392606404.00000000087FE000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	87FE000
Size:	8192

Details

Name:	00000011.00000002.458537795.00000000020FC000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20FC000
Size:	4096

Details

Name:	00000011.00000003.453904381.00000000020E9000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20E9000
Size:	16384

Details

Name:	00000000.00000003.338712274.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000013.00000002.489847637.00007FF56B7BA000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B7BA000
Size:	16384

Details

Name:	0000001B.00000000.581061377.000000007FFD0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000018.00000002.602840382.000001550AA50000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1550AA50000
Size:	65536

Details

Name:	00000018.00000000.515745429.00000155098D0000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	155098D0000
Size:	102400

Details

Name:	00000007.00000002.601018720.00000000006F0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6F0000
Size:	4096

Details

Name:	0000000B.00000002.412209601.00000165C5EF0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	165C5EF0000
Size:	102400

Details

Name:	0000000B.00000002.412176957.00000012E107F000.00000004.00000010.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	12E107F000
Size:	4096

Details

Name:	0000000C.00000000.411171901.00000000001B0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000008.00000000.389150490.000000007FFB2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	0000000D.00000003.436514117.0000000000A2C000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A2C000
Size:	4096

Details

Name:	00000000.00000003.350243051.0000000005D92000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D92000
Size:	4096

Details

Name:	00000008.00000003.403541618.000000000229C000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229C000
Size:	4096

Details

Name:	00000000.00000003.372038649.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000008.00000000.392254697.000000007FFC2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000000.00000003.371199551.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000000.380630388.0000000000A00000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	A00000
Size:	102400

Details

Name:	00000018.00000002.602348742.000001550A190000.00000004.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1550A190000
Size:	4096

Details

Name:	0000000C.00000002.425367759.0000000002240000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2240000
Size:	12288

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking

Details

Name:	00000013.00000003.465784475.000001F9B3CE6000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B3CE6000
Size:	4096

Details

Name:	0000000E.00000002.443140659.00007FF59FEDB000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59FEDB000
Size:	4096

Details

Name:	00000008.00000000.390610489.000000007FFC2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000000.00000003.369841172.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.333081474.00000000011D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11D4000
Size:	20480

Details

Name:	00000000.00000003.372503358.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.370923138.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000011.00000003.454926783.00000000020F4000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20F4000
Size:	32768

Details

Name:	00000008.00000000.391757373.000000007FFC2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000000.00000003.342237003.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000013.00000000.463243163.000001F9B3B50000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F9B3B50000
Size:	102400

Details

Name:	00000007.00000002.605892337.0000000002CA6000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CA6000
Size:	4096

Details

Name:	0000000D.00000002.439806473.000000000081E000.00000004.00000020.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	81E000
Size:	16384

Details

Name:	00000008.00000003.403507688.0000000002291000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2291000
Size:	40960

Details

Name:	00000000.00000003.347708360.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	131072

Details

Name:	00000000.00000003.373941914.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000013.00000002.489744094.00007FF56B695000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B695000
Size:	16384

Details

Name:	00000008.00000000.393207019.000000007FFB2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000000.00000003.335663345.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	45056

Details

Name:	00000000.00000002.391353179.000000000775D000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	775D000
Size:	12288

Details

Name:	0000000C.00000000.411997297.000000007FFB0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000000.00000003.333007081.00000000011E6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11E6000
Size:	4096

Details

Name:	00000008.00000003.404030985.00000000022AD000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22AD000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000007.00000002.605343370.0000000002C5B000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C5B000
Size:	4096

Details

Name:	00000013.00000002.490263499.00007FF56B977000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B977000
Size:	4096

Details

Name:	00000008.00000003.403194266.00000000022AD000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22AD000
Size:	4096

Details

Name:	00000000.00000003.371157722.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000D.00000003.436800523.0000000000A34000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A34000
Size:	32768

Details

Name:	00000007.00000002.604965585.0000000002C0D000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C0D000
Size:	4096

Details

Name:	00000000.00000003.337684196.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000018.00000002.604933153.00007FF59861F000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59861F000
Size:	8192

Details

Name:	0000000E.00000002.442235263.0000018111340000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	18111340000
Size:	16384

Details

Name:	00000000.00000003.335313471.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	40960

Details

Name:	00000000.00000003.372119947.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000008.00000003.405468369.0000000002291000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2291000
Size:	57344

Details

Name:	00000007.00000000.380970317.0000000000400000.00000040.00000001.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	4096

Details

Name:	00000000.00000002.384503513.000000000119D000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	119D000
Size:	4096

Details

Name:	00000000.00000003.334453905.0000000005D5E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5E000
Size:	4096

Details

Name:	00000018.00000000.515857120.00007DF5A24D0000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A24D0000
Size:	12288

Details

Name:	00000000.00000003.349718774.0000000005D7F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7F000
Size:	32768

Details

Name:	00000000.00000002.389270011.00000000056C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	56C0000
Size:	4096

Details

Name:	00000000.00000003.338142827.0000000005D6F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D6F000
Size:	4096

Details

Name:	00000008.00000003.395395418.00000000026B1000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	26B1000
Size:	839680

Details

Name:	00000011.00000000.441480759.0000000000040000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	0000001B.00000003.585091384.0000000000A73000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A73000
Size:	8192

Details

Name:	00000000.00000003.369884722.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000008.00000000.389990496.000000007FFB0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000000.00000003.342466570.0000000005D5C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5C000
Size:	24576

Details

Name:	0000000D.00000003.436470597.0000000000A3D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A3D000
Size:	16384

Details

Name:	00000005.00000002.378409900.0000000002F9D000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2F9D000
Size:	12288

Details

Name:	00000000.00000003.348022864.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	135168

Details

Name:	00000004.00000002.364339352.00007FF567B01000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF567B01000
Size:	20480

Details

Name:	00000000.00000003.338529661.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000011.00000003.456654465.00000000020FE000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20FE000
Size:	12288

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	0000000C.00000003.422542197.000000000223D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	223D000
Size:	16384

Details

Name:	00000007.00000000.381817824.000000007F872000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F872000
Size:	4096

Details

Name:	00000011.00000003.455285882.00000000020ED000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20ED000
Size:	20480

Details

Name:	0000001A.00000002.602048677.00007FF515466000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF515466000
Size:	16384

Details

Name:	0000000D.00000002.439979590.0000000000A9F000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A9F000
Size:	4096

Details

Name:	00000007.00000002.607160936.0000000005124000.00000004.00000040.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5124000
Size:	8192

Details

Name:	00000000.00000003.351903090.0000000007CD0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7CD0000
Size:	28672

Details

Name:	00000000.00000002.384605699.0000000001209000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1209000
Size:	8192

Details

Name:	00000013.00000002.488874090.000001F9B3C29000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B3C29000
Size:	73728

Details

Name:	00000000.00000003.353138276.0000000007620000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7620000
Size:	16384

Details

Name:	0000000D.00000000.427042207.000000007FFB0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000000.00000003.333189834.00000000011DC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11DC000
Size:	20480

Details

Name:	0000000B.00000002.413002028.00007FF5DB60A000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5DB60A000
Size:	24576

Details

Name:	0000000D.00000000.426530210.0000000000040000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000013.00000003.466621347.000001F9B454D000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B454D000
Size:	81920

Details

Name:	0000001A.00000002.601108805.00000170C9BB0000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	170C9BB0000
Size:	12288

Details

Name:	0000000D.00000003.436907690.0000000000A3D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A3D000
Size:	16384

Details

Name:	00000008.00000002.409033138.00000000005E0000.00000004.00000020.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	5E0000
Size:	16384

Details

Name:	00000013.00000003.472594634.000001F9B4587000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4587000
Size:	4096

Details

Name:	00000007.00000002.605382781.0000000002C5F000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C5F000
Size:	4096

Details

Name:	0000000A.00000002.601882592.00007FF598865000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF598865000
Size:	4096

Details

Name:	0000000A.00000002.600574291.00000072146FE000.00000004.00000010.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	72146FE000
Size:	8192

Details

Name:	00000000.00000003.374100568.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.374135441.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000011.00000003.455532640.00000000020F4000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20F4000
Size:	32768

Details

Name:	00000000.00000003.341793103.0000000005D63000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D63000
Size:	61440

Details

Name:	00000013.00000000.463291567.00007DF5757C2000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5757C2000
Size:	4096

Details

Name:	00000000.00000003.336597214.0000000005D6A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D6A000
Size:	12288

Details

Name:	0000000D.00000003.436060393.0000000000A3D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A3D000
Size:	4096

Details

Name:	00000018.00000002.603943788.00007DF5A24C0000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A24C0000
Size:	4096

Details

Name:	00000004.00000002.363834917.00000171B7C90000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	171B7C90000
Size:	8192

Details

Name:	00000014.00000002.477217319.00007FF5B3839000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B3839000
Size:	4096

Details

Name:	00000000.00000003.335949836.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.370186905.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.335878445.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000011.00000003.453931218.00000000020F0000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20F0000
Size:	49152

Details

Name:	0000000D.00000003.435816281.0000000000A3D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A3D000
Size:	4096

Details

Name:	0000000C.00000000.412011825.000000007FFB2000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000008.00000002.406845964.00000000001B0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000008.00000003.403042916.0000000002294000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2294000
Size:	16384

Details

Name:	00000008.00000003.403739761.00000000022A4000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A4000
Size:	32768

Details

Name:	00000007.00000002.606814905.0000000005040000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5040000
Size:	28672

Details

Name:	00000000.00000003.371025809.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000C.00000000.411614211.000000007FFB0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000011.00000003.455010692.00000000020E4000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20E4000
Size:	28672

Details

Name:	00000000.00000003.371009856.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000018.00000002.605140663.00007FF598669000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF598669000
Size:	16384

Details

Name:	00000007.00000002.603297907.0000000000DEA000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	DEA000
Size:	45056

Details

Name:	0000000D.00000000.427969334.00000000001B0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000000.00000003.371125538.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.371333608.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000E.00000002.442670428.00007DF5AA000000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5AA000000
Size:	4096

Details

Name:	00000013.00000002.489909778.00007FF56B7CF000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B7CF000
Size:	12288

Details

Name:	0000000D.00000003.436880622.0000000000A34000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A34000
Size:	32768

Details

Name:	00000000.00000003.334780973.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	28672

Details

Name:	00000005.00000002.378234189.0000000000620000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	620000
Size:	102400

Details

Name:	00000007.00000003.503299768.0000000000DEA000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DEA000
Size:	45056

Details

Name:	0000000D.00000000.428513168.000000007FFC0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000013.00000003.471947703.000001F9B4585000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4585000
Size:	147456

Details

Name:	00000018.00000002.604557826.00007FF5984BA000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5984BA000
Size:	4096

Details

Name:	00000000.00000002.384488639.0000000001192000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1192000
Size:	24576

Details

Name:	00000013.00000002.488581183.0000004D0287E000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4D0287E000
Size:	8192

Details

Name:	0000000D.00000003.438830919.0000000000A3E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A3E000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000018.00000002.602251084.0000015509F90000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	15509F90000
Size:	4096

Details

Name:	00000008.00000003.404319479.00000000005E4000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5E4000
Size:	8192

Details

Name:	00000014.00000002.476619789.00000285CBAD0000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	285CBAD0000
Size:	4096

Details

Name:	00000013.00000003.471734378.000001F9B45A8000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B45A8000
Size:	90112

Details

Name:	0000001B.00000000.583960872.000000007FFD0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000000.00000003.373653055.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.341062879.0000000005D63000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D63000
Size:	57344

Details

Name:	00000000.00000003.369870429.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000004.00000002.365818473.00007FF56802A000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56802A000
Size:	12288

Details

Name:	00000018.00000002.600886096.00000034B1C7E000.00000004.00000010.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	34B1C7E000
Size:	8192

Details

Name:	00000000.00000003.383787334.00000000056F0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	56F0000
Size:	65536

Details

Name:	00000000.00000003.344606011.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	114688

Details

Name:	00000000.00000003.333307396.00000000011DE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11DE000
Size:	32768

Details

Name:	00000018.00000002.603213146.000001550F0B0000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1550F0B0000
Size:	4096

Details

Name:	00000007.00000000.382127581.0000000000400000.00000040.00000001.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	4096

Details

Name:	00000000.00000002.388178880.0000000004EEC000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4EEC000
Size:	16384

Details

Name:	00000000.00000003.337141897.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000C.00000003.422230121.0000000002234000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2234000
Size:	32768

Details

Name:	00000011.00000000.445561595.00000000001A0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	0000000B.00000002.412315151.00000165C6029000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	165C6029000
Size:	73728

Details

Name:	00000008.00000003.404017959.00000000022A4000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A4000
Size:	32768

Details

Name:	0000000C.00000000.411558834.0000000000040000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000011.00000002.458527557.00000000020F8000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20F8000
Size:	8192

Details

Name:	00000007.00000003.386250721.0000000005290000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5290000
Size:	65536

Details

Name:	00000007.00000000.380099269.0000000000B70000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	B70000
Size:	4096

Details

Name:	00000007.00000003.409669245.0000000000DD3000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DD3000
Size:	4096

Details

Name:	0000000E.00000002.443322060.00007FF5A0186000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A0186000
Size:	12288

Details

Name:	00000007.00000003.384866579.0000000002940000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2940000
Size:	65536

Details

Name:	00000011.00000000.443297630.000000007FFC2000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000000.00000003.371342722.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.371852232.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.346438820.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000D.00000000.427547031.000000007FFB0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000007.00000002.606674485.0000000004B5E000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4B5E000
Size:	8192

Details

Name:	00000007.00000003.387824410.0000000005280000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5280000
Size:	53248

Details

Name:	00000013.00000002.489022617.000001F9B3CB3000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B3CB3000
Size:	40960

Details

Name:	00000000.00000003.349977953.0000000005D92000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D92000
Size:	4096

Details

Name:	00000000.00000003.348605329.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000C.00000002.425177544.00000000008DF000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8DF000
Size:	4096

Details

Name:	00000000.00000003.338254881.0000000005D43000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D43000
Size:	4096

Details

Name:	0000001A.00000002.601965853.00007FF515434000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF515434000
Size:	20480

Details

Name:	00000007.00000002.602534688.0000000000A5B000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A5B000
Size:	20480

Details

Name:	00000007.00000000.381097711.00000000006F2000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	6F2000
Size:	901120

Details

Name:	00000000.00000003.344128746.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	102400

Details

Name:	00000000.00000003.338749105.000000000152C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	152C000
Size:	12288

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.343909645.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000007.00000000.378495159.0000000000A00000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	A00000
Size:	102400

Details

Name:	00000011.00000003.454732101.00000000020FD000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20FD000
Size:	4096

Details

Name:	00000000.00000003.334724699.0000000005D45000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D45000
Size:	4096

Details

Name:	00000000.00000003.344578834.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000013.00000002.488835053.000001F9B3C00000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B3C00000
Size:	73728

Details

Name:	00000007.00000002.607000923.0000000005060000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5060000
Size:	16384

Details

Name:	0000001A.00000003.566118739.00000170C9AAD000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	170C9AAD000
Size:	8192

Details

Name:	00000000.00000003.371716857.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000B.00000002.412948830.00007FF5DB5F3000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5DB5F3000
Size:	24576

Details

Name:	0000000D.00000003.438796987.0000000000A31000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A31000
Size:	24576

Details

Name:	00000000.00000003.334021819.00000000054C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54C0000
Size:	65536

Details

Name:	0000001B.00000000.582816103.000000007FFB0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000007.00000000.378298491.00000000006F2000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	6F2000
Size:	901120

Details

Name:	00000008.00000003.404185515.00000000005E4000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5E4000
Size:	8192

Details

Name:	00000013.00000003.470262622.000001F9B4570000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4570000
Size:	24576

Details

Name:	00000007.00000003.387865052.0000000005280000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5280000
Size:	12288

Details

Name:	0000001B.00000000.581725700.000000007FFC2000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000008.00000000.389530980.000000007FFB2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000000.00000003.371511196.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.345229357.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	118784

Details

Name:	00000000.00000003.345487408.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000B.00000002.412811376.00007FF5DB4A7000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5DB4A7000
Size:	8192

Details

Name:	00000000.00000003.342739060.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	0000000D.00000003.435179608.00000000027B1000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	27B1000
Size:	1286144

Details

Name:	00000007.00000000.383152115.000000007F872000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F872000
Size:	4096

Details

Name:	00000018.00000002.602921579.000001550ADC1000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1550ADC1000
Size:	4096

Details

Name:	00000004.00000002.363715635.00000022AF07E000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	22AF07E000
Size:	8192

Details

Name:	00000008.00000000.389482990.00000000001A0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000007.00000002.607657107.0000000005B70000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5B70000
Size:	176128

Details

Name:	0000000D.00000000.429289333.000000007FFC2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000000.00000003.374357325.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.334738848.0000000005D60000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D60000
Size:	8192

Details

Name:	0000000D.00000000.428490916.000000007FFB0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	0000000C.00000002.425046666.0000000000460000.00000004.00000020.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	460000
Size:	24576

Details

Name:	00000000.00000003.334582972.0000000005D63000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D63000
Size:	8192

Details

Name:	00000011.00000000.444088881.00000000001B0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000013.00000003.465713367.000001F9B43C0000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B43C0000
Size:	4096

Details

Name:	00000000.00000003.346029558.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	49152

Details

Name:	00000011.00000002.457997429.0000000000266000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	266000
Size:	8192

Details

Name:	00000008.00000000.393787786.000000007FFC0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000013.00000003.467820377.000001F9B4572000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4572000
Size:	40960

Details

Name:	00000013.00000003.468823443.000001F9B458E000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B458E000
Size:	94208

Details

Name:	00000007.00000003.385030272.0000000002940000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2940000
Size:	24576

Details

Name:	00000007.00000002.607033077.0000000005068000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5068000
Size:	4096

Details

Name:	00000000.00000003.373037234.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000011.00000000.440746876.00000000001B0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000000.00000003.333161704.00000000011E7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11E7000
Size:	4096

Details

Name:	00000000.00000003.337123761.0000000005D6C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D6C000
Size:	4096

Details

Name:	0000000C.00000003.421506895.000000000223E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	223E000
Size:	401408

Details

Name:	00000000.00000003.333632407.00000000053D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	53D0000
Size:	20480

Details

Name:	00000007.00000002.607556490.0000000005A7D000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5A7D000
Size:	12288

Details

Name:	00000000.00000003.368668831.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	4096

Details

Name:	0000000D.00000000.427423860.0000000000040000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000000.00000003.335987241.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	49152

Details

Name:	00000007.00000002.606164977.0000000002CDD000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CDD000
Size:	4096

Details

Name:	00000007.00000003.409371805.0000000005D90000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D90000
Size:	61440

Details

Name:	00000000.00000003.333194100.00000000011E7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11E7000
Size:	4096

Details

Name:	00000000.00000003.338943173.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	81920

Details

Name:	0000000E.00000002.443497579.00007FF5A0267000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A0267000
Size:	16384

Details

Name:	00000000.00000003.347688817.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.348195596.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.373454727.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000000.378981215.0000000000B80000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	B80000
Size:	4096

Details

Name:	00000004.00000002.364187840.00000171B8380000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	171B8380000
Size:	4096

Details

Name:	0000001B.00000000.583109041.00000000001A0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	0000001A.00000002.601156874.00000170C9D00000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	170C9D00000
Size:	65536

Details

Name:	0000000E.00000002.443196967.00007FF5A0070000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A0070000
Size:	4096

Details

Name:	00000000.00000003.343959639.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	98304

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000003.430329124.00000000007D0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7D0000
Size:	126976

Details

Name:	00000007.00000003.388018344.00000000059D0000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	59D0000
Size:	28672

Details

Name:	00000000.00000003.374502432.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000018.00000002.605294006.00007FF5986D4000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5986D4000
Size:	8192

Details

Name:	00000000.00000003.374269730.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000003.386093354.0000000005110000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5110000
Size:	16384

Details

Name:	00000011.00000000.440275680.00000000001C0000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	1C0000
Size:	4096

Details

Name:	0000001B.00000002.585582433.000000000091F000.00000004.00000010.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	91F000
Size:	4096

Details

Name:	0000000D.00000003.430166414.00000000022C1000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22C1000
Size:	847872

Details

Name:	00000000.00000003.348536595.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000013.00000003.469467486.000001F9B4588000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4588000
Size:	32768

Details

Name:	0000001A.00000003.566160422.00000170C9AAD000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	170C9AAD000
Size:	8192

Details

Name:	00000000.00000003.369359563.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000011.00000000.442200048.0000000000400000.00000040.00000001.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	282624

Details

Name:	0000000D.00000003.436993869.0000000000614000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	614000
Size:	4096

Details

Name:	00000007.00000000.380169247.000000007F890000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F890000
Size:	12288

Details

Name:	00000005.00000002.378252994.000000000067D000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	67D000
Size:	12288

Details

Name:	00000013.00000002.490305066.00007FF56B9D7000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B9D7000
Size:	20480

Details

Name:	00000000.00000003.352501792.0000000007F90000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7F90000
Size:	24576

Details

Name:	00000000.00000003.334114454.00000000011D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11D0000
Size:	20480

Details

Name:	0000000D.00000002.440010034.0000000000B1A000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	B1A000
Size:	4096

Details

Name:	00000000.00000003.336180261.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	61440

Details

Name:	00000008.00000003.406052023.000000000229E000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229E000
Size:	4096

Details

Name:	00000000.00000003.342951556.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	0000000B.00000002.413052297.00007FF5DB637000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5DB637000
Size:	4096

Details

Name:	00000011.00000002.458279883.0000000000790000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	790000
Size:	16384

Details

Name:	00000000.00000003.333339350.00000000011E7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11E7000
Size:	4096

Details

Name:	0000000B.00000002.412402163.00000165C6070000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	165C6070000
Size:	24576

Details

Name:	00000013.00000003.469383950.000001F9B4588000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4588000
Size:	32768

Details

Name:	00000000.00000003.337912740.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000007.00000003.383554141.0000000002940000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2940000
Size:	8192

Details

Name:	00000008.00000003.402423980.00000000022AD000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22AD000
Size:	4096

Details

Name:	00000008.00000000.393381954.000000007FFD0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000018.00000002.604153384.00007FF598272000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF598272000
Size:	4096

Details

Name:	00000000.00000003.345520883.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	131072

Details

Name:	00000000.00000003.344906097.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	110592

Details

Name:	00000008.00000003.402403706.000000000229D000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229D000
Size:	12288

Details

Name:	00000000.00000003.351030770.0000000005710000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5710000
Size:	65536

Details

Name:	00000000.00000003.340606466.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	94208

Details

Name:	00000008.00000000.391000892.00000000001B0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	0000001B.00000000.581411912.000000007FFC0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	0000001B.00000002.585714763.000000007FFC0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000000.00000003.372347830.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.347697378.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000A.00000002.601494165.00007DF5A2770000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A2770000
Size:	12288

Details

Name:	00000000.00000003.369187741.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000018.00000002.603901570.00007DF5A24B0000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A24B0000
Size:	4096

Details

Name:	00000005.00000002.378584686.000000007EFE2000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7EFE2000
Size:	4096

Details

Name:	00000000.00000003.348404716.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000013.00000003.474840399.000001F9B458F000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B458F000
Size:	425984

Details

Name:	0000000C.00000003.424594924.0000000002231000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2231000
Size:	24576

Details

Name:	0000000C.00000003.421651524.0000000002230000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2230000
Size:	49152

Details

Name:	00000000.00000003.341855997.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	0000000E.00000002.442262523.0000018111402000.00000004.00000001.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18111402000
Size:	65536

Details

Name:	00000011.00000003.454856924.00000000020F4000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20F4000
Size:	32768

Details

Name:	00000007.00000003.385995603.0000000005110000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5110000
Size:	16384

Details

Name:	00000004.00000002.365646694.00007FF567FA7000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF567FA7000
Size:	4096

Details

Name:	00000000.00000003.370372449.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.343777736.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.347423203.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000002.384380461.0000000000F50000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	F50000
Size:	4096

Details

Name:	00000007.00000000.379276804.00000000006F0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	6F0000
Size:	4096

Details

Name:	00000013.00000002.489769006.00007FF56B6DA000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B6DA000
Size:	8192

Details

Name:	00000018.00000002.604919105.00007FF598611000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF598611000
Size:	8192

Details

Name:	00000000.00000002.384671370.0000000001464000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1464000
Size:	4096

Details

Name:	00000018.00000003.521006877.000001550F0E0000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1550F0E0000
Size:	4096

Details

Name:	00000000.00000003.336621439.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	61440

Details

Name:	00000007.00000002.606691998.0000000004B60000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4B60000
Size:	4096

Details

Name:	00000005.00000002.378401141.0000000002F9A000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2F9A000
Size:	8192

Details

Name:	00000000.00000002.389341254.0000000005710000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	5710000
Size:	24576

Details

Name:	00000005.00000000.377107425.0000000003078000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	3078000
Size:	16384

Details

Name:	00000008.00000000.391519684.0000000000040000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000000.00000003.373114302.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.372767833.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000004.00000002.365437497.00007FF567E68000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF567E68000
Size:	4096

Details

Name:	0000000C.00000002.425315418.0000000002200000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2200000
Size:	4096

Details

Name:	00000000.00000003.369648532.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.370786112.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.341809645.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000011.00000003.457456183.0000000002105000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2105000
Size:	4096

Details

Name:	0000000C.00000003.422879890.000000000223D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	223D000
Size:	16384

Details

Name:	00000005.00000002.378477910.0000000003033000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3033000
Size:	16384

Details

Name:	00000000.00000003.333791993.0000000005400000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5400000
Size:	65536

Details

Name:	00000007.00000003.409060016.0000000005AB9000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AB9000
Size:	20480

Details

Name:	00000018.00000002.601767368.0000015509A8E000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15509A8E000
Size:	8192

Details

Name:	00000007.00000003.405977770.0000000005A50000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A50000
Size:	65536

Details

Name:	0000000B.00000000.396930304.00007DF5E5490000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E5490000
Size:	4096

Details

Name:	00000000.00000003.347780957.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000007.00000002.604281384.00000000029BB000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	29BB000
Size:	20480

Details

Name:	0000000D.00000003.437995425.0000000000A3E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A3E000
Size:	12288

Details

Name:	00000000.00000002.384310165.0000000000C2F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C2F000
Size:	4096

Details

Name:	00000011.00000003.454956615.00000000020E1000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20E1000
Size:	40960

Details

Name:	00000007.00000002.605758794.0000000002C92000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C92000
Size:	4096

Details

Name:	0000001A.00000002.600932506.00000170C9A82000.00000004.00000020.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	170C9A82000
Size:	315392

Details

Name:	00000000.00000003.370951187.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.348159035.0000000005D42000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D42000
Size:	4096

Details

Name:	0000000E.00000002.443475672.00007FF5A0256000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A0256000
Size:	16384

Details

Name:	0000000C.00000000.412792946.000000007FFB0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000000.00000003.336858245.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000C.00000002.425265594.0000000000BB0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	BB0000
Size:	4096

Details

Name:	00000000.00000003.371949290.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000004.00000002.363787856.00000171B7C40000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	171B7C40000
Size:	102400

Details

Name:	00000000.00000003.336612219.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000D.00000002.439874164.0000000000A00000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A00000
Size:	4096

Details

Name:	00000000.00000003.342578160.0000000005D63000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D63000
Size:	73728

Details

Name:	00000007.00000002.607379764.00000000058F0000.00000040.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	58F0000
Size:	65536

Details

Name:	00000000.00000003.336564563.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	73728

Details

Name:	00000008.00000002.406780577.0000000000040000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	0000001A.00000002.601078665.00000170C9B80000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	170C9B80000
Size:	4096

Details

Name:	00000018.00000002.603839675.000001550F2EF000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1550F2EF000
Size:	28672

Details

Name:	00000008.00000003.404109743.00000000005E4000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5E4000
Size:	8192

Details

Name:	00000000.00000003.337778412.0000000005D4A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D4A000
Size:	4096

Details

Name:	00000008.00000000.390505567.00000000001A0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000013.00000003.467885092.000001F9B4550000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4550000
Size:	69632

Details

Name:	00000000.00000003.333862564.0000000005400000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5400000
Size:	65536

Details

Name:	00000000.00000003.345341198.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	131072

Details

Name:	00000008.00000003.403266621.00000000022AD000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22AD000
Size:	4096

Details

Name:	0000000C.00000000.412403203.000000007FFB0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000000.00000003.333374751.00000000053B0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	53B0000
Size:	36864

Details

Name:	00000007.00000003.408708496.0000000000DC6000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DC6000
Size:	36864

Details

Name:	00000000.00000003.341402445.0000000005D7B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7B000
Size:	8192

Details

Name:	00000007.00000003.406477956.0000000000DC0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DC0000
Size:	24576

Details

Name:	00000000.00000003.333928088.0000000005400000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5400000
Size:	53248

Details

Name:	00000008.00000000.389511914.00000000001C0000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	1C0000
Size:	4096

Details

Name:	00000013.00000002.488745485.000001F9B3B50000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F9B3B50000
Size:	102400

Details

Name:	00000013.00000003.467493222.000001F9B4590000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4590000
Size:	110592

Details

Name:	00000005.00000000.376769709.000000007EFD0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7EFD0000
Size:	4096

Details

Name:	0000000D.00000000.428051457.000000007FFC0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	0000001A.00000002.600899465.00000170C9A71000.00000004.00000020.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	170C9A71000
Size:	65536

Details

Name:	0000000D.00000000.429660695.000000007FFD0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000004.00000002.363973613.00000171B7E54000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	171B7E54000
Size:	36864

Details

Name:	00000000.00000003.339679532.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	90112

Details

Name:	00000000.00000003.346716058.0000000005D75000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D75000
Size:	12288

Details

Name:	00000000.00000003.334804967.0000000005D42000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D42000
Size:	8192

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000000.352258423.00007DF571E02000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF571E02000
Size:	4096

Details

Name:	00000011.00000003.446877390.00000000005A4000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A4000
Size:	8192

Details

Name:	00000007.00000002.605141528.0000000002C45000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C45000
Size:	4096

Details

Name:	00000007.00000003.406801772.0000000005A90000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A90000
Size:	65536

Details

Name:	00000000.00000003.368848698.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	4096

Details

Name:	00000011.00000000.445739592.0000000000454000.00000040.00000001.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	454000
Size:	28672

Details

Name:	00000013.00000002.490075809.00007FF56B8D7000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B8D7000
Size:	24576

Details

Name:	00000000.00000002.384511473.000000000119F000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	119F000
Size:	425984

Details

Name:	00000013.00000002.489091762.000001F9B3CE2000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B3CE2000
Size:	28672

Details

Name:	00000013.00000002.490110205.00007FF56B904000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B904000
Size:	4096

Details

Name:	00000013.00000002.490194356.00007FF56B946000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B946000
Size:	12288

Details

Name:	00000000.00000003.343118651.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	106496

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.372812377.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.338136513.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.342409163.0000000005D63000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D63000
Size:	73728

Details

Name:	00000000.00000003.339347139.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000C.00000000.413121214.0000000000040000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000013.00000002.488791408.000001F9B3BA0000.00000004.00000020.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1F9B3BA0000
Size:	12288

Details

Name:	00000000.00000003.368865969.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	4096

Details

Name:	00000000.00000003.340178685.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	98304

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.372423279.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.369856778.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000003.385821291.0000000005090000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5090000
Size:	4096

Details

Name:	00000000.00000003.372367908.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.337420145.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.338488811.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	90112

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.370263531.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.371653867.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000A.00000002.601400902.00007DF5A2752000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A2752000
Size:	4096

Details

Name:	00000013.00000002.490151037.00007FF56B921000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B921000
Size:	8192

Details

Name:	00000000.00000003.337078116.0000000005D6C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D6C000
Size:	4096

Details

Name:	00000011.00000003.452100781.0000000002131000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2131000
Size:	380928

Details

Name:	00000008.00000003.402727789.0000000002291000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2291000
Size:	8192

Details

Name:	00000011.00000000.443751980.000000007FFC0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000011.00000003.454011749.00000000020FD000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20FD000
Size:	4096

Details

Name:	00000000.00000003.340863566.0000000005D42000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D42000
Size:	8192

Details

Name:	0000001B.00000000.581432034.000000007FFD0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	0000000D.00000003.436115434.0000000000A24000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A24000
Size:	16384

Details

Name:	0000000D.00000003.439168412.0000000000B19000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	B19000
Size:	8192

Details

Name:	00000000.00000003.337869904.0000000005D4A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D4A000
Size:	4096

Details

Name:	0000000D.00000003.436868745.0000000000A2C000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A2C000
Size:	4096

Details

Name:	00000000.00000003.341695079.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	0000000A.00000002.600538939.00000072145FB000.00000004.00000010.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	72145FB000
Size:	20480

Details

Name:	0000000D.00000000.428923614.000000007FFD0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000000.00000003.340296569.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.335150724.0000000005D44000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D44000
Size:	8192

Details

Name:	00000005.00000000.376757788.0000000003078000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	3078000
Size:	16384

Details

Name:	00000000.00000003.341377033.0000000005D7B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7B000
Size:	8192

Details

Name:	00000008.00000003.403115120.00000000022A4000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A4000
Size:	32768

Details

Name:	0000000E.00000002.443435131.00007FF5A0227000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A0227000
Size:	12288

Details

Name:	0000000D.00000003.436229097.0000000000A34000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A34000
Size:	32768

Details

Name:	00000000.00000003.368697830.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	4096

Details

Name:	00000011.00000000.444339685.000000007FFC0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000000.00000002.391842474.000000000799E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	799E000
Size:	8192

Details

Name:	00000007.00000002.605203032.0000000002C4C000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C4C000
Size:	4096

Details

Name:	00000000.00000003.368795611.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	4096

Details

Name:	00000000.00000003.349778055.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	147456

Details

Name:	0000000B.00000002.412887643.00007FF5DB565000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5DB565000
Size:	12288

Details

Name:	00000000.00000003.334497164.0000000005D43000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D43000
Size:	4096

Details

Name:	00000000.00000003.369722032.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000C.00000002.425463187.000000007FFB2000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000011.00000000.441162770.000000007FFC0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000004.00000002.365784905.00007FF568017000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF568017000
Size:	12288

Details

Name:	00000008.00000003.403840438.000000000229D000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229D000
Size:	20480

Details

Name:	00000007.00000000.380478308.00000000006F2000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	6F2000
Size:	901120

Details

Name:	00000000.00000003.374234099.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000002.605906712.0000000002CA8000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CA8000
Size:	4096

Details

Name:	0000000D.00000003.438030375.0000000000A37000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A37000
Size:	12288

Details

Name:	0000000C.00000003.422849145.000000000222C000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	222C000
Size:	4096

Details

Name:	00000000.00000003.351884574.0000000007CD0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7CD0000
Size:	16384

Details

Name:	00000011.00000003.452858778.00000000026B1000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	26B1000
Size:	1286144

Details

Name:	00000000.00000003.337838965.0000000005D6E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D6E000
Size:	4096

Details

Name:	00000007.00000003.387781560.0000000005270000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5270000
Size:	8192

Details

Name:	00000007.00000000.380688067.000000007F882000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F882000
Size:	4096

Details

Name:	00000000.00000003.348999331.0000000005D42000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D42000
Size:	4096

Details

Name:	00000018.00000003.516408438.000001550EF80000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1550EF80000
Size:	28672

Details

Name:	00000000.00000003.346631162.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.343172874.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	106496

Details

Name:	0000000D.00000000.428564239.000000007FFD0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	0000000E.00000002.442071306.0000000BEBEFF000.00000004.00000010.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	BEBEFF000
Size:	4096

Details

Name:	0000000C.00000002.425208996.0000000000A20000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	A20000
Size:	61440

Details

Name:	0000000B.00000002.412744090.00007FF5DB351000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5DB351000
Size:	8192

Details

Name:	0000000C.00000000.411249266.000000007FFD0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000004.00000002.365890850.00007FF568057000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF568057000
Size:	16384

Details

Name:	00000000.00000003.372633205.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000005.00000000.376215558.0000000000620000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	620000
Size:	102400

Details

Name:	00000000.00000003.352972589.0000000007CF0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7CF0000
Size:	65536

Details

Name:	00000011.00000000.441084550.0000000000040000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000000.00000003.333718689.00000000053F0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	53F0000
Size:	4096

Details

Name:	00000005.00000002.378217884.000000000056D000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	56D000
Size:	8192

Details

Name:	00000008.00000003.403164879.00000000022A4000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A4000
Size:	32768

Details

Name:	00000011.00000002.458495838.00000000020C0000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20C0000
Size:	4096

Details

Name:	00000018.00000002.604404575.00007FF598402000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF598402000
Size:	20480

Details

Name:	00000000.00000003.348963949.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	147456

Details

Name:	00000018.00000002.605037748.00007FF598642000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF598642000
Size:	49152

Details

Name:	00000011.00000002.458200668.000000000059E000.00000004.00000010.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	59E000
Size:	8192

Details

Name:	00000000.00000003.342922801.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	28672

Details

Name:	00000000.00000003.368963370.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	4096

Details

Name:	00000000.00000003.339391037.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000E.00000002.442027632.0000000BEB9CE000.00000004.00000010.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	BEB9CE000
Size:	8192

Details

Name:	00000000.00000003.353039106.0000000007620000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7620000
Size:	16384

Details

Name:	0000000D.00000000.426125069.0000000000040000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000013.00000003.471792852.000001F9B45B2000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B45B2000
Size:	73728

Details

Name:	00000000.00000003.336381038.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	69632

Details

Name:	00000000.00000003.374611762.0000000007761000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7761000
Size:	4096

Details

Name:	00000007.00000000.378559962.000000007F882000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F882000
Size:	4096

Details

Name:	00000007.00000003.409634812.0000000000DD4000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DD4000
Size:	40960

Details

Name:	00000000.00000003.370597109.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.364197830.0000000007861000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7861000
Size:	262144

Details

Name:	00000007.00000000.380657470.0000000000B70000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	B70000
Size:	4096

Details

Name:	00000000.00000003.350781460.0000000005700000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5700000
Size:	36864

Details

Name:	0000000C.00000000.412804990.000000007FFB2000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000000.00000003.333075529.00000000011DC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11DC000
Size:	4096

Details

Name:	0000000C.00000003.420203993.0000000002801000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2801000
Size:	380928

Details

Name:	0000000C.00000000.414735778.000000007FFC2000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000000.00000002.384768319.0000000001490000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1490000
Size:	4096

Details

Name:	00000000.00000003.364178026.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	4096

Details

Name:	00000013.00000002.489789890.00007FF56B6FF000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B6FF000
Size:	4096

Details

Name:	00000007.00000002.607239744.0000000005290000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	5290000
Size:	12288

Details

Name:	0000000A.00000002.602291548.00007FF598909000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF598909000
Size:	16384

Details

Name:	00000000.00000003.336007214.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	61440

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.336590224.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000007.00000002.604662827.0000000002B81000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2B81000
Size:	4096

Details

Name:	00000000.00000002.384242186.0000000000C17000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C17000
Size:	4096

Details

Name:	0000000A.00000002.602265788.00007FF598907000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF598907000
Size:	4096

Details

Name:	00000011.00000002.458576452.000000000215F000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	215F000
Size:	4096

Details

Name:	0000000C.00000000.414153193.00000000001A0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	0000000E.00000002.442404423.0000018111457000.00000004.00000001.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18111457000
Size:	36864

Details

Name:	00000000.00000003.335811302.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000002.384269023.0000000000C20000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C20000
Size:	4096

Details

Name:	00000000.00000003.346084441.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	49152

Details

Name:	00000000.00000003.338107697.0000000005D4A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D4A000
Size:	4096

Details

Name:	00000005.00000000.377169054.000000007EFF0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7EFF0000
Size:	12288

Details

Name:	00000000.00000003.334422918.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	4096

Details

Name:	00000011.00000003.455368233.00000000020F4000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20F4000
Size:	32768

Details

Name:	0000000E.00000002.442060026.0000000BEBE7B000.00000004.00000010.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	BEBE7B000
Size:	20480

Details

Name:	0000000C.00000003.424647081.00000000005C4000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C4000
Size:	8192

Details

Name:	00000000.00000003.347248512.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	118784

Details

Name:	00000000.00000002.392557373.00000000085BE000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	85BE000
Size:	8192

Details

Name:	00000008.00000000.394373527.000000007FFB2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000007.00000000.383052646.0000000000A00000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	A00000
Size:	102400

Details

Name:	0000000E.00000002.442276774.0000018111413000.00000004.00000001.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18111413000
Size:	86016

Details

Name:	00000018.00000002.604946382.00007FF598623000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF598623000
Size:	24576

Details

Name:	00000000.00000003.343289541.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000008.00000003.406408845.000000000229E000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229E000
Size:	4096

Details

Name:	0000000C.00000003.422112434.0000000002233000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2233000
Size:	36864

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.373883136.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.338261981.0000000005D4A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D4A000
Size:	4096

Details

Name:	00000018.00000002.603050432.000001550EFB0000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1550EFB0000
Size:	4096

Details

Name:	00000000.00000003.346458737.0000000005D79000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D79000
Size:	8192

Details

Name:	0000001B.00000000.581313379.0000000000040000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	0000000D.00000003.439039844.0000000000A2E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A2E000
Size:	4096

Details

Name:	00000000.00000003.338672489.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	81920

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.370028368.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.343196814.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000000.00000003.346165185.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000007.00000003.503372125.0000000000DD8000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DD8000
Size:	24576

Details

Name:	00000007.00000002.605640865.0000000002C83000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C83000
Size:	8192

Details

Name:	00000011.00000000.441171865.000000007FFC2000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000000.00000003.339648002.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000011.00000002.457851224.000000000009D000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	9D000
Size:	12288

Details

Name:	00000011.00000003.453496642.00000000026B1000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	26B1000
Size:	991232

Details

Name:	0000001B.00000000.583151328.000000007FFB0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	0000000C.00000003.422413129.000000000222C000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	222C000
Size:	4096

Details

Name:	00000000.00000003.368742512.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	4096

Details

Name:	00000008.00000002.409846858.000000007FFD0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000008.00000000.391773053.000000007FFD0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	0000001A.00000000.565722737.00007FF4FA3CB000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FA3CB000
Size:	12288

Details

Name:	00000000.00000003.340724404.0000000005D74000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D74000
Size:	8192

Details

Name:	00000000.00000003.372533541.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000001B.00000000.582764349.0000000000040000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000014.00000002.476854755.00000285CBF30000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	285CBF30000
Size:	61440

Details

Name:	00000013.00000003.472745767.000001F9B45B4000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B45B4000
Size:	65536

Details

Name:	0000001B.00000000.581706136.000000007FFB2000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000008.00000000.392168980.00000000001A0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	0000000D.00000002.439673270.0000000000600000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	600000
Size:	4096

Details

Name:	00000000.00000003.333902328.0000000005400000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5400000
Size:	24576

Details

Name:	00000008.00000002.409000229.00000000005CE000.00000004.00000010.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5CE000
Size:	8192

Details

Name:	0000000E.00000002.442371952.000001811143C000.00000004.00000001.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1811143C000
Size:	94208

Details

Name:	00000000.00000003.371867539.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000011.00000002.457868676.000000000017C000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C000
Size:	4096

Details

Name:	00000000.00000003.368899210.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	4096

Details

Name:	00000000.00000003.336530647.0000000005D6A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D6A000
Size:	12288

Details

Name:	0000000D.00000002.439924302.0000000000A3B000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A3B000
Size:	4096

Details

Name:	0000000D.00000000.429560868.00000000001B0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000000.00000002.384621848.0000000001233000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1233000
Size:	36864

Details

Name:	0000000C.00000003.415598135.0000000002701000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2701000
Size:	851968

Details

Name:	00000000.00000003.374541857.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.371053017.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000C.00000003.423208692.00000000005C4000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C4000
Size:	8192

Details

Name:	0000000D.00000002.439651840.00000000005C0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	5C0000
Size:	16384

Details

Name:	00000000.00000003.345047578.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.370605147.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.347948109.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	131072

Details

Name:	00000000.00000003.350016415.0000000005D42000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D42000
Size:	53248

Details

Name:	0000001A.00000000.565622013.00007DF51F2C2000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51F2C2000
Size:	4096

Details

Name:	0000001B.00000000.581965811.0000000000040000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000007.00000000.381266367.000000007F872000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F872000
Size:	4096

Details

Name:	00000000.00000003.352856775.0000000007D40000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7D40000
Size:	65536

Details

Name:	00000000.00000003.369584146.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000008.00000003.406434896.00000000005D7000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7000
Size:	4096

Details

Name:	0000000D.00000000.426252876.000000007FFC2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	0000000D.00000003.430455547.0000000000A2D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A2D000
Size:	114688

Details

Name:	00000008.00000000.392239650.000000007FFB2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000000.00000003.335839788.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000000.332591837.0000000000BE0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	BE0000
Size:	102400

Details

Name:	0000001A.00000002.600700466.00000170C9920000.00000004.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	170C9920000
Size:	4096

Details

Name:	0000001B.00000000.583837710.0000000000040000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000007.00000003.406733354.0000000005A40000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A40000
Size:	4096

Details

Name:	00000011.00000000.442180031.00000000001A0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	0000001A.00000002.602320536.00007FF5154EB000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5154EB000
Size:	16384

Details

Name:	00000013.00000002.488645279.0000004D02CFF000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4D02CFF000
Size:	4096

Details

Name:	0000001B.00000000.583428672.0000000000040000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000000.00000003.383681821.00000000056F0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	56F0000
Size:	98304

Details

Name:	00000000.00000003.372959560.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000018.00000002.604652037.00007FF5984E7000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5984E7000
Size:	4096

Details

Name:	00000018.00000002.604109956.00007FF59818A000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59818A000
Size:	4096

Details

Name:	00000011.00000003.454143042.00000000020ED000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20ED000
Size:	12288

Details

Name:	00000000.00000003.344338029.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000A.00000002.601998464.00007FF5988AF000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5988AF000
Size:	4096

Details

Name:	00000000.00000003.369017519.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000008.00000003.404252911.00000000005E4000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5E4000
Size:	8192

Details

Name:	00000000.00000003.344424240.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.373348913.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000A.00000002.602135345.00007FF5988CD000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5988CD000
Size:	20480

Details

Name:	00000000.00000002.384960917.00000000018B0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	18B0000
Size:	4096

Details

Name:	0000000C.00000000.411184486.00000000001C0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	1C0000
Size:	4096

Details

Name:	00000013.00000003.471772663.000001F9B4596000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4596000
Size:	32768

Details

Name:	00000000.00000003.347625337.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	131072

Details

Name:	00000013.00000003.470312558.000001F9B4584000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4584000
Size:	8192

Details

Name:	00000007.00000000.379292713.00000000006F2000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	6F2000
Size:	901120

Details

Name:	00000008.00000000.390359087.0000000000040000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000000.00000003.339500782.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.371325683.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000D.00000003.430279982.0000000000614000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	614000
Size:	8192

Details

Name:	0000001B.00000000.581696222.000000007FFB0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000000.00000003.350251919.0000000005D80000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D80000
Size:	40960

Details

Name:	00000008.00000002.406812142.000000000017C000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C000
Size:	4096

Details

Name:	00000000.00000003.343008764.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	0000000A.00000002.601457093.00007DF5A2762000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A2762000
Size:	4096

Details

Name:	00000018.00000002.601863702.0000015509A9E000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15509A9E000
Size:	4096

Details

Name:	0000000D.00000003.436020323.0000000000A3D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A3D000
Size:	4096

Details

Name:	00000008.00000000.389519781.000000007FFB0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000013.00000003.476592585.000001F9B4A02000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4A02000
Size:	106496

Details

Name:	00000000.00000003.338086501.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000008.00000003.403408626.00000000022A4000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A4000
Size:	32768

Details

Name:	0000000A.00000002.601850145.00007FF5987EF000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5987EF000
Size:	8192

Details

Name:	00000000.00000003.338211062.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.352885777.0000000007D30000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7D30000
Size:	8192

Details

Name:	00000007.00000003.387225618.0000000005270000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5270000
Size:	32768

Details

Name:	00000008.00000000.389503250.00000000001B0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	0000000C.00000003.422391016.0000000002224000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2224000
Size:	28672

Details

Name:	0000000D.00000003.435987063.0000000000A2D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A2D000
Size:	12288

Details

Name:	00000018.00000002.604471040.00007FF598420000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF598420000
Size:	8192

Details

Name:	0000000A.00000002.601938543.00007FF598899000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF598899000
Size:	8192

Details

Name:	0000001A.00000002.601680778.00007FF514D6C000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF514D6C000
Size:	4096

Details

Name:	00000004.00000002.364246812.00007DF571DF0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF571DF0000
Size:	4096

Details

Name:	00000000.00000003.341462047.0000000005D7B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7B000
Size:	16384

Details

Name:	00000000.00000003.343560168.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000001B.00000002.585569111.000000000073B000.00000004.00000020.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	73B000
Size:	16384

Details

Name:	0000000D.00000003.435599686.00000000027B1000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	27B1000
Size:	991232

Details

Name:	00000007.00000002.604327364.0000000002ADE000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2ADE000
Size:	8192

Details

Name:	00000000.00000003.341036119.0000000005D7B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7B000
Size:	8192

Details

Name:	00000011.00000003.456531200.00000000025B1000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	25B1000
Size:	155648

Details

Name:	00000000.00000003.334088880.00000000011ED000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11ED000
Size:	20480

Details

Name:	00000000.00000003.369783049.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000002.605860663.0000000002CA1000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CA1000
Size:	4096

Details

Name:	0000000D.00000002.439393465.000000000009D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	9D000
Size:	12288

Details

Name:	00000000.00000003.344807118.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	110592

Details

Name:	00000007.00000002.604869287.0000000002BDE000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2BDE000
Size:	4096

Details

Name:	00000013.00000003.469299647.000001F9B4588000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4588000
Size:	32768

Details

Name:	0000000B.00000000.396910987.00007DF5E5480000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E5480000
Size:	4096

Details

Name:	00000008.00000000.392585192.00000000001A0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000018.00000002.604431802.00007FF598414000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF598414000
Size:	4096

Details

Name:	0000000E.00000002.443009262.00007DF5AA012000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5AA012000
Size:	4096

Details

Name:	00000000.00000003.343802822.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	94208

Details

Name:	00000013.00000003.471759083.000001F9B4585000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4585000
Size:	53248

Details

Name:	00000018.00000002.604307526.00007FF5983C3000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5983C3000
Size:	16384

Details

Name:	0000001A.00000002.601549786.00007DF51F2E0000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51F2E0000
Size:	12288

Details

Name:	00000000.00000003.334458274.0000000005D63000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D63000
Size:	8192

Details

Name:	00000000.00000002.384260383.0000000000C1D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C1D000
Size:	4096

Details

Name:	00000011.00000002.458250370.000000000077F000.00000004.00000010.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	77F000
Size:	4096

Details

Name:	00000000.00000003.346746217.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000013.00000003.469267509.000001F9B4584000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4584000
Size:	8192

Details

Name:	0000000D.00000003.439128875.0000000000A31000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A31000
Size:	24576

Details

Name:	0000000B.00000002.412263871.00000165C5F70000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	165C5F70000
Size:	4096

Details

Name:	00000013.00000000.463396289.00007FF56BA27000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56BA27000
Size:	16384

Details

Name:	0000001B.00000002.585695014.000000007FFB0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000018.00000000.515900069.00007FF598717000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF598717000
Size:	16384

Details

Name:	0000000B.00000002.412547063.00000165C6650000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	165C6650000
Size:	4096

Details

Name:	00000000.00000002.392155140.0000000007F40000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7F40000
Size:	4096

Details

Name:	0000001A.00000002.601292986.00000170CA130000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	170CA130000
Size:	12288

Details

Name:	00000000.00000003.373532796.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000008.00000003.404049666.00000000026B1000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	26B1000
Size:	167936

Details

Name:	00000000.00000003.348389406.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000002.388334694.000000000535C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	535C000
Size:	16384

Details

Name:	00000007.00000003.503285810.0000000000DD8000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DD8000
Size:	24576

Details

Name:	00000000.00000003.336106421.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.347723196.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.345449477.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.372617241.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000A.00000002.602514400.00007FF598977000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF598977000
Size:	32768

Details

Name:	00000018.00000003.519125783.000001550F050000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1550F050000
Size:	4096

Details

Name:	00000000.00000003.341709615.0000000005D5E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5E000
Size:	4096

Details

Name:	00000014.00000002.476670550.00000285CBB07000.00000004.00000020.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	285CBB07000
Size:	61440

Details

Name:	0000000E.00000002.443382455.00007FF5A01B9000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A01B9000
Size:	4096

Details

Name:	0000000E.00000002.442490483.0000018111513000.00000004.00000001.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18111513000
Size:	12288

Details

Name:	00000007.00000002.607609204.0000000005AA0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA0000
Size:	4096

Details

Name:	0000001A.00000002.601048136.00000170C9AD2000.00000004.00000020.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	170C9AD2000
Size:	8192

Details

Name:	0000000C.00000000.412846970.000000007FFD0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	0000000B.00000003.411851545.00000165C604B000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	165C604B000
Size:	16384

Details

Name:	00000013.00000003.472701133.000001F9B4587000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4587000
Size:	53248

Details

Name:	00000000.00000003.342598265.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000000.00000003.371218444.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000001A.00000002.600875580.00000170C9A68000.00000004.00000020.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	170C9A68000
Size:	32768

Details

Name:	00000007.00000000.382434587.000000007F882000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F882000
Size:	4096

Details

Name:	00000013.00000002.489925527.00007FF56B7D3000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B7D3000
Size:	4096

Details

Name:	00000000.00000003.345312250.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.334278880.00000000011ED000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11ED000
Size:	32768

Details

Name:	00000000.00000003.341776834.0000000005D5E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5E000
Size:	4096

Details

Name:	00000013.00000000.463332983.00007DF5757D2000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5757D2000
Size:	4096

Details

Name:	00000008.00000003.403239712.000000000229D000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229D000
Size:	20480

Details

Name:	00000011.00000003.454835440.00000000020ED000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20ED000
Size:	20480

Details

Name:	00000013.00000003.471809747.000001F9B4A02000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4A02000
Size:	73728

Details

Name:	00000007.00000003.408931449.0000000005AA0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA0000
Size:	40960

Details

Name:	00000018.00000002.602386320.000001550A1F0000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1550A1F0000
Size:	8192

Details

Name:	00000000.00000002.384775695.0000000001492000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1492000
Size:	4096

Details

Name:	00000008.00000000.394929582.000000007FFB2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000011.00000003.455151923.00000000020E1000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20E1000
Size:	12288

Details

Name:	00000000.00000002.384750350.0000000001486000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	1486000
Size:	8192

Details

Name:	0000000E.00000002.442419599.0000018111466000.00000004.00000001.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18111466000
Size:	131072

Details

Name:	00000000.00000003.374581798.0000000007761000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7761000
Size:	4096

Details

Name:	00000000.00000003.348561320.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	131072

Details

Name:	00000000.00000002.392534194.00000000083AE000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	83AE000
Size:	8192

Details

Name:	00000000.00000003.339531363.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	90112

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000008.00000000.390596661.000000007FFC0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000013.00000002.489699445.00007FF56B4D1000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B4D1000
Size:	20480

Details

Name:	00000008.00000003.405329521.00000000026B1000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	26B1000
Size:	172032

Details

Name:	00000011.00000000.443260163.000000007FFB0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	0000000C.00000000.414581275.0000000000040000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000007.00000003.384919767.0000000002940000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2940000
Size:	16384

Details

Name:	0000000A.00000002.602494861.00007FF598974000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF598974000
Size:	4096

Details

Name:	00000000.00000003.372259055.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000018.00000002.602966499.000001550EDF0000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1550EDF0000
Size:	4096

Details

Name:	00000018.00000002.604591303.00007FF5984BF000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5984BF000
Size:	12288

Details

Name:	0000000D.00000000.426991683.0000000000040000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000000.00000003.372854235.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000C.00000002.424944158.00000000003FD000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3FD000
Size:	8192

Details

Name:	00000007.00000002.607020321.0000000005065000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5065000
Size:	8192

Details

Name:	00000007.00000000.378538036.000000007F872000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F872000
Size:	4096

Details

Name:	00000000.00000003.338444368.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000D.00000003.436385687.0000000000A2D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A2D000
Size:	20480

Details

Name:	00000008.00000003.395668317.0000000002291000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2291000
Size:	90112

Details

Name:	00000007.00000000.381281464.000000007F882000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F882000
Size:	4096

Details

Name:	00000000.00000002.392585869.00000000086FE000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	86FE000
Size:	8192

Details

Name:	00000000.00000003.370643524.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000018.00000002.604606037.00007FF5984C3000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5984C3000
Size:	4096

Details

Name:	0000000D.00000003.436401937.0000000000A34000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A34000
Size:	32768

Details

Name:	0000000D.00000003.435974616.0000000000A3D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A3D000
Size:	4096

Details

Name:	00000000.00000003.343436389.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.338862278.0000000005D64000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D64000
Size:	45056

Details

Name:	0000001B.00000000.581672740.00000000001A0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000000.00000003.343630350.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000007.00000003.406470521.0000000000DBB000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DBB000
Size:	8192

Details

Name:	0000001B.00000002.585735111.000000007FFD0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000011.00000003.455203423.00000000020FD000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20FD000
Size:	16384

Details

Name:	00000004.00000002.364035672.00000171B7E8A000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	171B7E8A000
Size:	24576

Details

Name:	00000013.00000003.469457171.000001F9B4584000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4584000
Size:	8192

Details

Name:	0000000C.00000002.425454223.000000007FFB0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000011.00000003.457571529.00000000020EE000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20EE000
Size:	4096

Details

Name:	00000013.00000002.490009007.00007FF56B868000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B868000
Size:	49152

Details

Name:	00000000.00000003.342057775.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000000.00000002.392174472.0000000007FA0000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7FA0000
Size:	61440

Details

Name:	00000014.00000002.476510706.000000CD994FE000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	CD994FE000
Size:	8192

Details

Name:	00000013.00000003.476560997.000001F9B45BD000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B45BD000
Size:	73728

Details

Name:	0000000D.00000003.436949569.0000000000A3D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A3D000
Size:	16384

Details

Name:	0000000D.00000000.427978036.0000000000400000.00000040.00000001.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	282624

Details

Name:	00000000.00000003.349942892.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	180224

Details

Name:	00000000.00000003.372840902.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.340881383.0000000005D4A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D4A000
Size:	4096

Details

Name:	0000001B.00000000.580905200.0000000000040000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	0000000D.00000003.436130219.0000000000A2C000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A2C000
Size:	4096

Details

Name:	00000018.00000002.602933332.000001550ADE0000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1550ADE0000
Size:	4096

Details

Name:	00000011.00000000.443736516.000000007FFB2000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000013.00000002.488898753.000001F9B3C3C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B3C3C000
Size:	61440

Details

Name:	00000000.00000003.333912193.0000000005400000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5400000
Size:	16384

Details

Name:	00000000.00000002.389430340.0000000005D30000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5D30000
Size:	4096

Details

Name:	00000008.00000000.394213322.00000000001B0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	0000001B.00000002.585540305.0000000000720000.00000004.00000020.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	720000
Size:	24576

Details

Name:	00000005.00000002.378391133.0000000002D5E000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D5E000
Size:	12288

Details

Name:	00000013.00000002.489457612.000001F9B4562000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4562000
Size:	81920

Details

Name:	00000000.00000003.369565578.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.350587378.00000000056E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	56E0000
Size:	32768

Details

Name:	0000000C.00000003.422014844.000000000223D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	223D000
Size:	4096

Details

Name:	00000014.00000002.477166753.00007FF5B3806000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B3806000
Size:	12288

Details

Name:	0000000D.00000002.439426621.000000000019C000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	19C000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000000.332608446.000000007F672000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F672000
Size:	4096

Details

Name:	00000000.00000003.334537648.0000000005D43000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D43000
Size:	4096

Details

Name:	0000000B.00000002.412142914.00000012E0D7F000.00000004.00000010.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	12E0D7F000
Size:	4096

Details

Name:	00000011.00000003.454890238.00000000020FD000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20FD000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000001A.00000002.601244253.00000170C9D20000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	170C9D20000
Size:	4096

Details

Name:	00000000.00000002.384715931.000000000147D000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	147D000
Size:	4096

Details

Name:	00000018.00000002.605411787.00007FF598712000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF598712000
Size:	36864

Details

Name:	00000000.00000003.338035388.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.370169801.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000013.00000002.489255249.000001F9B40D0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F9B40D0000
Size:	12288

Details

Name:	00000000.00000002.389311646.00000000056E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	56E0000
Size:	65536

Details

Name:	0000000C.00000003.421881651.000000000223D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	223D000
Size:	4096

Details

Name:	00000008.00000000.392247925.000000007FFC0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	0000000E.00000002.443214073.00007FF5A0078000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A0078000
Size:	4096

Details

Name:	00000000.00000003.341827093.0000000005D5E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5E000
Size:	4096

Details

Name:	00000018.00000002.604339705.00007FF5983CA000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5983CA000
Size:	8192

Details

Name:	00000014.00000002.476816347.00000285CBD20000.00000004.00000040.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	285CBD20000
Size:	12288

Details

Name:	00000008.00000003.403428748.00000000022AD000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22AD000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000001B.00000000.584717567.00000000001B0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000000.00000002.389367996.0000000005720000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5720000
Size:	12288

Details

Name:	0000000A.00000002.601966081.00007FF5988A4000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5988A4000
Size:	8192

Details

Name:	00000005.00000002.378312486.00000000007DE000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	7DE000
Size:	8192

Details

Name:	00000007.00000002.607296037.000000000554E000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	554E000
Size:	8192

Details

Name:	00000000.00000003.371707960.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000000.381522874.0000000000400000.00000040.00000001.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	4096

Details

Name:	0000001B.00000002.585632933.0000000000C80000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	C80000
Size:	65536

Details

Name:	00000000.00000003.344706977.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.369983957.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000014.00000002.477034990.00007FF5B30F0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B30F0000
Size:	8192

Details

Name:	0000000B.00000002.413215892.00007FF5DB6E7000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5DB6E7000
Size:	16384

Details

Name:	00000000.00000003.373380284.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000018.00000002.603020465.000001550EE80000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1550EE80000
Size:	4096

Details

Name:	0000000C.00000003.421803957.000000000223D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	223D000
Size:	4096

Details

Name:	00000004.00000002.365502114.00007FF567F51000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF567F51000
Size:	8192

Details

Name:	00000007.00000003.386160092.0000000005110000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5110000
Size:	12288

Details

Name:	00000014.00000002.477192909.00007FF5B382D000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B382D000
Size:	20480

Details

Name:	00000000.00000003.345783427.0000000005D68000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D68000
Size:	77824

Details

Name:	00000000.00000003.335402191.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	40960

Details

Name:	00000008.00000002.407047661.0000000000268000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	268000
Size:	8192

Details

Name:	00000007.00000003.383633289.0000000002949000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2949000
Size:	28672

Details

Name:	00000007.00000000.379003942.000000007F880000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F880000
Size:	4096

Details

Name:	00000008.00000003.403303939.000000000229D000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229D000
Size:	20480

Details

Name:	00000000.00000003.347605880.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000013.00000002.489819085.00007FF56B760000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B760000
Size:	4096

Details

Name:	0000000E.00000002.442253961.0000018111400000.00000004.00000001.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18111400000
Size:	4096

Details

Name:	00000004.00000000.352251139.00007DF571E00000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF571E00000
Size:	4096

Details

Name:	0000000D.00000003.438755779.0000000000A20000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A20000
Size:	4096

Details

Name:	0000001B.00000002.585357322.00000000001B0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000000.00000003.364236705.0000000001200000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1200000
Size:	28672

Details

Name:	00000000.00000003.372609365.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.345278333.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	126976

Details

Name:	00000000.00000003.372601458.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000004.00000002.364140798.00000171B8200000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	171B8200000
Size:	12288

Details

Name:	00000000.00000003.337264015.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.353336442.0000000007761000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7761000
Size:	131072

Details

Name:	00000018.00000002.601939051.0000015509AB0000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15509AB0000
Size:	40960

Details

Name:	00000007.00000003.406025358.0000000005A50000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A50000
Size:	49152

Details

Name:	00000000.00000003.335904215.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	61440

Details

Name:	0000000D.00000003.437182600.0000000000614000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	614000
Size:	4096

Details

Name:	0000000D.00000000.429279738.000000007FFC0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	0000001A.00000002.601188235.00000170C9D10000.00000004.00000040.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	170C9D10000
Size:	12288

Details

Name:	00000000.00000003.349352408.0000000005D42000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D42000
Size:	28672

Details

Name:	0000000C.00000003.422661642.000000000223D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	223D000
Size:	16384

Details

Name:	00000000.00000003.368817673.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	4096

Details

Name:	00000000.00000003.345261492.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000007.00000003.387002814.0000000005270000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5270000
Size:	65536

Details

Name:	0000000D.00000003.436082017.0000000000A24000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A24000
Size:	16384

Details

Name:	0000000D.00000000.429652474.000000007FFC2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	0000000D.00000000.429239681.0000000000454000.00000040.00000001.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	454000
Size:	28672

Details

Name:	00000008.00000002.406838001.00000000001A0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	0000000C.00000003.423197435.00000000005C5000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C5000
Size:	4096

Details

Name:	0000001B.00000000.583183211.000000007FFC2000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000007.00000002.602803690.0000000000D1A000.00000004.00000020.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	D1A000
Size:	110592

Details

Name:	0000000C.00000000.415100787.0000000000454000.00000040.00000001.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	454000
Size:	28672

Details

Name:	00000013.00000003.474575599.000001F9B45B1000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B45B1000
Size:	118784

Details

Name:	0000001B.00000002.585427601.000000000052E000.00000004.00000010.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	52E000
Size:	8192

Details

Name:	00000000.00000003.343729066.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	94208

Details

Name:	0000000B.00000002.413144659.00007FF5DB6A7000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5DB6A7000
Size:	12288

Details

Name:	0000000C.00000003.423176848.00000000005C4000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C4000
Size:	8192

Details

Name:	00000000.00000003.372523878.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000001B.00000002.585658964.0000000000E00000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	E00000
Size:	4096

Details

Name:	00000000.00000003.373128359.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.372222384.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.344776737.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000011.00000002.458158899.0000000000468000.00000004.00000020.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	468000
Size:	118784

Details

Name:	00000008.00000000.392188888.0000000000400000.00000040.00000001.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	282624

Details

Name:	0000000D.00000003.436354749.0000000000A3D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A3D000
Size:	8192

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.333153344.00000000011CE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11CE000
Size:	8192

Details

Name:	00000000.00000003.372210834.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.342876420.0000000005D63000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D63000
Size:	73728

Details

Name:	00000000.00000003.351916508.0000000007CD0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7CD0000
Size:	40960

Details

Name:	0000001B.00000002.585486182.00000000006CE000.00000004.00000010.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	6CE000
Size:	8192

Details

Name:	00000000.00000003.337046956.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000D.00000000.427646616.000000007FFD0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000011.00000000.441873874.000000007FFC2000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000000.00000002.386827926.0000000003E19000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3E19000
Size:	2506752

Details

Name:	00000018.00000002.604545224.00007FF5984B7000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5984B7000
Size:	8192

Details

Name:	0000000C.00000000.413692899.00000000001B0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000018.00000002.601998712.0000015509ABB000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15509ABB000
Size:	4096

Details

Name:	00000014.00000002.477333699.00007FF5B38D3000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B38D3000
Size:	8192

Details

Name:	00000013.00000002.490343008.00007FF56B9E4000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B9E4000
Size:	8192

Details

Name:	00000007.00000000.383163436.000000007F880000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F880000
Size:	4096

Details

Name:	00000000.00000003.373209583.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000001.332629307.0000000000AD0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	AD0000
Size:	4096

Details

Name:	00000008.00000000.391045828.000000007FFC0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	0000000B.00000002.412625520.00007DF5E5490000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E5490000
Size:	4096

Details

Name:	00000000.00000003.351465627.0000000005710000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5710000
Size:	65536

Details

Name:	00000000.00000003.337727365.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.336224612.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000D.00000000.425801376.00000000001C0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	1C0000
Size:	4096

Details

Name:	0000000C.00000000.415157318.000000007FFD0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	0000000D.00000002.439905755.0000000000A38000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A38000
Size:	8192

Details

Name:	0000000C.00000000.415113195.000000007FFB0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000000.00000003.343002561.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000007.00000000.382414435.000000007F872000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F872000
Size:	4096

Details

Name:	00000000.00000003.373514665.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.370895741.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000E.00000002.443234124.00007FF5A00E5000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A00E5000
Size:	12288

Details

Name:	00000000.00000003.371429080.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000005.00000002.378437104.0000000003008000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3008000
Size:	36864

Details

Name:	00000000.00000003.338474497.0000000005D54000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D54000
Size:	4096

Details

Name:	00000018.00000002.604692869.00007FF598558000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF598558000
Size:	4096

Details

Name:	00000000.00000002.392089124.0000000007CE0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7CE0000
Size:	28672

Details

Name:	00000013.00000003.467709793.000001F9B4572000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4572000
Size:	40960

Details

Name:	00000000.00000003.336263355.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000E.00000002.443488688.00007FF5A0262000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A0262000
Size:	12288

Details

Name:	00000007.00000002.607735570.0000000005DFE000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5DFE000
Size:	8192

Details

Name:	00000011.00000003.456754901.00000000020FE000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20FE000
Size:	12288

Details

Name:	00000000.00000003.333022347.00000000011C8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11C8000
Size:	28672

Details

Name:	00000011.00000003.454763451.00000000020ED000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20ED000
Size:	20480

Details

Name:	00000011.00000000.441569844.000000007FFD0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000000.00000003.336651204.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000E.00000002.443332224.00007FF5A018A000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A018A000
Size:	24576

Details

Name:	0000000D.00000000.427476141.00000000001B0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000000.00000003.339480534.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	86016

Details

Name:	00000013.00000002.490390741.00007FF56BA16000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56BA16000
Size:	16384

Details

Name:	0000001A.00000002.601925135.00007FF515368000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF515368000
Size:	4096

Details

Name:	00000000.00000003.340934119.0000000005D7B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7B000
Size:	8192

Details

Name:	0000000C.00000003.422452416.000000000223D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	223D000
Size:	16384

Details

Name:	0000000C.00000000.413757304.000000007FFB0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000018.00000002.600754676.00000034B17FE000.00000004.00000010.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	34B17FE000
Size:	8192

Details

Name:	00000007.00000000.382245183.00000000006F2000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	6F2000
Size:	901120

Details

Name:	00000013.00000003.469278006.000001F9B4588000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4588000
Size:	32768

Details

Name:	00000011.00000003.456833954.00000000020EE000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20EE000
Size:	4096

Details

Name:	00000011.00000000.444001281.0000000000040000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	0000001A.00000002.600675139.00000001005FB000.00000004.00000010.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	1005FB000
Size:	20480

Details

Name:	00000007.00000002.604827028.0000000002BDA000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2BDA000
Size:	4096

Details

Name:	00000000.00000003.335196425.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	40960

Details

Name:	0000000D.00000003.435955086.0000000000A34000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A34000
Size:	32768

Details

Name:	0000000C.00000003.422071307.000000000223D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	223D000
Size:	4096

Details

Name:	00000000.00000003.334611676.0000000005D44000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D44000
Size:	4096

Details

Name:	00000000.00000003.349753422.0000000005D47000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D47000
Size:	69632

Details

Name:	00000007.00000003.387887884.0000000000DBC000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DBC000
Size:	57344

Details

Name:	0000000C.00000002.425324909.000000000222E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	222E000
Size:	4096

Details

Name:	0000000D.00000003.437778692.0000000000A41000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A41000
Size:	61440

Details

Name:	00000014.00000002.476685465.00000285CBB17000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	285CBB17000
Size:	36864

Details

Name:	00000004.00000002.363694136.00000022AED2C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22AED2C000
Size:	16384

Details

Name:	0000000D.00000002.439609541.00000000005AE000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5AE000
Size:	8192

Details

Name:	00000000.00000003.370195928.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000018.00000002.604269478.00007FF598359000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF598359000
Size:	8192

Details

Name:	00000008.00000003.403875708.00000000022AD000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22AD000
Size:	16384

Details

Name:	0000000C.00000000.412717421.0000000000040000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000011.00000003.454697900.00000000020F3000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20F3000
Size:	36864

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000011.00000003.454654720.00000000020FD000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20FD000
Size:	4096

Details

Name:	00000000.00000003.348891413.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	147456

Details

Name:	00000000.00000003.340810291.0000000005D79000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D79000
Size:	24576

Details

Name:	00000000.00000003.339931565.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.338364909.0000000005D42000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D42000
Size:	8192

Details

Name:	00000008.00000003.403218582.00000000022A4000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A4000
Size:	32768

Details

Name:	00000011.00000002.458649458.000000007FFC0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	0000000D.00000000.426194511.000000007FFB0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000007.00000003.384129886.0000000003B06000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3B06000
Size:	327680

Details

Name:	00000007.00000002.605987256.0000000002CB3000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CB3000
Size:	4096

Details

Name:	0000000A.00000002.600442881.0000007213EAB000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7213EAB000
Size:	20480

Details

Name:	00000000.00000003.335969945.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	49152

Details

Name:	00000018.00000002.603201592.000001550F0A0000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1550F0A0000
Size:	4096

Details

Name:	00000000.00000003.370795545.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.339207807.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000A.00000002.602465899.00007FF59896D000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59896D000
Size:	12288

Details

Name:	00000000.00000003.336551520.0000000005D4A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D4A000
Size:	4096

Details

Name:	00000013.00000002.490099806.00007FF56B900000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B900000
Size:	8192

Details

Name:	00000000.00000003.341786730.0000000005D60000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D60000
Size:	8192

Details

Name:	0000001A.00000002.601939197.00007FF51541F000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51541F000
Size:	4096

Details

Name:	00000011.00000003.454574635.00000000020FD000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20FD000
Size:	4096

Details

Name:	00000000.00000002.392045637.0000000007CD1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7CD1000
Size:	36864

Details

Name:	00000000.00000003.348697356.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000018.00000002.604292086.00007FF5983BD000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5983BD000
Size:	20480

Details

Name:	00000007.00000000.382350443.0000000000A00000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	A00000
Size:	102400

Details

Name:	00000005.00000000.377084753.00000000006C0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	6C0000
Size:	16384

Details

Name:	00000000.00000003.334566530.0000000005D5E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5E000
Size:	4096

Details

Name:	00000004.00000000.352169589.00000171B7C40000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	171B7C40000
Size:	102400

Details

Name:	0000000B.00000002.412244508.00000165C5F40000.00000004.00000020.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	165C5F40000
Size:	8192

Details

Name:	00000000.00000003.372293493.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000000.332495861.0000000000AD0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	AD0000
Size:	4096

Details

Name:	00000011.00000003.457556227.00000000020F1000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20F1000
Size:	24576

Details

Name:	00000008.00000003.404417236.0000000000720000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	720000
Size:	131072

Details

Name:	00000000.00000003.347476921.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	131072

Details

Name:	00000000.00000003.371166180.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000B.00000002.413030549.00007FF5DB626000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5DB626000
Size:	16384

Details

Name:	00000008.00000003.402259200.00000000022AE000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22AE000
Size:	401408

Details

Name:	00000007.00000002.605181803.0000000002C4A000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C4A000
Size:	4096

Details

Name:	00000007.00000003.384704714.0000000002940000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2940000
Size:	24576

Details

Name:	00000000.00000003.349105391.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000005.00000000.376295681.000000007EFD0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7EFD0000
Size:	4096

Details

Name:	0000000E.00000002.443444472.00007FF5A022B000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A022B000
Size:	16384

Details

Name:	00000000.00000003.341479795.0000000005D7B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7B000
Size:	16384

Details

Name:	00000013.00000002.489551765.00007DF5757C0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5757C0000
Size:	4096

Details

Name:	00000000.00000003.373235152.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.383753172.0000000001233000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1233000
Size:	36864

Details

Name:	00000000.00000002.384999914.0000000002DE0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2DE0000
Size:	65536

Details

Name:	00000008.00000002.409138931.00000000006EF000.00000004.00000010.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	6EF000
Size:	4096

Details

Name:	00000000.00000003.333343681.00000000011CC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11CC000
Size:	8192

Details

Name:	00000013.00000002.489758955.00007FF56B69B000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B69B000
Size:	4096

Details

Name:	00000000.00000003.335689776.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.341087174.0000000005D63000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D63000
Size:	57344

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.348518842.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000D.00000000.427089724.000000007FFC2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	0000000D.00000000.427560743.000000007FFB2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000000.00000003.370993666.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.343766943.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.335132453.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	40960

Details

Name:	00000008.00000000.390923439.0000000000040000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000000.00000003.340493851.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.336400535.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.372460267.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000B.00000002.412201737.00000165C5EE0000.00000004.00000040.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	165C5EE0000
Size:	4096

Details

Name:	00000000.00000003.373224137.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000D.00000000.428839958.00000000001B0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000000.00000003.339904623.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	90112

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000002.439828870.0000000000823000.00000004.00000020.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	823000
Size:	8192

Details

Name:	00000007.00000002.604703276.0000000002B85000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2B85000
Size:	4096

Details

Name:	00000007.00000002.605621593.0000000002C81000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C81000
Size:	4096

Details

Name:	00000000.00000003.339988586.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	90112

Details

Name:	00000000.00000003.343538939.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000018.00000002.603855497.000001550F2F8000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1550F2F8000
Size:	20480

Details

Name:	0000000C.00000003.421774026.000000000222D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	222D000
Size:	12288

Details

Name:	0000000A.00000002.601633617.00007FF598624000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF598624000
Size:	8192

Details

Name:	00000000.00000003.344301061.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000011.00000000.441542630.000000007FFB2000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000000.00000002.388165564.0000000004E18000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4E18000
Size:	4096

Details

Name:	00000013.00000002.489343481.000001F9B43D0000.00000004.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1F9B43D0000
Size:	8192

Details

Name:	00000000.00000003.341426470.0000000005D5E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5E000
Size:	4096

Details

Name:	00000007.00000002.603434225.0000000000F60000.00000004.00000040.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	F60000
Size:	16384

Details

Name:	00000013.00000002.489660164.00007FF56B2B9000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B2B9000
Size:	4096

Details

Name:	0000000E.00000002.443149689.00007FF59FF1A000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59FF1A000
Size:	8192

Details

Name:	0000000C.00000003.421838467.000000000223D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	223D000
Size:	4096

Details

Name:	00000000.00000003.349700752.0000000005D92000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D92000
Size:	4096

Details

Name:	00000007.00000003.383992432.0000000002950000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2950000
Size:	12288

Details

Name:	00000011.00000003.455797929.00000000005A4000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A4000
Size:	8192

Details

Name:	00000000.00000003.373197057.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000D.00000000.426664729.000000007FFC2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000000.00000003.338731438.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000008.00000003.403320580.00000000022A3000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A3000
Size:	36864

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.341328442.0000000005D7B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7B000
Size:	8192

Details

Name:	00000000.00000002.388686689.0000000005500000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	5500000
Size:	65536

Details

Name:	00000000.00000003.347806799.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	131072

Details

Name:	00000013.00000002.488780754.000001F9B3B80000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F9B3B80000
Size:	4096

Details

Name:	00000000.00000003.371044159.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000013.00000002.488734938.000001F9B3B40000.00000004.00000040.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1F9B3B40000
Size:	4096

Details

Name:	00000000.00000003.345726710.0000000005D68000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D68000
Size:	77824

Details

Name:	00000000.00000003.341311435.0000000005D7B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7B000
Size:	8192

Details

Name:	00000008.00000000.392232528.000000007FFB0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000007.00000003.383648697.0000000002940000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2940000
Size:	28672

Details

Name:	00000000.00000003.340946895.0000000005D7B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7B000
Size:	8192

Details

Name:	0000000C.00000003.421998811.0000000002234000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2234000
Size:	32768

Details

Name:	00000007.00000003.406175346.0000000005A40000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A40000
Size:	36864

Details

Name:	00000007.00000003.384649427.0000000002940000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2940000
Size:	16384

Details

Name:	00000000.00000003.353066714.0000000007620000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7620000
Size:	12288

Details

Name:	00000000.00000003.372649298.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.338980770.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.364246551.0000000001209000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1209000
Size:	8192

Details

Name:	00000000.00000003.370495196.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.371767714.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.352727114.0000000007F20000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7F20000
Size:	36864

Details

Name:	00000000.00000002.392689221.0000000008A7E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8A7E000
Size:	8192

Details

Name:	00000000.00000003.347050726.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	122880

Details

Name:	00000000.00000003.341622763.0000000005D61000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D61000
Size:	4096

Details

Name:	00000000.00000003.349427206.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	147456

Details

Name:	00000007.00000000.381799074.0000000000B70000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	B70000
Size:	4096

Details

Name:	00000007.00000002.606988674.000000000505D000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	505D000
Size:	4096

Details

Name:	0000000D.00000003.436960800.00000000022C1000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22C1000
Size:	163840

Details

Name:	00000007.00000003.386228556.00000000058D0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	58D0000
Size:	65536

Details

Name:	0000000A.00000002.601689588.00007FF598678000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF598678000
Size:	4096

Details

Name:	00000018.00000002.602318570.000001550A080000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1550A080000
Size:	4096

Details

Name:	0000000A.00000002.601359337.00007DF4A0620000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4A0620000
Size:	20480

Details

Name:	00000000.00000003.345419791.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	131072

Details

Name:	00000014.00000002.477310910.00007FF5B38AB000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B38AB000
Size:	16384

Details

Name:	00000000.00000003.336762483.0000000005D6E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D6E000
Size:	4096

Details

Name:	00000013.00000003.477333774.000001F9B4585000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4585000
Size:	4096

Details

Name:	00000000.00000003.349903138.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	147456

Details

Name:	00000000.00000003.352703772.0000000007F39000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7F39000
Size:	28672

Details

Name:	0000000C.00000003.420371851.0000000002801000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2801000
Size:	1286144

Details

Name:	0000000D.00000003.436546038.0000000000A2C000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A2C000
Size:	4096

Details

Name:	00000000.00000003.370418092.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000018.00000002.602577427.000001550A313000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1550A313000
Size:	20480

Details

Name:	00000018.00000002.605058519.00007FF598656000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF598656000
Size:	16384

Details

Name:	0000000D.00000000.429550167.00000000001A0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000000.00000003.373687333.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.350032354.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	208896

Details

Name:	00000000.00000003.364100956.0000000007860000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7860000
Size:	16384

Details

Name:	00000000.00000003.343835267.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000008.00000000.393764468.000000007FFB2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000000.00000003.343487791.0000000005D72000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D72000
Size:	4096

Details

Name:	00000007.00000003.406434557.0000000000C17000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C17000
Size:	8192

Details

Name:	00000000.00000003.336910262.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000B.00000002.413062359.00007FF5DB639000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5DB639000
Size:	4096

Details

Name:	00000018.00000002.605234675.00007FF5986C7000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5986C7000
Size:	20480

Details

Name:	0000000C.00000000.411653152.000000007FFC0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000007.00000003.408668722.0000000000DCE000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DCE000
Size:	8192

Details

Name:	00000000.00000003.370443129.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000000.380681091.000000007F880000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F880000
Size:	4096

Details

Name:	00000000.00000003.338024186.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000008.00000003.406132476.00000000022A1000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A1000
Size:	24576

Details

Name:	00000007.00000000.379631872.000000007F890000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F890000
Size:	12288

Details

Name:	0000000C.00000002.425147131.00000000005C5000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5C5000
Size:	4096

Details

Name:	00000000.00000003.346863585.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	102400

Details

Name:	00000000.00000003.339040144.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	16384

Details

Name:	00000000.00000003.334120312.00000000011DA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11DA000
Size:	110592

Details

Name:	00000000.00000003.373705825.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000011.00000000.445775282.000000007FFB0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000014.00000002.476897701.00007DF4BB550000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4BB550000
Size:	20480

Details

Name:	0000000A.00000002.601614393.00007FF598512000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF598512000
Size:	4096

Details

Name:	00000011.00000003.456847390.00000000020F1000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20F1000
Size:	24576

Details

Name:	00000000.00000003.371387519.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.372200639.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000001A.00000002.602291873.00007FF5154E7000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5154E7000
Size:	12288

Details

Name:	00000013.00000002.490160745.00007FF56B92F000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B92F000
Size:	8192

Details

Name:	00000007.00000000.379566303.000000007F872000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F872000
Size:	4096

Details

Name:	00000008.00000000.389436653.0000000000040000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	0000000C.00000000.412752387.00000000001A0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000018.00000002.605362903.00007FF598703000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF598703000
Size:	8192

Details

Name:	00000000.00000003.344212698.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000E.00000002.443113628.00007FF59FED5000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59FED5000
Size:	16384

Details

Name:	00000014.00000002.476767560.00000285CBC30000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	285CBC30000
Size:	16384

Details

Name:	0000000C.00000003.422828685.0000000002224000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2224000
Size:	12288

Details

Name:	00000000.00000003.370363333.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.352627485.0000000007F50000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7F50000
Size:	65536

Details

Name:	00000008.00000003.402372387.0000000002298000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2298000
Size:	4096

Details

Name:	00000000.00000003.371227552.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.342390807.0000000005D5C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5C000
Size:	24576

Details

Name:	00000007.00000002.605508078.0000000002C70000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C70000
Size:	4096

Details

Name:	00000011.00000003.456265510.00000000005A5000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A5000
Size:	4096

Details

Name:	0000001B.00000000.584808748.000000007FFC2000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000011.00000003.454671147.00000000020ED000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20ED000
Size:	20480

Details

Name:	00000018.00000003.516420575.000001550EF88000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1550EF88000
Size:	16384

Details

Name:	00000007.00000003.408861947.0000000005AA0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA0000
Size:	28672

Details

Name:	00000008.00000000.392262928.000000007FFD0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000000.00000003.340234571.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	90112

Details

Name:	00000000.00000003.334428817.0000000005D42000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D42000
Size:	8192

Details

Name:	00000000.00000003.339221284.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	16384

Details

Name:	00000007.00000000.381085934.00000000006F0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	6F0000
Size:	4096

Details

Name:	00000007.00000003.386050821.0000000005110000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5110000
Size:	65536

Details

Name:	00000000.00000003.334401685.0000000005D43000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D43000
Size:	4096

Details

Name:	00000000.00000003.337200980.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000007.00000002.606024550.0000000002CB7000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CB7000
Size:	4096

Details

Name:	00000000.00000003.337253534.0000000005D6D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D6D000
Size:	4096

Details

Name:	00000000.00000003.342629704.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	28672

Details

Name:	00000000.00000003.338896163.0000000005D42000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D42000
Size:	4096

Details

Name:	0000000D.00000000.425778652.00000000001A0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000000.00000003.333088771.00000000011DA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11DA000
Size:	8192

Details

Name:	00000000.00000003.338216810.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000007.00000003.384723471.0000000002950000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2950000
Size:	8192

Details

Name:	00000000.00000003.336119294.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	61440

Details

Name:	00000000.00000003.369693659.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.344688385.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	114688

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000011.00000002.458483203.00000000020A0000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20A0000
Size:	4096

Details

Name:	00000008.00000000.389114346.0000000000040000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000000.00000003.364130663.0000000007761000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7761000
Size:	167936

Details

Name:	0000000C.00000000.410777945.0000000000040000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	0000000E.00000002.442445520.000001811148A000.00000004.00000001.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1811148A000
Size:	28672

Details

Name:	00000000.00000003.349278958.00000000056D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	56D0000
Size:	4096

Details

Name:	00000011.00000003.454556848.00000000020F4000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20F4000
Size:	32768

Details

Name:	00000014.00000002.477250306.00007FF5B3897000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B3897000
Size:	20480

Details

Name:	0000001B.00000000.584310562.000000007FFB2000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000007.00000003.409624601.0000000000DDE000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DDE000
Size:	20480

Details

Name:	00000004.00000002.364078399.00000171B7F02000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	171B7F02000
Size:	16384

Details

Name:	00000013.00000003.473642891.000001F9B45B1000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B45B1000
Size:	122880

Details

Name:	00000007.00000002.602865443.0000000000D43000.00000004.00000020.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	D43000
Size:	249856

Details

Name:	00000008.00000002.409778622.000000007FEB0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FEB0000
Size:	20480

Details

Name:	00000011.00000002.458461819.000000000209F000.00000004.00000010.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	209F000
Size:	4096

Details

Name:	00000000.00000003.350359622.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	151552

Details

Name:	00000000.00000003.344165208.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000007.00000003.388058142.00000000058E0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	58E0000
Size:	65536

Details

Name:	0000000C.00000002.425166285.00000000007DE000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	7DE000
Size:	8192

Details

Name:	00000000.00000003.341585499.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	0000000C.00000003.421920452.000000000222C000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	222C000
Size:	4096

Details

Name:	0000000C.00000003.422744370.000000000223D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	223D000
Size:	16384

Details

Name:	00000000.00000003.369343815.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000008.00000000.394189348.00000000001A0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000000.00000003.343247157.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	0000000C.00000003.422358230.0000000002221000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2221000
Size:	40960

Details

Name:	00000000.00000003.370354907.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000C.00000003.421858661.0000000002234000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2234000
Size:	32768

Details

Name:	00000011.00000002.458300425.00000000007A0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7A0000
Size:	61440

Details

Name:	00000000.00000003.340512214.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000007.00000003.385632778.0000000005090000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5090000
Size:	49152

Details

Name:	00000011.00000000.443575129.00000000001A0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000007.00000000.380697763.000000007F890000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F890000
Size:	12288

Details

Name:	0000001B.00000000.584267946.0000000000419000.00000040.00000001.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	419000
Size:	12288

Details

Name:	00000000.00000003.349399723.0000000005D46000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D46000
Size:	65536

Details

Name:	00000011.00000002.458259791.0000000000780000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	780000
Size:	4096

Details

Name:	00000011.00000003.452225573.00000000020F5000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20F5000
Size:	782336

Details

Name:	00000008.00000002.406772216.0000000000030000.00000004.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	30000
Size:	4096

Details

Name:	0000001B.00000000.583929905.000000007FFB2000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	0000000D.00000003.437309438.0000000000614000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	614000
Size:	4096

Details

Name:	00000000.00000003.343041958.0000000005D63000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D63000
Size:	73728

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000001B.00000000.581402119.000000007FFB2000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000000.00000003.347793094.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.350828496.00000000056E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	56E0000
Size:	40960

Details

Name:	00000007.00000000.379021069.000000007F890000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F890000
Size:	12288

Details

Name:	00000000.00000003.342616032.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000000.00000003.334572568.0000000005D60000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D60000
Size:	4096

Details

Name:	0000001B.00000002.585449444.0000000000540000.00000004.00000020.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	540000
Size:	20480

Details

Name:	00000007.00000003.385707522.00000000050A0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50A0000
Size:	49152

Details

Name:	00000013.00000002.488679383.0000004D02F7E000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4D02F7E000
Size:	8192

Details

Name:	00000008.00000002.409730528.00000000022B0000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22B0000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking

Details

Name:	00000000.00000003.372979246.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.339760466.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000018.00000002.602182707.0000015509E00000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	15509E00000
Size:	16384

Details

Name:	00000000.00000003.350721838.00000000056E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	56E0000
Size:	57344

Details

Name:	00000005.00000000.376318540.000000007EFE2000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7EFE2000
Size:	4096

Details

Name:	00000000.00000003.371208666.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000004.00000002.363917095.00000171B7E2A000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	171B7E2A000
Size:	69632

Details

Name:	0000000D.00000000.428800165.0000000000040000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	0000001A.00000002.601862431.00007FF515351000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF515351000
Size:	4096

Details

Name:	0000001B.00000000.583132685.0000000000400000.00000040.00000001.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	77824

Details

Name:	00000013.00000003.488407836.000001F9B3C4D000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B3C4D000
Size:	28672

Details

Name:	00000007.00000002.605566091.0000000002C79000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C79000
Size:	4096

Details

Name:	00000000.00000003.370579102.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.347873589.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000013.00000003.466580606.000001F9B4586000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4586000
Size:	94208

Details

Name:	00000011.00000000.440730286.00000000001A0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000000.00000003.374597353.0000000007761000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7761000
Size:	4096

Details

Name:	0000000C.00000003.419596644.0000000002271000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2271000
Size:	380928

Details

Name:	00000000.00000003.336957427.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	73728

Details

Name:	0000000C.00000000.411158444.00000000001A0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000000.00000002.384679397.000000000146D000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	146D000
Size:	4096

Details

Name:	00000000.00000003.374302026.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.344315387.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	102400

Details

Name:	0000001B.00000000.583918810.000000007FFB0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	0000000C.00000003.422184852.000000000223D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	223D000
Size:	8192

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.334169532.0000000005600000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5600000
Size:	12288

Details

Name:	00000007.00000000.381251242.0000000000B70000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	B70000
Size:	4096

Details

Name:	00000007.00000002.602421385.0000000000A00000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	A00000
Size:	102400

Details

Name:	00000000.00000003.349830191.0000000005D92000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D92000
Size:	4096

Details

Name:	0000000C.00000000.410853953.000000007FFD0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000018.00000002.602982377.000001550EE60000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1550EE60000
Size:	4096

Details

Name:	00000007.00000002.605161636.0000000002C48000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C48000
Size:	4096

Details

Name:	00000004.00000002.363853959.00000171B7D90000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	171B7D90000
Size:	4096

Details

Name:	00000000.00000003.333197413.00000000011C8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11C8000
Size:	24576

Details

Name:	0000000E.00000002.442156249.00000181112D0000.00000004.00000040.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	181112D0000
Size:	4096

Details

Name:	00000011.00000003.454376462.00000000020E4000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20E4000
Size:	16384

Details

Name:	00000000.00000003.350808881.00000000056F0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	56F0000
Size:	65536

Details

Name:	00000013.00000002.489969226.00007FF56B830000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B830000
Size:	4096

Details

Name:	00000005.00000002.378338533.0000000000800000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	800000
Size:	24576

Details

Name:	00000007.00000002.605421799.0000000002C63000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C63000
Size:	4096

Details

Name:	00000000.00000002.384441800.0000000001150000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1150000
Size:	8192

Details

Name:	00000013.00000003.467582849.000001F9B4509000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4509000
Size:	77824

Details

Name:	00000000.00000003.369849551.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.349317274.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	147456

Details

Name:	00000000.00000003.374417986.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.348126411.0000000005D7B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7B000
Size:	4096

Details

Name:	0000000C.00000003.423011493.00000000005C4000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C4000
Size:	8192

Details

Name:	00000000.00000003.347851587.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	131072

Details

Name:	00000000.00000003.349551244.0000000005D7F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7F000
Size:	61440

Details

Name:	00000000.00000003.337083319.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000C.00000000.412073082.000000007FFC2000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000008.00000003.402393294.00000000022AD000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22AD000
Size:	4096

Details

Name:	00000005.00000002.378225776.0000000000571000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	571000
Size:	4096

Details

Name:	00000018.00000002.600537941.00000034B117E000.00000004.00000010.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	34B117E000
Size:	8192

Details

Name:	0000000D.00000003.437416792.0000000000720000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	720000
Size:	122880

Details

Name:	00000000.00000003.340525471.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	94208

Details

Name:	00000007.00000000.383094268.0000000000B60000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	B60000
Size:	16384

Details

Name:	00000008.00000002.409767920.00000000027B0000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	27B0000
Size:	4096

Details

Name:	00000004.00000000.352265513.00007DF571E10000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF571E10000
Size:	12288

Details

Name:	00000011.00000003.457629638.00000000005A4000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A4000
Size:	8192

Details

Name:	0000000A.00000000.392625943.0000022D47CD0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	22D47CD0000
Size:	102400

Details

Name:	0000000D.00000002.439941703.0000000000A40000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A40000
Size:	12288

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking

Details

Name:	00000007.00000003.384986789.0000000002940000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2940000
Size:	32768

Details

Name:	00000007.00000002.607622583.0000000005AB0000.00000040.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	5AB0000
Size:	24576

Details

Name:	00000000.00000003.370110284.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.369431296.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.364256083.00000000011FC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11FC000
Size:	16384

Details

Name:	00000007.00000003.388413219.0000000005A40000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A40000
Size:	65536

Details

Name:	00000000.00000003.341184159.0000000005D63000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D63000
Size:	57344

Details

Name:	00000013.00000002.490120119.00007FF56B909000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B909000
Size:	16384

Details

Name:	0000000B.00000002.412874923.00007FF5DB528000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5DB528000
Size:	49152

Details

Name:	00000018.00000002.604998927.00007FF598636000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF598636000
Size:	12288

Details

Name:	00000000.00000003.371174396.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000E.00000000.430568292.00000181112E0000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	181112E0000
Size:	102400

Details

Name:	00000000.00000003.344721194.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.372156368.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000002.605826851.0000000002C9D000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C9D000
Size:	4096

Details

Name:	00000008.00000002.409828906.000000007FFC0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000008.00000003.405560426.0000000002291000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2291000
Size:	49152

Details

Name:	00000013.00000002.489192173.000001F9B3D08000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B3D08000
Size:	28672

Details

Name:	0000000E.00000002.443048758.00007FF59FD11000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59FD11000
Size:	20480

Details

Name:	0000000C.00000000.413161029.00000000001A0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	0000001B.00000002.585593309.0000000000A1F000.00000004.00000010.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A1F000
Size:	4096

Details

Name:	0000000D.00000000.427932320.0000000000040000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000000.00000003.342097643.0000000005D5E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5E000
Size:	16384

Details

Name:	0000000D.00000003.437619068.00000000022C1000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22C1000
Size:	159744

Details

Name:	00000000.00000003.338273494.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	77824

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000002.363993071.00000171B7E60000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	171B7E60000
Size:	4096

Details

Name:	0000000C.00000002.425136138.00000000005C0000.00000004.00000020.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	5C0000
Size:	16384

Details

Name:	0000000C.00000003.423550637.0000000002221000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2221000
Size:	57344

Details

Name:	00000000.00000003.350442273.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	151552

Details

Name:	00000000.00000003.348077634.0000000005D42000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D42000
Size:	4096

Details

Name:	00000000.00000003.371092513.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000002.605879120.0000000002CA4000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CA4000
Size:	4096

Details

Name:	00000008.00000003.402363566.00000000022AD000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22AD000
Size:	4096

Details

Name:	00000018.00000002.600572557.00000034B1277000.00000004.00000010.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	34B1277000
Size:	36864

Details

Name:	00000000.00000003.345395608.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.336301719.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	61440

Details

Name:	00000013.00000002.488606612.0000004D029FB000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4D029FB000
Size:	20480

Details

Name:	00000000.00000003.342508557.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	0000001B.00000000.583161671.000000007FFB2000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000011.00000000.441153110.000000007FFB2000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000000.00000003.369306014.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000C.00000003.421736508.000000000222D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	222D000
Size:	12288

Details

Name:	00000018.00000002.601048615.0000015509920000.00000004.00000020.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	15509920000
Size:	12288

Details

Name:	00000000.00000003.371894739.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.370337290.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000C.00000003.423476030.000000000222D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	222D000
Size:	57344

Details

Name:	00000013.00000003.473057338.000001F9B4585000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4585000
Size:	28672

Details

Name:	00000000.00000003.348312800.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	131072

Details

Name:	00000000.00000003.344988899.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	110592

Details

Name:	00000008.00000002.409582312.000000000216F000.00000004.00000010.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	216F000
Size:	4096

Details

Name:	0000000E.00000002.442037394.0000000BEBC7E000.00000004.00000010.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	BEBC7E000
Size:	8192

Details

Name:	00000000.00000003.369707709.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.342707046.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	28672

Details

Name:	00000007.00000003.409526594.0000000005D80000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D80000
Size:	53248

Details

Name:	00000000.00000003.370906267.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.338935540.0000000005D53000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D53000
Size:	4096

Details

Name:	00000011.00000003.456300579.00000000005A4000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A4000
Size:	8192

Details

Name:	00000000.00000003.341515054.0000000005D5E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5E000
Size:	4096

Details

Name:	00000008.00000003.405532278.00000000022A7000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A7000
Size:	8192

Details

Name:	00000008.00000003.395594786.0000000002170000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2170000
Size:	131072

Details

Name:	00000008.00000003.403912856.000000000229C000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229C000
Size:	4096

Details

Name:	00000000.00000003.337884254.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	81920

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000008.00000003.403282963.000000000230F000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	230F000
Size:	4096

Details

Name:	00000013.00000003.488354049.000001F9B3C5B000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B3C5B000
Size:	81920

Details

Name:	00000011.00000003.455880660.00000000005A4000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A4000
Size:	8192

Details

Name:	00000005.00000002.378270680.00000000006C0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6C0000
Size:	16384

Details

Name:	00000000.00000002.384460295.000000000116B000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	116B000
Size:	155648

Details

Name:	00000000.00000003.383708928.000000000788E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	788E000
Size:	36864

Details

Name:	00000000.00000003.337178007.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000008.00000002.409014344.00000000005D0000.00000004.00000040.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5D0000
Size:	20480

Details

Name:	00000000.00000003.338308949.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.371663648.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000011.00000000.442298705.000000007FFB2000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000000.00000003.334550636.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	8192

Details

Name:	00000000.00000003.369833405.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000C.00000002.424903467.000000000019C000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	19C000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000001B.00000000.584391409.000000007FFD0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000000.00000003.348678256.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	131072

Details

Name:	00000000.00000003.337930116.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.348717176.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000011.00000003.452721352.00000000026B1000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	26B1000
Size:	380928

Details

Name:	00000000.00000002.389609375.0000000006F30000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F30000
Size:	24576

Details

Name:	00000000.00000003.343301898.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	106496

Details

Name:	00000008.00000003.403352721.00000000022AD000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22AD000
Size:	8192

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.372241978.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000011.00000003.455238241.00000000020F4000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20F4000
Size:	32768

Details

Name:	00000000.00000003.337220485.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	77824

Details

Name:	00000008.00000003.406110327.00000000022A1000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A1000
Size:	24576

Details

Name:	00000013.00000003.476632043.000001F9B4590000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4590000
Size:	319488

Details

Name:	00000000.00000003.369728599.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.347459911.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000007.00000002.607785504.00000000096AD000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	96AD000
Size:	12288

Details

Name:	00000000.00000003.340969260.0000000005D4A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D4A000
Size:	4096

Details

Name:	00000000.00000003.349543573.0000000005D91000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D91000
Size:	8192

Details

Name:	00000000.00000003.350546231.00000000056D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	56D0000
Size:	20480

Details

Name:	00000000.00000003.373444272.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.370671066.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000E.00000002.443243415.00007FF5A015F000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A015F000
Size:	4096

Details

Name:	00000000.00000003.370803453.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000008.00000003.406037644.0000000002290000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2290000
Size:	4096

Details

Name:	00000000.00000003.372013910.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.338817484.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000004.00000002.365873783.00007FF568052000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF568052000
Size:	12288

Details

Name:	0000000A.00000000.392711928.00007DF5A2770000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A2770000
Size:	12288

Details

Name:	00000000.00000003.337454356.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.370119204.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.371117093.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000C.00000002.425155932.000000000079C000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	79C000
Size:	16384

Details

Name:	00000018.00000003.516535247.000001550EFC0000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1550EFC0000
Size:	4096

Details

Name:	00000000.00000003.335271385.0000000005D6D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D6D000
Size:	4096

Details

Name:	00000000.00000003.335556559.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	40960

Details

Name:	00000000.00000003.349891320.0000000005D42000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D42000
Size:	20480

Details

Name:	00000013.00000002.488854041.000001F9B3C13000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B3C13000
Size:	86016

Details

Name:	00000011.00000003.454815180.000000000215F000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	215F000
Size:	4096

Details

Name:	00000018.00000002.601176090.0000015509A13000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15509A13000
Size:	86016

Details

Name:	00000000.00000003.346971625.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000011.00000002.458676165.000000007FFD0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000007.00000003.408724692.0000000000DBF000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DBF000
Size:	28672

Details

Name:	00000000.00000003.333313346.00000000011DC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11DC000
Size:	8192

Details

Name:	00000014.00000002.476757775.00000285CBC20000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	285CBC20000
Size:	8192

Details

Name:	00000000.00000003.343948453.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000A.00000000.392699126.00007DF5A2762000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A2762000
Size:	4096

Details

Name:	00000007.00000002.606146150.0000000002CDB000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CDB000
Size:	4096

Details

Name:	00000000.00000003.372552312.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.371747926.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000C.00000003.419722497.0000000002235000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2235000
Size:	782336

Details

Name:	00000000.00000003.370451629.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000002.607146133.0000000005120000.00000004.00000040.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5120000
Size:	8192

Details

Name:	00000000.00000002.391955582.0000000007CA0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7CA0000
Size:	20480

Details

Name:	00000004.00000002.363825514.00000171B7C70000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	171B7C70000
Size:	4096

Details

Name:	0000000C.00000000.411975452.00000000001A0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	0000000C.00000000.414173980.00000000001B0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000013.00000002.489211798.000001F9B3D13000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B3D13000
Size:	8192

Details

Name:	00000000.00000003.349464851.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	147456

Details

Name:	00000000.00000003.333293728.00000000011DA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11DA000
Size:	57344

Details

Name:	00000000.00000003.333317557.00000000011DF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11DF000
Size:	28672

Details

Name:	00000008.00000003.403077457.000000000229C000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229C000
Size:	4096

Details

Name:	0000000D.00000002.439964330.0000000000A44000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A44000
Size:	4096

Details

Name:	0000000D.00000000.425415680.000000007FFB2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000000.00000003.342540648.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000007.00000002.604215730.0000000002960000.00000040.00000040.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	2960000
Size:	4096

Details

Name:	00000000.00000003.333180812.00000000011CC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11CC000
Size:	8192

Details

Name:	00000007.00000002.605100114.0000000002C40000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C40000
Size:	8192

Details

Name:	0000000C.00000003.423051081.00000000005C4000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C4000
Size:	8192

Details

Name:	00000000.00000003.339507709.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.368831164.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	4096

Details

Name:	00000000.00000003.343494648.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.370932309.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000001.383205186.00000000006F0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	6F0000
Size:	4096

Details

Name:	0000000D.00000003.436439131.0000000000A34000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A34000
Size:	32768

Details

Name:	00000000.00000003.383774623.0000000005700000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5700000
Size:	40960

Details

Name:	00000008.00000000.394384053.000000007FFC0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000000.00000003.347516877.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000C.00000003.421626166.0000000002229000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2229000
Size:	16384

Details

Name:	0000000A.00000002.601207337.0000022D48000000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	22D48000000
Size:	4096

Details

Name:	00000000.00000003.343614525.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000018.00000002.604521970.00007FF598474000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF598474000
Size:	4096

Details

Name:	0000000D.00000000.428389393.00000000001A0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000007.00000003.409205630.0000000005AB0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AB0000
Size:	16384

Details

Name:	00000000.00000003.339026507.0000000005D53000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D53000
Size:	8192

Details

Name:	00000000.00000003.335344474.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	40960

Details

Name:	00000000.00000003.347735864.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000013.00000002.488596323.0000004D028FE000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4D028FE000
Size:	8192

Details

Name:	00000000.00000003.368890593.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	4096

Details

Name:	00000000.00000003.347645747.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000007.00000002.603634315.00000000010B7000.00000040.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	10B7000
Size:	4096

Details

Name:	00000000.00000003.372715329.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.372377017.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000002.388448603.0000000005390000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5390000
Size:	65536

Details

Name:	0000000D.00000003.436661320.0000000000A34000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A34000
Size:	32768

Details

Name:	0000000E.00000002.443179225.00007FF5A0037000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A0037000
Size:	4096

Details

Name:	00000000.00000003.341001275.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000004.00000002.363758442.00000022AF47E000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	22AF47E000
Size:	8192

Details

Name:	00000011.00000000.443102760.00000000001B0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000013.00000003.476777563.000001F9B4590000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4590000
Size:	397312

Details

Name:	00000011.00000003.454024827.00000000020ED000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20ED000
Size:	12288

Details

Name:	00000008.00000003.401005692.0000000002880000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2880000
Size:	925696

Details

Name:	0000001A.00000002.601883540.00007FF515361000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF515361000
Size:	16384

Details

Name:	00000011.00000003.454779329.00000000020F3000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20F3000
Size:	36864

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000013.00000002.489570179.00007DF5757D0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5757D0000
Size:	4096

Details

Name:	0000000C.00000003.422715104.000000000222D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	222D000
Size:	20480

Details

Name:	00000005.00000002.378545789.000000007EFD0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7EFD0000
Size:	4096

Details

Name:	00000000.00000003.345121025.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000007.00000002.607111704.00000000050B0000.00000040.00000040.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	50B0000
Size:	4096

Details

Name:	00000007.00000002.606127364.0000000002CD9000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CD9000
Size:	4096

Details

Name:	0000000B.00000002.412026427.00000012E07CB000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12E07CB000
Size:	20480

Details

Name:	00000011.00000003.456723894.00000000020F1000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20F1000
Size:	36864

Details

Name:	0000001B.00000000.582432811.00000000001A0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	0000000E.00000002.442245314.0000018111360000.00000004.00000001.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18111360000
Size:	4096

Details

Name:	00000000.00000003.369554910.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000018.00000002.601724578.0000015509A8C000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15509A8C000
Size:	4096

Details

Name:	00000000.00000003.370346621.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000003.386800571.0000000005110000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5110000
Size:	57344

Details

Name:	00000000.00000003.371903003.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000002.605972820.0000000002CB0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CB0000
Size:	4096

Details

Name:	0000000D.00000003.438935434.0000000000A31000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A31000
Size:	24576

Details

Name:	00000013.00000003.473668340.000001F9B458F000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B458F000
Size:	61440

Details

Name:	00000000.00000003.374083015.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000002.607399910.0000000005900000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	5900000
Size:	733184

Details

Name:	00000018.00000002.600645653.00000034B147A000.00000004.00000010.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	34B147A000
Size:	24576

Details

Name:	00000000.00000003.372739982.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000013.00000002.488927298.000001F9B3C59000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B3C59000
Size:	8192

Details

Name:	00000000.00000003.370635285.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000005.00000000.377095735.00000000006D0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	6D0000
Size:	4096

Details

Name:	0000001B.00000000.583537329.000000007FFB0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000000.00000003.374521400.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.341042143.0000000005D5F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5F000
Size:	73728

Details

Name:	00000011.00000002.458328333.0000000000920000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	920000
Size:	4096

Details

Name:	0000001B.00000002.585474635.000000000068E000.00000004.00000010.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	68E000
Size:	8192

Details

Name:	00000000.00000002.392930417.000000007F672000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F672000
Size:	4096

Details

Name:	00000013.00000003.467625160.000001F9B45B1000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B45B1000
Size:	122880

Details

Name:	00000000.00000003.346177082.0000000005D68000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D68000
Size:	77824

Details

Name:	0000000C.00000003.423023219.00000000005C4000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C4000
Size:	8192

Details

Name:	0000000D.00000002.440036387.0000000000D20000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	D20000
Size:	61440

Details

Name:	00000004.00000002.363743837.00000022AF377000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	22AF377000
Size:	36864

Details

Name:	00000008.00000003.402412675.00000000022A4000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A4000
Size:	32768

Details

Name:	00000000.00000003.349121952.0000000005D42000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D42000
Size:	4096

Details

Name:	0000000E.00000002.443417546.00007FF5A021D000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A021D000
Size:	12288

Details

Name:	00000000.00000003.334789607.0000000005D63000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D63000
Size:	8192

Details

Name:	00000000.00000003.333707341.00000000053F0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	53F0000
Size:	8192

Details

Name:	00000000.00000003.335042595.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	40960

Details

Name:	00000008.00000003.404211558.00000000005E4000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5E4000
Size:	8192

Details

Name:	00000000.00000003.346779722.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	122880

Details

Name:	00000000.00000003.339830574.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	90112

Details

Name:	00000000.00000003.338079179.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000014.00000002.477139696.00007FF5B37FE000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B37FE000
Size:	16384

Details

Name:	00000000.00000003.353025182.0000000007620000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7620000
Size:	12288

Details

Name:	00000007.00000000.380087358.0000000000B60000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	B60000
Size:	16384

Details

Name:	00000000.00000003.332990462.00000000011D7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11D7000
Size:	24576

Details

Name:	00000000.00000003.343265804.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	106496

Details

Name:	00000014.00000002.476910404.00007DF5BD680000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BD680000
Size:	4096

Details

Name:	0000000A.00000002.600627915.0000022D47CC0000.00000004.00000040.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	22D47CC0000
Size:	4096

Details

Name:	00000000.00000003.334289133.00000000011DA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11DA000
Size:	77824

Details

Name:	00000018.00000002.602544396.000001550A302000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1550A302000
Size:	32768

Details

Name:	00000014.00000002.476438549.000000CD990AA000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	CD990AA000
Size:	24576

Details

Name:	0000001A.00000000.565662575.00007DF51F2E0000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51F2E0000
Size:	12288

Details

Name:	00000007.00000002.605812938.0000000002C9B000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C9B000
Size:	4096

Details

Name:	00000000.00000003.369009500.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	4096

Details

Name:	00000000.00000003.340309740.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	90112

Details

Name:	00000008.00000003.405521701.00000000022AE000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22AE000
Size:	12288

Details

Name:	00000000.00000003.348590437.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.342319802.0000000005D63000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D63000
Size:	73728

Details

Name:	00000000.00000003.335763581.0000000005D67000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D67000
Size:	8192

Details

Name:	00000000.00000003.370854710.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000008.00000003.403707038.00000000022AD000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22AD000
Size:	16384

Details

Name:	00000000.00000003.347916858.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.370434358.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.342189785.0000000005D5E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5E000
Size:	16384

Details

Name:	00000000.00000003.351059287.0000000005700000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5700000
Size:	65536

Details

Name:	00000000.00000002.388232592.0000000005334000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5334000
Size:	12288

Details

Name:	0000001B.00000000.583950869.000000007FFC2000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000008.00000000.389179250.000000007FFD0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	0000000B.00000002.412752900.00007FF5DB355000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5DB355000
Size:	16384

Details

Name:	00000000.00000003.374012882.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000003.406449090.0000000000DC6000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DC6000
Size:	4096

Details

Name:	00000013.00000002.489243834.000001F9B3ED0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F9B3ED0000
Size:	4096

Details

Name:	0000000D.00000003.436592288.0000000000A34000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A34000
Size:	32768

Details

Name:	00000000.00000003.371317433.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000011.00000003.455127704.00000000020FD000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20FD000
Size:	16384

Details

Name:	00000000.00000002.392630561.000000000883D000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	883D000
Size:	12288

Details

Name:	00000007.00000003.386414652.0000000005110000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5110000
Size:	12288

Details

Name:	00000000.00000003.370589315.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000D.00000000.427460708.00000000001A0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000011.00000000.441128738.00000000001B0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	0000000E.00000002.443354922.00007FF5A01A6000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A01A6000
Size:	16384

Details

Name:	00000000.00000003.371571707.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.350608178.00000000056E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	56E0000
Size:	8192

Details

Name:	00000005.00000000.376784580.000000007EFE0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7EFE0000
Size:	4096

Details

Name:	00000014.00000003.476267489.00000285CBB26000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	285CBB26000
Size:	36864

Details

Name:	00000000.00000003.350847472.00000000056EB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	56EB000
Size:	20480

Details

Name:	0000000D.00000000.425401210.000000007FFB0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000011.00000003.457602904.0000000000939000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	939000
Size:	8192

Details

Name:	00000000.00000003.341539432.0000000005D63000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D63000
Size:	61440

Details

Name:	0000000C.00000000.413241470.000000007FFB0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000000.00000003.341861957.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000013.00000003.467745177.000001F9B454D000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B454D000
Size:	81920

Details

Name:	0000000B.00000002.412867472.00007FF5DB4F8000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5DB4F8000
Size:	4096

Details

Name:	00000000.00000003.373015605.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.342563208.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	28672

Details

Name:	0000001B.00000000.581684569.00000000001B0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000013.00000002.490024870.00007FF56B89E000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B89E000
Size:	4096

Details

Name:	00000000.00000003.343450507.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	98304

Details

Name:	00000000.00000003.342483583.0000000005D63000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D63000
Size:	73728

Details

Name:	00000000.00000003.353055742.0000000007620000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7620000
Size:	12288

Details

Name:	00000018.00000002.604574336.00007FF5984BD000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5984BD000
Size:	4096

Details

Name:	00000000.00000003.343606380.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000011.00000000.445829029.000000007FFC2000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000007.00000002.605454480.0000000002C68000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C68000
Size:	4096

Details

Name:	00000000.00000003.352526293.0000000007F80000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7F80000
Size:	65536

Details

Name:	00000000.00000003.340797830.0000000005D73000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D73000
Size:	16384

Details

Name:	00000007.00000000.378525398.000000007F870000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F870000
Size:	4096

Details

Name:	00000018.00000002.605162534.00007FF59866E000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59866E000
Size:	4096

Details

Name:	00000007.00000003.388128064.00000000059C0000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	59C0000
Size:	4096

Details

Name:	00000011.00000003.457435076.0000000002102000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2102000
Size:	8192

Details

Name:	00000011.00000003.457581569.00000000020F1000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20F1000
Size:	24576

Details

Name:	00000011.00000000.445837672.000000007FFD0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000008.00000003.403205013.000000000229D000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229D000
Size:	20480

Details

Name:	00000008.00000000.393337895.000000007FFC0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000000.00000003.371032971.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000002.384657653.0000000001463000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	1463000
Size:	4096

Details

Name:	00000008.00000003.403691052.00000000022A4000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A4000
Size:	32768

Details

Name:	0000000D.00000000.426263148.000000007FFD0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000007.00000000.379912235.00000000006F2000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	6F2000
Size:	901120

Details

Name:	00000007.00000000.381825440.000000007F880000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F880000
Size:	4096

Details

Name:	0000000A.00000000.392680180.00007DF5A2752000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A2752000
Size:	4096

Details

Name:	00000000.00000003.339415896.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	16384

Details

Name:	00000000.00000003.350147540.00000000056D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	56D0000
Size:	20480

Details

Name:	0000000D.00000003.438065721.0000000000A9F000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A9F000
Size:	4096

Details

Name:	00000000.00000003.337437246.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	77824

Details

Name:	00000000.00000003.346621239.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000011.00000000.440297306.000000007FFB2000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000000.00000002.384969085.0000000002DCF000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2DCF000
Size:	4096

Details

Name:	00000011.00000003.454158239.00000000020F4000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20F4000
Size:	32768

Details

Name:	0000000D.00000000.427627613.000000007FFC2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000000.00000003.372542887.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000001A.00000003.566144847.00000170C9AAD000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	170C9AAD000
Size:	8192

Details

Name:	00000000.00000003.339186519.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.369598971.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000013.00000002.490283040.00007FF56B9D1000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B9D1000
Size:	8192

Details

Name:	00000007.00000002.602644179.0000000000C00000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C00000
Size:	8192

Details

Name:	00000000.00000003.336163295.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.349875827.0000000005D92000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D92000
Size:	4096

Details

Name:	00000018.00000002.605203608.00007FF5986C4000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5986C4000
Size:	8192

Details

Name:	0000001A.00000000.565573763.00000170C9940000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	170C9940000
Size:	102400

Details

Name:	00000018.00000002.603508754.000001550F249000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1550F249000
Size:	90112

Details

Name:	00000007.00000002.605489763.0000000002C6E000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C6E000
Size:	4096

Details

Name:	00000013.00000002.489670806.00007FF56B49A000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B49A000
Size:	4096

Details

Name:	00000000.00000003.369606784.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000001A.00000002.601733702.00007FF514DA9000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF514DA9000
Size:	8192

Details

Name:	00000007.00000002.606257954.0000000002CE4000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CE4000
Size:	4096

Details

Name:	00000000.00000002.392666989.000000000897E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	897E000
Size:	8192

Details

Name:	0000000C.00000003.423097104.00000000005C5000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C5000
Size:	4096

Details

Name:	00000004.00000002.364465264.00007FF567E46000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF567E46000
Size:	4096

Details

Name:	00000000.00000003.373082606.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000A.00000002.600975519.0000022D47E40000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22D47E40000
Size:	90112

Details

Name:	00000004.00000002.365598284.00007FF567F82000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF567F82000
Size:	49152

Details

Name:	00000007.00000000.378835003.00000000006F2000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	6F2000
Size:	901120

Details

Name:	0000000D.00000000.429622327.000000007FFB0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	0000000A.00000002.602556436.00007FF59898A000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59898A000
Size:	12288

Details

Name:	0000001B.00000000.582845822.000000007FFC2000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000000.00000003.336746886.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	65536

Details

Name:	00000008.00000000.391704519.000000007FFB0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000000.00000003.373418902.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.342894012.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	0000000C.00000000.413836669.000000007FFD0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000000.00000003.371108518.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000013.00000003.470212705.000001F9B4564000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4564000
Size:	4096

Details

Name:	00000018.00000002.602944523.000001550EDE0000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1550EDE0000
Size:	4096

Details

Name:	0000000E.00000002.442096668.0000000BEC0FF000.00000004.00000010.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	BEC0FF000
Size:	4096

Details

Name:	00000014.00000002.476883624.00000285CC0B0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	285CC0B0000
Size:	4096

Details

Name:	0000000C.00000003.415872444.00000000005C4000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C4000
Size:	8192

Details

Name:	0000001A.00000002.600511926.00000001000FD000.00000004.00000010.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	1000FD000
Size:	12288

Details

Name:	00000000.00000002.388298730.0000000005350000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5350000
Size:	16384

Details

Name:	00000011.00000002.458556992.0000000002102000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2102000
Size:	8192

Details

Name:	00000013.00000002.489723494.00007FF56B582000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B582000
Size:	4096

Details

Name:	00000008.00000000.394404253.000000007FFD0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000007.00000002.605477472.0000000002C6C000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C6C000
Size:	4096

Details

Name:	00000000.00000003.370321581.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000002.392124836.0000000007E00000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7E00000
Size:	8192

Details

Name:	00000000.00000003.370835455.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.368929653.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	4096

Details

Name:	00000007.00000002.607823893.000000007F770000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F770000
Size:	20480

Details

Name:	0000000C.00000003.421932162.0000000002224000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2224000
Size:	16384

Details

Name:	00000007.00000002.602702271.0000000000CF0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	CF0000
Size:	16384

Details

Name:	00000008.00000003.403778022.000000000229D000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229D000
Size:	20480

Details

Name:	00000007.00000002.604048693.0000000002930000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2930000
Size:	65536

Details

Name:	00000000.00000003.370282408.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000C.00000003.421785198.0000000002234000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2234000
Size:	32768

Details

Name:	00000000.00000003.373397392.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.369812366.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.371995781.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.350889875.00000000056E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	56E0000
Size:	12288

Details

Name:	00000000.00000003.335447980.0000000005D43000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D43000
Size:	4096

Details

Name:	0000000C.00000003.421079511.0000000002801000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2801000
Size:	991232

Details

Name:	00000013.00000002.490218686.00007FF56B952000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B952000
Size:	49152

Details

Name:	00000011.00000002.458017281.000000000026A000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	26A000
Size:	4096

Details

Name:	00000007.00000003.385676331.0000000005090000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5090000
Size:	16384

Details

Name:	0000000D.00000003.437076282.0000000000614000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	614000
Size:	4096

Details

Name:	0000000E.00000002.442200542.0000018111300000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	18111300000
Size:	12288

Details

Name:	0000000C.00000003.421973414.000000000223D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	223D000
Size:	4096

Details

Name:	00000011.00000003.457529895.00000000020F1000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20F1000
Size:	24576

Details

Name:	00000000.00000003.369967571.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.338638321.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	81920

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000007.00000002.607273076.000000000550E000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	550E000
Size:	8192

Details

Name:	00000013.00000002.489303424.000001F9B4350000.00000008.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page write copy
Base address:	1F9B4350000
Size:	266240

Details

Name:	0000000D.00000003.435855060.0000000000A3D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A3D000
Size:	4096

Details

Name:	0000001A.00000002.601226891.00000170C9D19000.00000004.00000040.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	170C9D19000
Size:	4096

Details

Name:	00000000.00000003.347529786.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	131072

Details

Name:	00000000.00000003.340941048.0000000005D71000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D71000
Size:	8192

Details

Name:	00000007.00000000.381291246.000000007F890000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F890000
Size:	12288

Details

Name:	0000000D.00000000.428059413.000000007FFC2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	0000000C.00000003.416030954.0000000002221000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2221000
Size:	90112

Details

Name:	00000013.00000002.490141558.00007FF56B91F000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B91F000
Size:	4096

Details

Name:	0000000B.00000002.412184966.00000165C5ED0000.00000004.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	165C5ED0000
Size:	4096

Details

Name:	00000007.00000002.607341296.000000000578E000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	578E000
Size:	8192

Details

Name:	00000000.00000002.389530476.0000000006E30000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6E30000
Size:	53248

Details

Name:	0000000C.00000003.422154799.000000000222D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	222D000
Size:	20480

Details

Name:	00000007.00000003.406462085.0000000000DC9000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DC9000
Size:	4096

Details

Name:	0000000D.00000003.438146922.0000000000A31000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A31000
Size:	24576

Details

Name:	00000000.00000003.348092933.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	135168

Details

Name:	00000013.00000002.489009923.000001F9B3CAD000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B3CAD000
Size:	20480

Details

Name:	00000013.00000002.489779318.00007FF56B6F5000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B6F5000
Size:	8192

Details

Name:	00000000.00000003.334485106.0000000005D63000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D63000
Size:	8192

Details

Name:	00000000.00000003.371488591.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000002.607639792.0000000005AC0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5AC0000
Size:	8192

Details

Name:	00000000.00000002.384449361.0000000001160000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1160000
Size:	40960

Details

Name:	00000014.00000002.476957134.00007DF5BD690000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BD690000
Size:	4096

Details

Name:	00000018.00000002.605382628.00007FF598706000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF598706000
Size:	16384

Details

Name:	00000018.00000002.604858722.00007FF5985F9000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5985F9000
Size:	16384

Details

Name:	00000000.00000003.341434793.0000000005D61000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D61000
Size:	4096

Details

Name:	00000007.00000002.603724091.0000000001130000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1130000
Size:	32768

Details

Name:	00000000.00000003.369997696.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000E.00000002.442539042.0000018111C02000.00000004.00000001.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18111C02000
Size:	4096

Details

Name:	0000000D.00000003.436846500.0000000000A2C000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A2C000
Size:	4096

Details

Name:	0000001B.00000000.582451930.00000000001B0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	0000001B.00000000.581360277.00000000001A0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000000.00000003.371843316.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000D.00000003.436321016.0000000000A2D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A2D000
Size:	20480

Details

Name:	0000000E.00000002.442467043.0000018111502000.00000004.00000001.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18111502000
Size:	16384

Details

Name:	0000000D.00000000.427520558.0000000000400000.00000040.00000001.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	4096

Details

Name:	00000000.00000003.370758785.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000018.00000002.604498727.00007FF598450000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF598450000
Size:	4096

Details

Name:	00000000.00000003.333957815.00000000054C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54C0000
Size:	45056

Details

Name:	00000000.00000003.370092703.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000D.00000003.436045859.0000000000A34000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A34000
Size:	32768

Details

Name:	00000000.00000003.335864626.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000002.392203487.00000000080AE000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	80AE000
Size:	8192

Details

Name:	00000000.00000003.339058782.0000000005D60000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D60000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.337792542.0000000005D53000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D53000
Size:	4096

Details

Name:	0000000A.00000002.600736222.0000022D47D00000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	22D47D00000
Size:	4096

Details

Name:	00000000.00000003.368763702.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	4096

Details

Name:	00000000.00000003.369115885.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.350755119.00000000056E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	56E0000
Size:	49152

Details

Name:	00000000.00000003.369178998.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000011.00000002.457774917.0000000000030000.00000004.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	30000
Size:	4096

Details

Name:	0000000C.00000002.424916772.00000000001A0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000000.00000003.373913038.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000011.00000000.440814977.000000007FFD0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000018.00000002.603669062.000001550F29A000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1550F29A000
Size:	12288

Details

Name:	00000004.00000002.363814946.00000171B7C60000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	171B7C60000
Size:	12288

Details

Name:	00000000.00000003.346142614.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.370272106.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.373247443.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000E.00000000.430621004.00007DF5AA000000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5AA000000
Size:	4096

Details

Name:	00000000.00000003.337057371.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	73728

Details

Name:	00000008.00000002.409114263.00000000005E5000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5E5000
Size:	4096

Details

Name:	00000013.00000003.473103535.000001F9B458D000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B458D000
Size:	4096

Details

Name:	00000000.00000003.340036856.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000011.00000003.446926363.00000000026B0000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	26B0000
Size:	118784

Details

Name:	00000000.00000003.369289694.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.372569990.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.342231402.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	0000000E.00000002.443205324.00007FF5A0075000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A0075000
Size:	8192

Details

Name:	00000008.00000000.392140131.0000000000040000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000013.00000002.489488991.000001F9B4583000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4583000
Size:	12288

Details

Name:	00000000.00000003.339359548.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	16384

Details

Name:	00000000.00000003.347787654.0000000005D7B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7B000
Size:	4096

Details

Name:	0000000D.00000002.439476501.0000000000241000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	241000
Size:	8192

Details

Name:	00000000.00000003.344010079.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.349370266.0000000005D4A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D4A000
Size:	4096

Details

Name:	0000000C.00000003.422342325.000000000223D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	223D000
Size:	16384

Details

Name:	00000008.00000003.406090227.00000000022B2000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22B2000
Size:	8192

Details

Name:	00000000.00000002.384286567.0000000000C26000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C26000
Size:	4096

Details

Name:	0000000C.00000000.412394760.00000000001B0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000011.00000003.454944156.00000000020FD000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20FD000
Size:	16384

Details

Name:	0000000B.00000000.396939923.00007DF5E5492000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E5492000
Size:	4096

Details

Name:	00000000.00000003.333111540.00000000011CE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11CE000
Size:	8192

Details

Name:	00000000.00000003.335719649.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000D.00000003.435903483.0000000000A34000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A34000
Size:	32768

Details

Name:	00000000.00000003.374390661.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.369748857.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000001A.00000002.602193850.00007FF5154D4000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5154D4000
Size:	4096

Details

Name:	0000000D.00000000.428827945.00000000001A0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000000.00000003.336100805.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000005.00000002.378330795.00000000007F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7F0000
Size:	4096

Details

Name:	0000001B.00000000.582500621.000000007FFC0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	0000000C.00000000.412430325.000000007FFC0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000000.00000003.374637089.0000000007761000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7761000
Size:	4096

Details

Name:	00000011.00000000.441140859.000000007FFB0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000013.00000003.467648079.000001F9B456A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B456A000
Size:	12288

Details

Name:	0000000D.00000002.439708039.0000000000800000.00000004.00000020.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	800000
Size:	24576

Details

Name:	00000004.00000002.364057446.00000171B7F00000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	171B7F00000
Size:	4096

Details

Name:	00000011.00000003.454068408.00000000020FD000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20FD000
Size:	4096

Details

Name:	00000018.00000002.600820571.00000034B197E000.00000004.00000010.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	34B197E000
Size:	8192

Details

Name:	00000000.00000003.346757586.0000000005D75000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D75000
Size:	12288

Details

Name:	00000000.00000003.339616637.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	90112

Details

Name:	00000011.00000000.445812692.000000007FFC0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000000.00000003.352749392.0000000007F10000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7F10000
Size:	65536

Details

Name:	00000000.00000003.373925296.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.337192632.0000000005D6D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D6D000
Size:	4096

Details

Name:	00000000.00000003.333115114.00000000011DA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11DA000
Size:	40960

Details

Name:	0000000C.00000003.424532810.0000000002231000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2231000
Size:	24576

Details

Name:	00000008.00000002.406819638.0000000000195000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	195000
Size:	24576

Details

Name:	0000000B.00000002.412364491.00000165C6052000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	165C6052000
Size:	118784

Details

Name:	00000000.00000003.337349509.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	73728

Details

Name:	00000000.00000003.373466565.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000000.379605876.000000007F882000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F882000
Size:	4096

Details

Name:	00000008.00000003.403723990.000000000229D000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229D000
Size:	8192

Details

Name:	00000018.00000003.528251757.000001550F302000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1550F302000
Size:	4096

Details

Name:	0000000E.00000003.441866931.0000018111460000.00000004.00000001.sdmp
TargetID:	14
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18111460000
Size:	155648

Details

Name:	00000000.00000003.333856712.0000000005410000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5410000
Size:	16384

Details

Name:	0000000C.00000003.422029025.000000000222D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	222D000
Size:	20480

Details

Name:	00000007.00000000.378974339.0000000000B70000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	B70000
Size:	4096

Details

Name:	00000000.00000003.342867932.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	28672

Details

Name:	0000000B.00000002.412766627.00007FF5DB35B000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5DB35B000
Size:	4096

Details

Name:	00000000.00000003.370059934.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000B.00000002.412354845.00000165C604E000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	165C604E000
Size:	4096

Details

Name:	0000000D.00000000.426574178.00000000001B0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000011.00000003.454987529.00000000020EC000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20EC000
Size:	4096

Details

Name:	0000001B.00000000.584214740.00000000001A0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000007.00000002.605770961.0000000002C95000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C95000
Size:	4096

Details

Name:	0000000C.00000000.413271365.000000007FFD0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000011.00000003.455991021.00000000005A5000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A5000
Size:	4096

Details

Name:	00000000.00000003.337316498.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.371495610.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.368679220.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	4096

Details

Name:	0000000D.00000003.439213970.0000000000614000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	614000
Size:	4096

Details

Name:	0000000D.00000003.436161765.0000000000A3D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A3D000
Size:	4096

Details

Name:	00000000.00000003.348626633.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	131072

Details

Name:	00000000.00000003.372191298.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000013.00000002.488655431.0000004D02DFB000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4D02DFB000
Size:	20480

Details

Name:	00000011.00000000.445580841.00000000001B0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000008.00000003.406148289.000000000229E000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229E000
Size:	4096

Details

Name:	00000000.00000003.373054032.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000001B.00000000.581421756.000000007FFC2000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000000.00000003.337862011.0000000005D42000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D42000
Size:	4096

Details

Name:	0000001A.00000002.601066625.00000170C9B60000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	170C9B60000
Size:	8192

Details

Name:	00000000.00000003.374150899.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000011.00000003.455733916.00000000005A4000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A4000
Size:	8192

Details

Name:	00000005.00000000.376261080.00000000006D0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	6D0000
Size:	4096

Details

Name:	0000000C.00000003.423072169.00000000005C4000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C4000
Size:	8192

Details

Name:	00000000.00000003.333202375.00000000011C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11C0000
Size:	32768

Details

Name:	0000000C.00000000.411219340.000000007FFB2000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000013.00000003.472733085.000001F9B45A9000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B45A9000
Size:	32768

Details

Name:	00000000.00000002.388413752.0000000005380000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5380000
Size:	16384

Details

Name:	00000000.00000003.369991153.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000014.00000000.464984293.00007DF5BD690000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BD690000
Size:	4096

Details

Name:	00000000.00000002.384792095.000000000149B000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	149B000
Size:	4096

Details

Name:	00000005.00000002.378419031.0000000002FA1000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2FA1000
Size:	8192

Details

Name:	00000000.00000003.371554407.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000011.00000000.440764132.000000007FFB0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000008.00000000.391671577.00000000001B0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	0000000A.00000002.600899579.0000022D47E28000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22D47E28000
Size:	94208

Details

Name:	00000000.00000003.351086970.00000000056F0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	56F0000
Size:	65536

Details

Name:	00000000.00000003.341743267.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000013.00000002.488959343.000001F9B3C70000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B3C70000
Size:	94208

Details

Name:	00000000.00000003.352942383.0000000007D10000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7D10000
Size:	65536

Details

Name:	0000000A.00000002.600701627.0000022D47CF0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	22D47CF0000
Size:	12288

Details

Name:	00000004.00000002.364480627.00007FF567E60000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF567E60000
Size:	4096

Details

Name:	00000000.00000003.340911859.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	4096

Details

Name:	00000018.00000002.603450776.000001550F23C000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1550F23C000
Size:	24576

Details

Name:	0000000B.00000003.411822483.00000165C604F000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	165C604F000
Size:	131072

Details

Name:	00000000.00000003.350430865.0000000005D55000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D55000
Size:	12288

Details

Name:	0000000A.00000002.600837929.0000022D47E13000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22D47E13000
Size:	81920

Details

Name:	00000000.00000003.341896500.0000000005D60000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D60000
Size:	8192

Details

Name:	00000007.00000002.602776885.0000000000D10000.00000004.00000020.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	D10000
Size:	32768

Details

Name:	00000008.00000003.403450014.000000000229D000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229D000
Size:	20480

Details

Name:	00000018.00000002.605182925.00007FF5986C1000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5986C1000
Size:	8192

Details

Name:	00000007.00000000.380157225.000000007F882000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F882000
Size:	4096

Details

Name:	00000000.00000002.391913550.0000000007ADE000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	7ADE000
Size:	8192

Details

Name:	00000004.00000002.365659436.00007FF567FA9000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF567FA9000
Size:	4096

Details

Name:	00000011.00000000.443283180.000000007FFC0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000000.00000003.352648890.0000000007F40000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7F40000
Size:	65536

Details

Name:	0000001B.00000003.585110517.0000000000A7C000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A7C000
Size:	8192

Details

Name:	00000018.00000002.602117019.0000015509B13000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15509B13000
Size:	12288

Details

Name:	00000018.00000002.604201674.00007FF5982BE000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5982BE000
Size:	16384

Details

Name:	00000000.00000002.384249645.0000000000C1A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C1A000
Size:	4096

Details

Name:	00000007.00000002.605551566.0000000002C77000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C77000
Size:	4096

Details

Name:	00000013.00000002.488558651.0000004D025BB000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4D025BB000
Size:	20480

Details

Name:	00000008.00000002.406798929.000000000009D000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	9D000
Size:	12288

Details

Name:	0000000C.00000000.415122778.000000007FFB2000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000018.00000003.520994195.000001550F0E0000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1550F0E0000
Size:	4096

Details

Name:	00000000.00000003.338591385.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.369735184.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000D.00000000.429516274.0000000000040000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000000.00000003.369687223.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000002.603989758.0000000002920000.00000040.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	2920000
Size:	65536

Details

Name:	00000008.00000003.403637704.00000000022AD000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22AD000
Size:	16384

Details

Name:	00000000.00000003.369128296.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000013.00000002.488802861.000001F9B3BB0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F9B3BB0000
Size:	16384

Details

Name:	0000000B.00000002.412165498.00000012E0F7C000.00000004.00000010.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	12E0F7C000
Size:	16384

Details

Name:	00000007.00000002.602655725.0000000000C10000.00000004.00000020.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	C10000
Size:	16384

Details

Name:	0000000C.00000002.425380682.000000000229F000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	229F000
Size:	4096

Details

Name:	00000000.00000003.337501715.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	73728

Details

Name:	00000007.00000000.378574375.000000007F890000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F890000
Size:	12288

Details

Name:	00000013.00000000.463346960.00007DF5757E0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5757E0000
Size:	12288

Details

Name:	00000000.00000003.350570027.00000000056E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	56E0000
Size:	8192

Details

Name:	00000000.00000003.337034715.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000E.00000002.442217082.0000018111310000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	18111310000
Size:	4096

Details

Name:	0000000D.00000003.436577504.0000000000A3D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A3D000
Size:	16384

Details

Name:	0000000C.00000000.412439703.000000007FFC2000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	0000000D.00000003.436700710.0000000000A2D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A2D000
Size:	8192

Details

Name:	00000004.00000002.364207242.00000171B8602000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	171B8602000
Size:	4096

Details

Name:	00000000.00000003.371350419.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.342255796.0000000005D5D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5D000
Size:	20480

Details

Name:	00000018.00000002.604663731.00007FF598551000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF598551000
Size:	16384

Details

Name:	00000000.00000003.333129391.00000000011CC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11CC000
Size:	8192

Details

Name:	00000004.00000002.365550015.00007FF567F6D000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF567F6D000
Size:	20480

Details

Name:	0000000D.00000000.425820131.000000007FFB2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000000.00000003.371264540.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000002.392837365.000000007F670000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F670000
Size:	4096

Details

Name:	0000001A.00000002.601634923.00007FF514D65000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF514D65000
Size:	4096

Details

Name:	00000000.00000003.336023220.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000008.00000003.400215032.00000000027B1000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	27B1000
Size:	380928

Details

Name:	00000000.00000003.340105341.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	98304

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.384204467.0000000000C04000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C04000
Size:	8192

Details

Name:	0000000C.00000003.423635488.000000000229F000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229F000
Size:	4096

Details

Name:	0000001B.00000002.585332935.000000000019C000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	19C000
Size:	16384

Details

Name:	00000000.00000003.353355321.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	4096

Details

Name:	00000000.00000002.384301730.0000000000C2C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C2C000
Size:	4096

Details

Name:	0000001B.00000000.581028910.000000007FFB2000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000011.00000002.458437444.0000000001F90000.00000004.00000040.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1F90000
Size:	8192

Details

Name:	00000013.00000003.471896556.000001F9B45A9000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B45A9000
Size:	294912

Details

Name:	00000007.00000002.607749547.0000000005EFE000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5EFE000
Size:	8192

Details

Name:	00000000.00000003.338268594.0000000005D53000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D53000
Size:	4096

Details

Name:	00000000.00000003.347180433.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.349079358.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	147456

Details

Name:	00000000.00000003.347595941.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.338843980.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000013.00000002.488915397.000001F9B3C4F000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B3C4F000
Size:	20480

Details

Name:	00000018.00000002.601589658.0000015509A6F000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15509A6F000
Size:	4096

Details

Name:	0000001B.00000000.583862874.00000000001A0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000000.00000002.384729328.0000000001480000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1480000
Size:	4096

Details

Name:	00000018.00000002.603321348.000001550F22F000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1550F22F000
Size:	36864

Details

Name:	0000000C.00000000.411192576.000000007FFB0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000000.00000003.343711278.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.352909729.0000000007D35000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7D35000
Size:	45056

Details

Name:	00000013.00000003.488324036.000001F9B454B000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B454B000
Size:	90112

Details

Name:	00000000.00000003.342840434.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000000.00000002.392146255.0000000007F3E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	7F3E000
Size:	8192

Details

Name:	00000000.00000003.373895335.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.347551237.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000001B.00000000.582000069.00000000001B0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000008.00000000.393703833.00000000001B0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000007.00000002.605433586.0000000002C65000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C65000
Size:	8192

Details

Name:	00000000.00000003.370100951.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000004.00000002.365445010.00007FF567E98000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF567E98000
Size:	49152

Details

Name:	00000007.00000002.603571658.00000000010A0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	10A0000
Size:	4096

Details

Name:	0000000D.00000000.428039876.000000007FFB2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	0000001A.00000002.600601643.000000010047D000.00000004.00000010.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	10047D000
Size:	12288

Details

Name:	00000000.00000003.335293296.0000000005D44000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D44000
Size:	8192

Details

Name:	00000011.00000003.453975493.00000000020E8000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20E8000
Size:	4096

Details

Name:	00000018.00000003.516517407.000001550EFB0000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1550EFB0000
Size:	8192

Details

Name:	00000007.00000002.604110637.0000000002940000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2940000
Size:	65536

Details

Name:	00000000.00000003.336992447.0000000005D6C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D6C000
Size:	4096

Details

Name:	00000000.00000003.350625117.00000000056F0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	56F0000
Size:	20480

Details

Name:	00000000.00000003.352550806.0000000007F70000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7F70000
Size:	65536

Details

Name:	00000011.00000000.441524600.00000000001B0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000013.00000003.466640320.000001F9B454D000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B454D000
Size:	81920

Details

Name:	00000000.00000003.341910503.0000000005D63000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D63000
Size:	69632

Details

Name:	00000004.00000002.364275789.00007DF571E00000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF571E00000
Size:	4096

Details

Name:	00000018.00000000.515844254.00007DF5A24C2000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A24C2000
Size:	4096

Details

Name:	00000000.00000003.372386484.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.337042043.0000000005D6C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D6C000
Size:	4096

Details

Name:	0000000B.00000002.413082698.00007FF5DB691000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5DB691000
Size:	8192

Details

Name:	00000007.00000000.380056629.0000000000A00000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	A00000
Size:	102400

Details

Name:	00000000.00000003.333326195.00000000011C8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11C8000
Size:	24576

Details

Name:	00000000.00000003.339708094.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.336778003.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.340206295.0000000005D71000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D71000
Size:	8192

Details

Name:	0000000E.00000002.443426561.00007FF5A0224000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A0224000
Size:	8192

Details

Name:	00000013.00000003.465794800.000001F9B3CE9000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B3CE9000
Size:	32768

Details

Name:	00000000.00000003.345802691.0000000005D72000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D72000
Size:	36864

Details

Name:	00000000.00000003.372866908.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.344963993.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.349060794.0000000005D42000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D42000
Size:	4096

Details

Name:	0000000A.00000002.602102934.00007FF5988C3000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5988C3000
Size:	24576

Details

Name:	0000000C.00000002.425064722.0000000000468000.00000004.00000020.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	468000
Size:	77824

Details

Name:	0000001B.00000000.582032356.000000007FFC0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000000.00000003.353079698.0000000007620000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7620000
Size:	16384

Details

Name:	0000000D.00000002.439886707.0000000000A2E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A2E000
Size:	4096

Details

Name:	0000000A.00000002.600754445.0000022D47D20000.00000004.00000020.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	22D47D20000
Size:	8192

Details

Name:	0000001B.00000000.582021754.000000007FFB2000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000011.00000002.457901883.0000000000195000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	195000
Size:	24576

Details

Name:	00000007.00000002.607255286.000000000540B000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	540B000
Size:	20480

Details

Name:	00000000.00000003.346278299.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	131072

Details

Name:	00000004.00000002.364453482.00007FF567E27000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF567E27000
Size:	4096

Details

Name:	0000000E.00000002.443170521.00007FF5A0027000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A0027000
Size:	8192

Details

Name:	00000011.00000000.440797960.000000007FFC2000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000000.00000003.373975905.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.369001158.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	4096

Details

Name:	00000000.00000003.345374143.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000005.00000000.377161079.000000007EFE2000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7EFE2000
Size:	4096

Details

Name:	0000001B.00000000.584353374.000000007FFC2000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000011.00000003.456377572.0000000002510000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2510000
Size:	118784

Details

Name:	00000000.00000002.385048319.0000000002E00000.00000040.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	2E00000
Size:	4096

Details

Name:	00000013.00000003.474496322.000001F9B45A0000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B45A0000
Size:	32768

Details

Name:	00000007.00000002.605743848.0000000002C90000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C90000
Size:	4096

Details

Name:	00000000.00000003.333947196.00000000054C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54C0000
Size:	12288

Details

Name:	00000000.00000002.388480117.00000000053C0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	53C0000
Size:	12288

Details

Name:	00000000.00000003.334178766.0000000005510000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5510000
Size:	65536

Details

Name:	00000000.00000003.373995696.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000018.00000002.604733040.00007FF59858E000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59858E000
Size:	4096

Details

Name:	00000013.00000003.477385566.000001F9B4A63000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4A63000
Size:	397312

Details

Name:	00000013.00000002.488723077.000001F9B3B30000.00000004.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1F9B3B30000
Size:	4096

Details

Name:	00000000.00000003.335126144.0000000005D43000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D43000
Size:	4096

Details

Name:	00000000.00000003.383744366.0000000001209000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1209000
Size:	8192

Details

Name:	00000018.00000002.603063468.000001550F090000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1550F090000
Size:	4096

Details

Name:	00000000.00000002.385297178.0000000002FE4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2FE4000
Size:	3330048

Details

Name:	00000011.00000000.445519597.0000000000040000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000000.00000003.337803826.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	81920

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.368804861.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	4096

Details

Name:	0000001A.00000002.602214923.00007FF5154D7000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5154D7000
Size:	20480

Details

Name:	00000000.00000003.372025100.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000008.00000003.402707612.00000000022A4000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A4000
Size:	32768

Details

Name:	0000000D.00000002.439415573.0000000000195000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	195000
Size:	24576

Details

Name:	00000008.00000003.405442806.00000000022AE000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22AE000
Size:	12288

Details

Name:	00000007.00000003.408656864.0000000000DC6000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DC6000
Size:	28672

Details

Name:	00000011.00000000.440334869.000000007FFD0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000011.00000003.455302382.00000000020F4000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20F4000
Size:	32768

Details

Name:	00000000.00000002.384825323.0000000001500000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	1500000
Size:	65536

Details

Name:	00000013.00000002.490088553.00007FF56B8E8000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B8E8000
Size:	4096

Details

Name:	00000005.00000000.377053972.0000000000620000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	620000
Size:	102400

Details

Name:	00000011.00000002.458348664.0000000000930000.00000004.00000040.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	930000
Size:	20480

Details

Name:	00000011.00000000.443306253.000000007FFD0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	0000000D.00000002.439368498.0000000000040000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000007.00000000.378287044.00000000006F0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	6F0000
Size:	4096

Details

Name:	00000000.00000002.389280633.00000000056D0000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	56D0000
Size:	57344

Details

Name:	0000001B.00000000.582412290.0000000000040000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	0000000C.00000000.412766414.00000000001B0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	0000001B.00000002.585438477.0000000000530000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	530000
Size:	4096

Details

Name:	00000000.00000003.372908362.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000D.00000002.440176815.000000007FFC0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000000.00000003.373794224.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.344660070.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000018.00000002.603008661.000001550EE70000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1550EE70000
Size:	4096

Details

Name:	00000000.00000003.342826199.0000000005D63000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D63000
Size:	73728

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000007.00000003.385790126.00000000050A0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	50A0000
Size:	32768

Details

Name:	0000001B.00000000.584176792.0000000000040000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	0000000C.00000000.414745833.000000007FFD0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000000.00000003.350521183.00000000056D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	56D0000
Size:	28672

Details

Name:	00000000.00000003.369153509.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.348434661.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	131072

Details

Name:	0000000C.00000003.422471953.0000000002234000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2234000
Size:	32768

Details

Name:	00000000.00000003.368750880.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	4096

Details

Name:	00000000.00000002.389417134.000000000582E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	582E000
Size:	8192

Details

Name:	00000000.00000002.384330538.0000000000C35000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C35000
Size:	4096

Details

Name:	00000007.00000003.406761850.0000000005A40000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A40000
Size:	36864

Details

Name:	00000007.00000003.409702850.0000000005D80000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D80000
Size:	8192

Details

Name:	00000000.00000002.384862968.000000000151D000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	151D000
Size:	8192

Details

Name:	00000000.00000003.372779952.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000014.00000002.477322849.00007FF5B38BA000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B38BA000
Size:	12288

Details

Name:	00000018.00000002.604904965.00007FF59860F000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59860F000
Size:	4096

Details

Name:	00000000.00000003.340977384.0000000005D54000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D54000
Size:	4096

Details

Name:	00000007.00000000.378819736.00000000006F0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	6F0000
Size:	4096

Details

Name:	00000007.00000003.388231235.00000000059C0000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	59C0000
Size:	45056

Details

Name:	00000007.00000002.605845076.0000000002C9F000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C9F000
Size:	4096

Details

Name:	00000018.00000002.604510896.00007FF59845B000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59845B000
Size:	4096

Details

Name:	00000011.00000002.458630466.000000007FFB0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000000.00000003.343924125.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	94208

Details

Name:	00000000.00000003.344394634.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	110592

Details

Name:	00000008.00000003.403141874.000000000229D000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229D000
Size:	24576

Details

Name:	00000011.00000003.454477887.00000000020F4000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20F4000
Size:	32768

Details

Name:	00000000.00000003.349935820.0000000005D4A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D4A000
Size:	4096

Details

Name:	00000011.00000000.442289433.000000007FFB0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000000.00000003.344113000.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000013.00000003.467787013.000001F9B4564000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4564000
Size:	20480

Details

Name:	00000000.00000003.344955822.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000002.384406796.00000000010C0000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	10C0000
Size:	16384

Details

Name:	00000000.00000003.370044793.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.338237088.0000000005D64000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D64000
Size:	36864

Details

Name:	00000018.00000002.604788919.00007FF5985E4000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5985E4000
Size:	8192

Details

Name:	00000000.00000003.383848212.0000000005D40000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D40000
Size:	8192

Details

Name:	00000000.00000003.373318381.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000018.00000002.604816926.00007FF5985F0000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5985F0000
Size:	8192

Details

Name:	00000000.00000003.337831135.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000007.00000003.409147961.0000000005AA0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA0000
Size:	65536

Details

Name:	00000000.00000003.349997051.0000000005D7F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7F000
Size:	32768

Details

Name:	00000011.00000003.448784603.00000000020E1000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20E1000
Size:	90112

Details

Name:	00000000.00000003.370020338.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000004.00000002.363774503.00000171B7C20000.00000004.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	171B7C20000
Size:	4096

Details

Name:	00000000.00000002.392982358.000000007F682000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F682000
Size:	4096

Details

Name:	00000000.00000003.371452080.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.369803856.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000013.00000002.489376835.000001F9B450A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B450A000
Size:	73728

Details

Name:	0000000A.00000002.601225984.0000022D48200000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	22D48200000
Size:	16384

Details

Name:	00000007.00000000.383110403.0000000000B70000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	B70000
Size:	4096

Details

Name:	00000000.00000003.370463207.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000002.603658857.00000000010D0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	10D0000
Size:	4096

Details

Name:	0000000C.00000000.415042633.00000000001B0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000004.00000002.364286949.00007DF571E02000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF571E02000
Size:	4096

Details

Name:	0000000A.00000000.392687437.00007DF5A2760000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A2760000
Size:	4096

Details

Name:	00000000.00000003.340371285.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	90112

Details

Name:	0000000D.00000003.437249928.0000000000614000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	614000
Size:	4096

Details

Name:	00000000.00000003.346604077.0000000005D75000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D75000
Size:	16384

Details

Name:	00000011.00000003.453960108.00000000020FD000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20FD000
Size:	4096

Details

Name:	00000013.00000002.489959459.00007FF56B816000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B816000
Size:	4096

Details

Name:	00000000.00000003.337983255.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.343092945.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	0000001B.00000002.585725237.000000007FFC2000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000014.00000002.476573870.00000285CB9C0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	285CB9C0000
Size:	102400

Details

Name:	00000011.00000000.444365409.000000007FFD0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000000.00000002.384978140.0000000002DD0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2DD0000
Size:	65536

Details

Name:	0000001B.00000000.583196073.000000007FFD0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000004.00000002.365475072.00007FF567ED5000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF567ED5000
Size:	12288

Details

Name:	00000018.00000002.605272485.00007FF5986CD000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5986CD000
Size:	12288

Details

Name:	00000008.00000003.402547930.00000000022AD000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22AD000
Size:	4096

Details

Name:	0000000E.00000002.443465551.00007FF5A0253000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A0253000
Size:	8192

Details

Name:	00000000.00000003.370302035.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.364112086.0000000007860000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7860000
Size:	12288

Details

Name:	00000000.00000003.364066899.0000000007860000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7860000
Size:	32768

Details

Name:	00000000.00000003.333000784.00000000011DE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11DE000
Size:	28672

Details

Name:	00000007.00000003.383622298.0000000002940000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2940000
Size:	32768

Details

Name:	00000018.00000002.601029610.0000015509900000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	15509900000
Size:	4096

Details

Name:	00000013.00000002.489539033.00007DF473690000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF473690000
Size:	20480

Details

Name:	00000008.00000002.409163956.0000000000720000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	720000
Size:	4096

Details

Name:	00000014.00000002.476747486.00000285CBBF0000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	285CBBF0000
Size:	8192

Details

Name:	00000007.00000003.405958208.0000000005A60000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A60000
Size:	53248

Details

Name:	00000000.00000003.372894984.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000D.00000003.436634970.0000000000A21000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A21000
Size:	12288

Details

Name:	0000001B.00000002.585289842.0000000000040000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000000.00000003.349234388.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	139264

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000018.00000003.526968024.000001550A318000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1550A318000
Size:	4096

Details

Name:	00000008.00000003.403100539.000000000229C000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229C000
Size:	4096

Details

Name:	00000000.00000003.337337031.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.371396892.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000D.00000002.439997472.0000000000B10000.00000004.00000040.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	B10000
Size:	20480

Details

Name:	0000000C.00000000.410827527.000000007FFB2000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000018.00000002.600933408.00000155098B0000.00000004.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	155098B0000
Size:	4096

Details

Name:	00000000.00000003.333694094.00000000053F0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	53F0000
Size:	49152

Details

Name:	00000008.00000003.395562748.00000000005E4000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5E4000
Size:	8192

Details

Name:	0000000E.00000002.443267807.00007FF5A016F000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A016F000
Size:	8192

Details

Name:	0000000D.00000000.425841867.000000007FFC2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	0000000B.00000002.413135260.00007FF5DB6A4000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5DB6A4000
Size:	8192

Details

Name:	0000000D.00000003.437890315.0000000000A3E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A3E000
Size:	12288

Details

Name:	00000000.00000003.344785302.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.346246572.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000007.00000002.603956317.0000000002910000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2910000
Size:	28672

Details

Name:	00000000.00000002.384785228.0000000001497000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	1497000
Size:	4096

Details

Name:	00000011.00000000.441552046.000000007FFC0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000018.00000002.603870570.000001550F300000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1550F300000
Size:	4096

Details

Name:	00000000.00000003.371236966.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000C.00000003.424509463.0000000002231000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2231000
Size:	24576

Details

Name:	00000000.00000003.336873839.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	73728

Details

Name:	0000000C.00000000.413249372.000000007FFB2000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000000.00000003.349140893.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	139264

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000008.00000002.409837064.000000007FFC2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	0000000E.00000002.443391118.00007FF5A0211000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A0211000
Size:	8192

Details

Name:	00000011.00000003.456739020.00000000020FE000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20FE000
Size:	12288

Details

Name:	00000000.00000003.346354523.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000011.00000000.441821639.00000000001B0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000007.00000003.406098268.0000000005A30000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	5A30000
Size:	65536

Details

Name:	00000013.00000003.466692957.000001F9B454E000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B454E000
Size:	77824

Details

Name:	00000000.00000003.336736126.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000008.00000003.404239568.00000000005E5000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5E5000
Size:	4096

Details

Name:	00000007.00000002.602750279.0000000000D00000.00000004.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	D00000
Size:	4096

Details

Name:	0000000E.00000002.442500320.00000181116D0000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	181116D0000
Size:	4096

Details

Name:	0000000D.00000000.428020544.000000007FFB0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000014.00000003.476218910.00000285CBB16000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	285CBB16000
Size:	40960

Details

Name:	00000007.00000000.380665869.000000007F870000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F870000
Size:	4096

Details

Name:	00000000.00000003.335604775.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000E.00000002.443282642.00007FF5A0173000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A0173000
Size:	24576

Details

Name:	00000000.00000002.384293809.0000000000C29000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C29000
Size:	4096

Details

Name:	00000000.00000003.342786710.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000000.00000003.369379315.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.334097128.00000000011D5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11D5000
Size:	98304

Details

Name:	00000011.00000003.456669561.00000000005A5000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A5000
Size:	4096

Details

Name:	00000000.00000003.370128588.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.342369001.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	0000000C.00000002.425199402.0000000000A1F000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A1F000
Size:	4096

Details

Name:	00000011.00000003.455466135.00000000020EC000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20EC000
Size:	4096

Details

Name:	00000000.00000003.342443674.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000000.00000003.347236025.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000007.00000002.605679338.0000000002C88000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C88000
Size:	4096

Details

Name:	00000007.00000000.382237198.00000000006F0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	6F0000
Size:	4096

Details

Name:	00000007.00000003.384023350.0000000002940000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2940000
Size:	65536

Details

Name:	00000008.00000003.399496820.00000000022E1000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22E1000
Size:	380928

Details

Name:	00000011.00000000.442122176.0000000000040000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000000.00000003.338567534.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	90112

Details

Name:	00000013.00000002.490431357.00007FF56BA27000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56BA27000
Size:	16384

Details

Name:	00000000.00000003.370474399.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000B.00000000.396949052.00007DF5E54A0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E54A0000
Size:	12288

Details

Name:	00000000.00000003.347340336.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000C.00000002.424871863.000000000017C000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C000
Size:	4096

Details

Name:	0000000B.00000002.412572210.00007DF4E3350000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4E3350000
Size:	20480

Details

Name:	00000000.00000003.341163497.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000D.00000000.427017409.00000000001A0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000013.00000003.476543349.000001F9B45B2000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B45B2000
Size:	4096

Details

Name:	00000000.00000003.335098793.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	40960

Details

Name:	00000000.00000003.369768699.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000008.00000000.390630458.000000007FFD0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	0000000D.00000003.436003517.0000000000A34000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A34000
Size:	32768

Details

Name:	00000018.00000002.603883424.00007DF4A0380000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4A0380000
Size:	20480

Details

Name:	00000007.00000002.603678661.000000000111E000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	111E000
Size:	8192

Details

Name:	0000000D.00000003.437025447.0000000000614000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	614000
Size:	4096

Details

Name:	00000000.00000003.370663915.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000D.00000002.439460716.00000000001B0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000000.00000003.372176002.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.340093505.0000000005D4A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D4A000
Size:	4096

Details

Name:	0000000E.00000002.442108990.0000000BEC1FE000.00000004.00000010.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	BEC1FE000
Size:	8192

Details

Name:	00000011.00000002.458586033.0000000002510000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2510000
Size:	4096

Details

Name:	00000008.00000000.394855882.0000000000454000.00000040.00000001.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	454000
Size:	28672

Details

Name:	0000001A.00000002.600719378.00000170C9930000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	170C9930000
Size:	4096

Details

Name:	00000000.00000002.385038640.0000000002DF3000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2DF3000
Size:	8192

Details

Name:	00000000.00000003.344352603.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	102400

Details

Name:	0000000A.00000002.600609942.0000022D47CB0000.00000004.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	22D47CB0000
Size:	4096

Details

Name:	0000001B.00000000.581050014.000000007FFC2000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	0000000D.00000002.439449715.00000000001A0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000000.00000003.370230735.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.335393575.0000000005D43000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D43000
Size:	4096

Details

Name:	00000000.00000003.369367625.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000D.00000000.425447141.000000007FFC2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	0000000A.00000002.601380473.00007DF5A2750000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A2750000
Size:	4096

Details

Name:	00000007.00000003.408553049.0000000000DD6000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DD6000
Size:	16384

Details

Name:	00000008.00000000.390985179.00000000001A0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	0000000D.00000002.439593403.000000000056E000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	56E000
Size:	8192

Details

Name:	0000000D.00000000.425740781.0000000000040000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000013.00000002.488618006.0000004D02AF7000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4D02AF7000
Size:	36864

Details

Name:	00000013.00000003.476703020.000001F9B45B7000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B45B7000
Size:	200704

Details

Name:	00000005.00000002.378278584.00000000006D0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6D0000
Size:	4096

Details

Name:	00000000.00000003.333780608.0000000005410000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5410000
Size:	32768

Details

Name:	00000018.00000002.601370611.0000015509A41000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15509A41000
Size:	86016

Details

Name:	00000011.00000002.458618508.000000007FEB0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FEB0000
Size:	20480

Details

Name:	00000014.00000002.476981312.00007DF5BD692000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BD692000
Size:	4096

Details

Name:	00000008.00000002.408567258.000000000026C000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	26C000
Size:	4096

Details

Name:	00000000.00000003.343415555.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000000.00000003.335735115.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	57344

Details

Name:	00000000.00000003.340467848.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	94208

Details

Name:	0000000A.00000002.601829873.00007FF598775000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF598775000
Size:	4096

Details

Name:	00000008.00000000.393805739.000000007FFD0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000004.00000002.365665465.00007FF568001000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF568001000
Size:	8192

Details

Name:	00000008.00000002.409023960.00000000005DA000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5DA000
Size:	4096

Details

Name:	00000000.00000003.370986077.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000008.00000002.409171848.00000000007D0000.00000004.00000020.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	7D0000
Size:	24576

Details

Name:	0000000A.00000002.602348216.00007FF598961000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF598961000
Size:	8192

Details

Name:	00000000.00000003.333164632.00000000011DC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11DC000
Size:	24576

Details

Name:	0000000C.00000000.415030494.00000000001A0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000014.00000002.476649054.00000285CBAFB000.00000004.00000020.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	285CBAFB000
Size:	4096

Details

Name:	0000001B.00000000.582484909.000000007FFB2000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000000.00000003.333260683.00000000053C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	53C0000
Size:	28672

Details

Name:	00000000.00000002.389245523.000000000563C000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	563C000
Size:	16384

Details

Name:	00000000.00000003.346469656.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.371420995.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000E.00000002.442014004.0000000BEB94B000.00000004.00000001.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	BEB94B000
Size:	20480

Details

Name:	00000000.00000003.340135247.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.371545660.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000002.391395950.0000000007760000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7760000
Size:	36864

Details

Name:	00000000.00000003.370313914.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000008.00000002.409401942.00000000007ED000.00000004.00000020.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	7ED000
Size:	32768

Details

Name:	00000000.00000003.370178468.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.346674115.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	102400

Details

Name:	00000013.00000002.489560905.00007DF5757C2000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5757C2000
Size:	4096

Details

Name:	00000018.00000002.602879339.000001550AA60000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1550AA60000
Size:	65536

Details

Name:	00000011.00000003.455055529.00000000020F4000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20F4000
Size:	32768

Details

Name:	0000000B.00000002.412923722.00007FF5DB5E1000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5DB5E1000
Size:	8192

Details

Name:	00000008.00000002.408955900.0000000000570000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	570000
Size:	4096

Details

Name:	0000001B.00000000.583940716.000000007FFC0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000008.00000003.403389444.000000000229D000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229D000
Size:	20480

Details

Name:	00000000.00000002.392216187.0000000008100000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	8100000
Size:	712704

Details

Name:	0000000D.00000003.437915587.0000000000A21000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A21000
Size:	57344

Details

Name:	00000000.00000003.369465928.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000001B.00000002.585669599.00000000023A0000.00000004.00000040.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	23A0000
Size:	8192

Details

Name:	00000014.00000002.477226893.00007FF5B3891000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B3891000
Size:	8192

Details

Name:	00000000.00000003.333766128.00000000011E8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11E8000
Size:	20480

Details

Name:	00000000.00000002.388316644.0000000005355000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5355000
Size:	16384

Details

Name:	00000007.00000002.603452372.0000000001070000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1070000
Size:	8192

Details

Name:	00000000.00000003.346837279.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.347290446.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000011.00000003.455757055.00000000005A4000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A4000
Size:	8192

Details

Name:	00000004.00000002.363888059.00000171B7E13000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	171B7E13000
Size:	57344

Details

Name:	00000007.00000003.387259815.0000000005270000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5270000
Size:	16384

Details

Name:	00000000.00000003.350194350.0000000005D4A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D4A000
Size:	4096

Details

Name:	0000000B.00000002.412967455.00007FF5DB5FD000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5DB5FD000
Size:	20480

Details

Name:	00000000.00000003.345752569.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000C.00000000.412383058.00000000001A0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000000.00000003.348168566.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	139264

Details

Name:	0000000C.00000003.421695933.0000000002228000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2228000
Size:	4096

Details

Name:	00000007.00000003.406072855.0000000005A40000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A40000
Size:	57344

Details

Name:	00000011.00000003.454435609.00000000020E4000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20E4000
Size:	16384

Details

Name:	00000000.00000003.342353678.0000000005D74000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D74000
Size:	4096

Details

Name:	00000000.00000002.388613056.00000000054C2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	54C2000
Size:	57344

Details

Name:	00000000.00000003.348661957.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000002.392108966.0000000007D4E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	7D4E000
Size:	8192

Details

Name:	00000007.00000003.387844782.0000000005280000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5280000
Size:	24576

Details

Name:	0000000C.00000002.425400452.0000000002700000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2700000
Size:	4096

Details

Name:	0000000C.00000003.422088784.000000000222D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	222D000
Size:	20480

Details

Name:	00000000.00000003.371962618.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.352234557.0000000007F00000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7F00000
Size:	712704

Details

Name:	00000007.00000002.605659008.0000000002C86000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C86000
Size:	4096

Details

Name:	00000000.00000003.373487846.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000011.00000000.444269565.0000000000454000.00000040.00000001.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	454000
Size:	28672

Details

Name:	00000000.00000003.333287563.00000000011CE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11CE000
Size:	12288

Details

Name:	00000000.00000003.369755133.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000003.384688164.0000000002940000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2940000
Size:	24576

Details

Name:	00000013.00000003.469191248.000001F9B4584000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4584000
Size:	16384

Details

Name:	00000000.00000003.335623329.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	45056

Details

Name:	00000000.00000003.338919025.0000000005D4A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D4A000
Size:	4096

Details

Name:	00000000.00000003.347564844.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000C.00000003.424459589.000000000222E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	222E000
Size:	4096

Details

Name:	00000000.00000003.334703048.0000000005D63000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D63000
Size:	8192

Details

Name:	00000011.00000003.453989068.00000000020F4000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20F4000
Size:	32768

Details

Name:	00000011.00000003.446267474.00000000025B1000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	25B1000
Size:	811008

Details

Name:	0000000C.00000003.422800407.0000000002221000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2221000
Size:	24576

Details

Name:	0000000B.00000002.412489909.00000165C6113000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	165C6113000
Size:	12288

Details

Name:	00000000.00000003.369440392.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000E.00000002.443159359.00007FF59FFFA000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59FFFA000
Size:	16384

Details

Name:	00000000.00000003.369035324.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.342126074.0000000005D63000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D63000
Size:	69632

Details

Name:	00000007.00000002.603531194.0000000001090000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1090000
Size:	53248

Details

Name:	0000000D.00000003.434894960.0000000000A3E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A3E000
Size:	712704

Details

Name:	00000011.00000003.456633710.00000000020ED000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20ED000
Size:	57344

Details

Name:	0000000E.00000002.442165328.00000181112E0000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	181112E0000
Size:	102400

Details

Name:	00000004.00000002.365761541.00007FF568014000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF568014000
Size:	8192

Details

Name:	00000000.00000003.337958135.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	77824

Details

Name:	00000000.00000003.371537626.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000004.00000002.364406548.00007FF567E17000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF567E17000
Size:	8192

Details

Name:	00000013.00000002.489401446.000001F9B4520000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4520000
Size:	40960

Details

Name:	00000008.00000003.406183392.00000000022A1000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A1000
Size:	24576

Details

Name:	00000000.00000003.369976574.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000C.00000003.422144346.000000000229F000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229F000
Size:	4096

Details

Name:	00000000.00000003.349586417.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000000.00000003.373307429.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.342291032.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000007.00000002.607765648.0000000007380000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7380000
Size:	4096

Details

Name:	00000004.00000002.365509442.00007FF567F5F000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF567F5F000
Size:	8192

Details

Name:	00000008.00000000.390061684.000000007FFD0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	0000000B.00000002.412101230.00000012E0BFC000.00000004.00000010.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	12E0BFC000
Size:	16384

Details

Name:	0000000A.00000002.601138458.0000022D47F00000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22D47F00000
Size:	4096

Details

Name:	00000000.00000003.336687386.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	69632

Details

Name:	0000001A.00000002.601096367.00000170C9BA0000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	170C9BA0000
Size:	16384

Details

Name:	00000000.00000003.341107597.0000000005D63000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D63000
Size:	57344

Details

Name:	00000000.00000003.348359765.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	131072

Details

Name:	00000007.00000002.603252045.0000000000DD3000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	DD3000
Size:	16384

Details

Name:	00000000.00000003.370625948.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000008.00000003.402445166.00000000022A4000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A4000
Size:	32768

Details

Name:	00000000.00000003.334729547.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	16384

Details

Name:	00000007.00000003.384938574.0000000002940000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2940000
Size:	12288

Details

Name:	00000007.00000002.607863427.000000007F880000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F880000
Size:	4096

Details

Name:	0000000C.00000000.413642521.0000000000040000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	0000000C.00000003.424563403.0000000002231000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2231000
Size:	24576

Details

Name:	0000000C.00000003.421826889.0000000002234000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2234000
Size:	32768

Details

Name:	00000013.00000003.469356071.000001F9B457F000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B457F000
Size:	4096

Details

Name:	00000000.00000002.388280782.000000000534D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	534D000
Size:	8192

Details

Name:	00000008.00000003.405552913.000000000230F000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	230F000
Size:	4096

Details

Name:	00000000.00000003.338829243.0000000005D6F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D6F000
Size:	4096

Details

Name:	00000008.00000002.409473515.0000000000AD0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	AD0000
Size:	61440

Details

Name:	00000000.00000003.337545705.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000007.00000000.379454376.0000000000A00000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	A00000
Size:	102400

Details

Name:	00000000.00000003.370656764.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000001A.00000002.602080200.00007FF51546D000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51546D000
Size:	20480

Details

Name:	00000000.00000003.346375219.0000000005D74000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D74000
Size:	28672

Details

Name:	00000008.00000003.406449508.00000000005D9000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D9000
Size:	8192

Details

Name:	00000007.00000003.388138708.00000000059C0000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	59C0000
Size:	20480

Details

Name:	0000000D.00000003.436298869.0000000000A3D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A3D000
Size:	4096

Details

Name:	00000018.00000002.604485606.00007FF59844E000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59844E000
Size:	4096

Details

Name:	00000018.00000002.604235777.00007FF5982E1000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5982E1000
Size:	4096

Details

Name:	00000000.00000003.373183470.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000014.00000000.465001045.00007DF5BD692000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BD692000
Size:	4096

Details

Name:	00000011.00000003.455938378.00000000005A4000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A4000
Size:	8192

Details

Name:	0000000A.00000003.457151226.0000022D47E68000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22D47E68000
Size:	32768

Details

Name:	0000000C.00000002.425303425.0000000000BF0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	BF0000
Size:	32768

Details

Name:	00000013.00000002.488667594.0000004D02EFB000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4D02EFB000
Size:	20480

Details

Name:	0000000C.00000000.414235541.000000007FFB0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000000.00000003.334677924.0000000005D44000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D44000
Size:	4096

Details

Name:	00000000.00000003.350399586.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	151552

Details

Name:	00000000.00000003.368910368.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	4096

Details

Name:	0000000D.00000000.429643942.000000007FFC0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000000.00000003.371835531.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.341222634.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.342079729.0000000005D73000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D73000
Size:	4096

Details

Name:	00000000.00000003.337114208.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.341349950.0000000005D61000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D61000
Size:	4096

Details

Name:	00000013.00000003.474663163.000001F9B4A02000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4A02000
Size:	106496

Details

Name:	00000000.00000003.339742531.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000A.00000002.601588102.00007FF5984E2000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5984E2000
Size:	8192

Details

Name:	00000018.00000002.604618850.00007FF5984D3000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5984D3000
Size:	4096

Details

Name:	00000000.00000003.372268809.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000003.387954539.0000000000DB8000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DB8000
Size:	8192

Details

Name:	00000008.00000003.402718345.00000000022AD000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22AD000
Size:	4096

Details

Name:	00000000.00000003.334449153.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	4096

Details

Name:	00000000.00000003.343398171.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	0000001A.00000002.602117629.00007FF515477000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF515477000
Size:	4096

Details

Name:	00000018.00000002.600691522.00000034B167A000.00000004.00000010.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	34B167A000
Size:	24576

Details

Name:	00000007.00000002.607194663.0000000005270000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5270000
Size:	40960

Details

Name:	00000000.00000003.333148833.00000000011E2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11E2000
Size:	24576

Details

Name:	0000001A.00000000.565607895.00007DF51F2C0000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51F2C0000
Size:	4096

Details

Name:	00000000.00000003.333657467.00000000053C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	53C0000
Size:	49152

Details

Name:	00000011.00000000.442307691.000000007FFC0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000000.00000003.345698282.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	49152

Details

Name:	00000008.00000000.390005532.000000007FFB2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000000.00000002.384416409.00000000010D0000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	10D0000
Size:	16384

Details

Name:	00000007.00000003.386326143.0000000005110000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5110000
Size:	65536

Details

Name:	0000000C.00000002.425284252.0000000000BE0000.00000004.00000040.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	BE0000
Size:	20480

Details

Name:	00000000.00000003.342970193.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	28672

Details

Name:	00000007.00000000.381618963.00000000006F0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	6F0000
Size:	4096

Details

Name:	00000007.00000003.386298215.0000000005270000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5270000
Size:	65536

Details

Name:	00000000.00000003.372641129.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.340215279.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.344377900.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.339368571.0000000005D60000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D60000
Size:	65536

Details

Name:	0000000C.00000003.423532912.00000000005C5000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C5000
Size:	4096

Details

Name:	00000007.00000002.607876159.000000007F882000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F882000
Size:	4096

Details

Name:	0000000B.00000002.412977123.00007FF5DB606000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5DB606000
Size:	12288

Details

Name:	00000007.00000002.603495637.0000000001084000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1084000
Size:	4096

Details

Name:	00000011.00000002.458506190.00000000020EE000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20EE000
Size:	4096

Details

Name:	00000013.00000002.488937935.000001F9B3C5C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B3C5C000
Size:	77824

Details

Name:	00000000.00000003.369877900.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.371378483.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000002.604178717.0000000002950000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2950000
Size:	65536

Details

Name:	0000000D.00000000.426177749.00000000001B0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000000.00000003.342847673.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000007.00000002.606907891.0000000005054000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5054000
Size:	8192

Details

Name:	00000000.00000003.349016557.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	147456

Details

Name:	00000000.00000003.372304302.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.348267837.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.344448833.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	114688

Details

Name:	0000001A.00000002.601341919.00000170CA650000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	170CA650000
Size:	49152

Details

Name:	0000000B.00000000.396920355.00007DF5E5482000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E5482000
Size:	4096

Details

Name:	00000007.00000002.603621169.00000000010B2000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	10B2000
Size:	4096

Details

Name:	00000000.00000003.342760305.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	28672

Details

Name:	00000000.00000003.340827184.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000007.00000000.379524953.000000007F870000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F870000
Size:	4096

Details

Name:	00000000.00000003.336714330.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000C.00000003.423466541.000000000229F000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229F000
Size:	4096

Details

Name:	00000000.00000003.336924263.0000000005D6C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D6C000
Size:	4096

Details

Name:	00000008.00000003.404161694.00000000005E4000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5E4000
Size:	8192

Details

Name:	00000000.00000003.350906985.00000000056F0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	56F0000
Size:	4096

Details

Name:	0000001B.00000000.584704727.00000000001A0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000018.00000002.601809171.0000015509A93000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15509A93000
Size:	40960

Details

Name:	00000000.00000003.336274583.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000013.00000003.468711292.000001F9B45A5000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B45A5000
Size:	90112

Details

Name:	00000013.00000003.470297204.000001F9B457D000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B457D000
Size:	4096

Details

Name:	00000000.00000003.347499077.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000011.00000000.443274601.000000007FFB2000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000018.00000002.600953812.00000155098C0000.00000004.00000040.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	155098C0000
Size:	4096

Details

Name:	00000011.00000003.457511277.00000000020EE000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20EE000
Size:	4096

Details

Name:	00000000.00000003.334654511.0000000005D63000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D63000
Size:	8192

Details

Name:	00000000.00000003.371460504.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.370977060.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000005.00000000.376704569.0000000000620000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	620000
Size:	102400

Details

Name:	0000000A.00000002.600773543.0000022D47E00000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22D47E00000
Size:	4096

Details

Name:	00000013.00000002.489045975.000001F9B3CC1000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B3CC1000
Size:	24576

Details

Name:	00000018.00000003.528401135.000001550A318000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1550A318000
Size:	4096

Details

Name:	0000000E.00000000.430678323.00007DF5AA020000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5AA020000
Size:	12288

Details

Name:	00000018.00000002.604759851.00007FF5985C5000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5985C5000
Size:	32768

Details

Name:	00000007.00000002.600458896.0000000000400000.00000040.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	4096

Details

Name:	0000001A.00000002.602016395.00007FF515446000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF515446000
Size:	12288

Details

Name:	0000000E.00000002.443374128.00007FF5A01B7000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A01B7000
Size:	4096

Details

Name:	00000000.00000003.350203739.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	192512

Details

Name:	0000000E.00000002.442548155.00007DF4A7ED0000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4A7ED0000
Size:	20480

Details

Name:	00000000.00000003.370715716.0000000007761000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7761000
Size:	163840

Details

Name:	00000000.00000003.370940709.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000001A.00000002.600663757.000000010057E000.00000004.00000010.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	10057E000
Size:	8192

Details

Name:	00000000.00000003.336040506.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	61440

Details

Name:	00000000.00000003.341948431.0000000005D5E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5E000
Size:	16384

Details

Name:	00000013.00000002.489364364.000001F9B4500000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4500000
Size:	36864

Details

Name:	00000008.00000000.391634090.00000000001A0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000007.00000003.385974452.0000000005110000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5110000
Size:	12288

Details

Name:	00000000.00000003.349500276.0000000005D42000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D42000
Size:	94208

Details

Name:	00000008.00000003.403250563.00000000022A3000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A3000
Size:	36864

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.344194804.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	102400

Details

Name:	0000001B.00000002.585683257.000000007FEB0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FEB0000
Size:	20480

Details

Name:	00000000.00000003.333093690.00000000011D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11D0000
Size:	16384

Details

Name:	00000000.00000003.370843771.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.341268683.0000000005D61000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D61000
Size:	4096

Details

Name:	00000000.00000003.371360028.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000011.00000003.455174495.00000000020F4000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20F4000
Size:	32768

Details

Name:	0000001A.00000002.601477369.00007DF41D190000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF41D190000
Size:	20480

Details

Name:	00000000.00000003.336660693.0000000005D6A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D6A000
Size:	12288

Details

Name:	0000001A.00000002.601129117.00000170C9CC0000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	170C9CC0000
Size:	4096

Details

Name:	00000000.00000003.351448344.0000000007CA0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7CA0000
Size:	65536

Details

Name:	00000000.00000003.335339164.0000000005D44000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D44000
Size:	8192

Details

Name:	0000000D.00000002.440190759.000000007FFC2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000000.00000003.339138372.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	16384

Details

Name:	0000001B.00000000.582011148.000000007FFB0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000011.00000000.444068839.00000000001A0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000000.00000003.372704742.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000003.387301150.0000000005270000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5270000
Size:	12288

Details

Name:	0000000D.00000003.436768133.0000000000A3D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A3D000
Size:	16384

Details

Name:	00000008.00000003.402432930.000000000229D000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229D000
Size:	12288

Details

Name:	00000000.00000003.351860458.0000000007CC0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7CC0000
Size:	65536

Details

Name:	00000011.00000002.458606478.00000000026B0000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	26B0000
Size:	4096

Details

Name:	00000000.00000003.346478741.0000000005D73000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D73000
Size:	4096

Details

Name:	00000013.00000000.463280089.00007DF5757C0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5757C0000
Size:	4096

Details

Name:	00000000.00000003.334907587.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	40960

Details

Name:	00000000.00000003.340144176.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000007.00000003.383492750.0000000002950000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2950000
Size:	28672

Details

Name:	00000000.00000003.371255271.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000003.387033088.0000000005110000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5110000
Size:	20480

Details

Name:	00000013.00000002.488824006.000001F9B3BF0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F9B3BF0000
Size:	8192

Details

Name:	00000000.00000003.336373703.0000000005D4A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D4A000
Size:	4096

Details

Name:	00000007.00000002.603509674.000000000108D000.00000040.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	108D000
Size:	4096

Details

Name:	00000000.00000002.384693644.0000000001470000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1470000
Size:	8192

Details

Name:	00000000.00000003.345184624.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000013.00000002.489649997.00007FF56B2B5000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B2B5000
Size:	12288

Details

Name:	00000000.00000003.372666467.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.371100489.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.341979271.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000013.00000003.471974199.000001F9B45CD000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B45CD000
Size:	147456

Details

Name:	00000000.00000003.333322751.00000000011E7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11E7000
Size:	4096

Details

Name:	0000000D.00000002.439696251.000000000071C000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	71C000
Size:	16384

Details

Name:	0000000B.00000002.412502091.00000165C62D0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	165C62D0000
Size:	4096

Details

Name:	00000011.00000003.454621932.00000000020F4000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20F4000
Size:	32768

Details

Name:	00000000.00000003.353164343.0000000007620000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7620000
Size:	12288

Details

Name:	0000000D.00000003.437742548.0000000000614000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	614000
Size:	4096

Details

Name:	0000001B.00000003.585129071.0000000000A7D000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A7D000
Size:	4096

Details

Name:	00000013.00000003.467774093.000001F9B4562000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4562000
Size:	28672

Details

Name:	0000000C.00000002.425118064.00000000005A0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5A0000
Size:	4096

Details

Name:	00000000.00000003.371469926.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000D.00000003.436783012.0000000000A2D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A2D000
Size:	20480

Details

Name:	00000005.00000002.378594286.000000007EFF0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7EFF0000
Size:	12288

Details

Name:	00000011.00000003.454905378.00000000020ED000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20ED000
Size:	20480

Details

Name:	0000000B.00000002.412227204.00000165C5F10000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	165C5F10000
Size:	12288

Details

Name:	00000008.00000003.403824063.00000000022AD000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22AD000
Size:	16384

Details

Name:	00000000.00000003.335093532.0000000005D44000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D44000
Size:	4096

Details

Name:	00000000.00000003.343474180.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.336504695.0000000005D6A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D6A000
Size:	8192

Details

Name:	00000013.00000003.488373293.000001F9B3C57000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B3C57000
Size:	16384

Details

Name:	00000018.00000002.604976578.00007FF59862D000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59862D000
Size:	20480

Details

Name:	00000011.00000003.456771150.00000000020F7000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20F7000
Size:	12288

Details

Name:	00000011.00000003.457592961.0000000000937000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	937000
Size:	4096

Details

Name:	00000000.00000003.348215404.0000000005D7B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7B000
Size:	8192

Details

Name:	0000000D.00000000.428076654.000000007FFD0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000000.00000003.338539910.0000000005D42000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D42000
Size:	8192

Details

Name:	00000013.00000003.476458290.000001F9B45B3000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B45B3000
Size:	90112

Details

Name:	00000007.00000003.408680024.0000000000DC3000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DC3000
Size:	12288

Details

Name:	00000013.00000003.474892846.000001F9B4A02000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4A02000
Size:	851968

Details

Name:	00000011.00000000.440773666.000000007FFB2000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000007.00000003.383527685.0000000002948000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2948000
Size:	32768

Details

Name:	0000000D.00000003.438779123.0000000000A2E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A2E000
Size:	4096

Details

Name:	00000013.00000003.477375736.000001F9B458F000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B458F000
Size:	4096

Details

Name:	00000000.00000003.347889739.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	131072

Details

Name:	00000000.00000003.346878951.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000007.00000002.605593986.0000000002C7D000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C7D000
Size:	4096

Details

Name:	00000000.00000003.369591458.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000D.00000003.436531146.0000000000A24000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A24000
Size:	28672

Details

Name:	00000000.00000003.373721225.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000001B.00000000.582855936.000000007FFD0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	0000000C.00000002.425497572.000000007FFC2000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000007.00000003.409310988.0000000005AA0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA0000
Size:	49152

Details

Name:	00000018.00000002.604085957.00007FF597F7E000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF597F7E000
Size:	28672

Details

Name:	00000000.00000002.384214420.0000000000C08000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C08000
Size:	4096

Details

Name:	0000000E.00000002.442392679.0000018111454000.00000004.00000001.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18111454000
Size:	8192

Details

Name:	0000000A.00000002.602165627.00007FF5988D6000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5988D6000
Size:	12288

Details

Name:	00000000.00000003.334285307.00000000011D5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11D5000
Size:	4096

Details

Name:	0000001B.00000002.585496527.00000000006D0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6D0000
Size:	16384

Details

Name:	0000000C.00000003.422275985.000000000222D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	222D000
Size:	20480

Details

Name:	00000007.00000003.409008463.0000000005AA0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA0000
Size:	65536

Details

Name:	00000000.00000003.341526188.0000000005D61000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D61000
Size:	4096

Details

Name:	00000000.00000003.369316638.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000008.00000000.394959801.000000007FFC2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000000.00000003.347652000.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000014.00000000.464969757.00007DF5BD682000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5BD682000
Size:	4096

Details

Name:	0000000D.00000003.439115914.0000000000A2E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A2E000
Size:	4096

Details

Name:	00000005.00000002.378525509.000000007EED0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7EED0000
Size:	20480

Details

Name:	0000000D.00000000.426589979.000000007FFB0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	0000000D.00000003.436310678.0000000000A9F000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A9F000
Size:	4096

Details

Name:	0000000C.00000003.423511366.000000000223E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	223E000
Size:	12288

Details

Name:	00000011.00000003.456813211.00000000020E1000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20E1000
Size:	49152

Details

Name:	00000007.00000002.607723050.0000000005DB0000.00000004.00000040.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5DB0000
Size:	8192

Details

Name:	00000000.00000003.345129376.0000000005D67000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D67000
Size:	61440

Details

Name:	0000000C.00000003.422819184.000000000222C000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	222C000
Size:	4096

Details

Name:	0000000D.00000000.427027613.00000000001B0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000007.00000003.409394814.0000000005D80000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D80000
Size:	65536

Details

Name:	0000000C.00000000.410838714.000000007FFC0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	0000000C.00000002.425487141.000000007FFC0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000000.00000003.371759159.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000001B.00000002.585320894.000000000009D000.00000004.00000001.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	9D000
Size:	12288

Details

Name:	00000000.00000003.351825718.0000000007CE0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7CE0000
Size:	49152

Details

Name:	0000001B.00000000.583472013.00000000001B0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000000.00000003.336498094.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000C.00000000.411631637.000000007FFB2000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000007.00000003.388438728.0000000005A30000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	5A30000
Size:	65536

Details

Name:	0000000C.00000000.410846268.000000007FFC2000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	0000000C.00000003.423118756.00000000005C5000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C5000
Size:	4096

Details

Name:	00000007.00000003.384834186.0000000002949000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2949000
Size:	20480

Details

Name:	00000018.00000002.602069800.0000015509B02000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15509B02000
Size:	45056

Details

Name:	0000000C.00000000.411237406.000000007FFC2000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000000.00000002.389560996.0000000006E3E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6E3E000
Size:	40960

Details

Name:	00000000.00000003.372085626.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.338613167.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000C.00000002.425087257.000000000047C000.00000004.00000020.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	47C000
Size:	8192

Details

Name:	00000000.00000003.342085073.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000000.00000003.347978325.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.374117527.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000008.00000000.389553022.000000007FFC2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000000.00000003.371727307.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000013.00000002.489858244.00007FF56B7CD000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B7CD000
Size:	4096

Details

Name:	0000000D.00000003.436857002.0000000000A24000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A24000
Size:	12288

Details

Name:	0000000A.00000002.602320900.00007FF59890E000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59890E000
Size:	4096

Details

Name:	00000007.00000002.604236657.00000000029B0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	29B0000
Size:	40960

Details

Name:	00000000.00000003.338425361.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000007.00000003.406132069.0000000005A30000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	5A30000
Size:	32768

Details

Name:	0000000B.00000003.411794035.00000165C6076000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	165C6076000
Size:	36864

Details

Name:	00000018.00000002.605119396.00007FF598667000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF598667000
Size:	4096

Details

Name:	00000000.00000003.373812091.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000B.00000002.412832969.00007FF5DB4D6000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5DB4D6000
Size:	4096

Details

Name:	00000000.00000003.334228241.00000000054D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	54D0000
Size:	8192

Details

Name:	0000000A.00000002.602387535.00007FF598964000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF598964000
Size:	8192

Details

Name:	00000000.00000003.374045794.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000013.00000002.490250892.00007FF56B96D000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B96D000
Size:	20480

Details

Name:	00000011.00000002.457800382.0000000000040000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000008.00000000.392181821.00000000001B0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000000.00000003.352765346.0000000007F00000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7F00000
Size:	65536

Details

Name:	00000000.00000003.351107044.00000000056E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	56E0000
Size:	65536

Details

Name:	00000011.00000003.454129883.00000000020FD000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20FD000
Size:	4096

Details

Name:	00000000.00000003.336976233.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000A.00000002.600791082.0000022D47E02000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22D47E02000
Size:	65536

Details

Name:	0000000C.00000000.413187733.0000000000400000.00000040.00000001.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	282624

Details

Name:	00000000.00000002.384741409.0000000001482000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1482000
Size:	4096

Details

Name:	00000007.00000002.607328134.000000000568E000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	568E000
Size:	8192

Details

Name:	00000000.00000003.372657915.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000014.00000002.477057814.00007FF5B359A000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B359A000
Size:	8192

Details

Name:	00000000.00000003.341763094.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	0000001A.00000000.565637577.00007DF51F2D0000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51F2D0000
Size:	4096

Details

Name:	00000008.00000000.389545614.000000007FFC0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000011.00000003.455220991.00000000020ED000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20ED000
Size:	8192

Details

Name:	00000011.00000000.442994027.0000000000040000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	0000001A.00000002.601420561.00000170CA890000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	170CA890000
Size:	4096

Details

Name:	00000000.00000003.351259941.0000000005710000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5710000
Size:	8192

Details

Name:	00000004.00000002.364112453.00000171B7F13000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	171B7F13000
Size:	12288

Details

Name:	00000000.00000003.350670948.00000000056E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	56E0000
Size:	65536

Details

Name:	00000000.00000003.333882586.0000000005400000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5400000
Size:	36864

Details

Name:	00000007.00000002.607592341.0000000005A90000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5A90000
Size:	49152

Details

Name:	00000011.00000000.443081687.00000000001A0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	0000000D.00000003.436340701.0000000000A33000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A33000
Size:	36864

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.369819443.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000008.00000003.395754747.000000000229D000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229D000
Size:	114688

Details

Name:	00000014.00000002.476606394.00000285CB9E0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	285CB9E0000
Size:	12288

Details

Name:	00000000.00000003.344864292.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.334414551.0000000005D43000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D43000
Size:	4096

Details

Name:	00000000.00000003.336031179.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.370525007.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000011.00000000.442340320.000000007FFD0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000000.00000003.340964030.0000000005D42000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D42000
Size:	4096

Details

Name:	00000000.00000003.340442983.0000000005D64000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D64000
Size:	53248

Details

Name:	00000000.00000003.342158970.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000005.00000002.378511534.0000000003078000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3078000
Size:	16384

Details

Name:	00000007.00000003.386724418.0000000005110000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5110000
Size:	4096

Details

Name:	00000000.00000003.339273786.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000011.00000003.455431181.00000000020EC000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20EC000
Size:	4096

Details

Name:	00000011.00000003.454265076.00000000020F4000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20F4000
Size:	32768

Details

Name:	00000007.00000003.383511700.0000000002940000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2940000
Size:	28672

Details

Name:	00000000.00000003.338463487.0000000005D4A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D4A000
Size:	4096

Details

Name:	00000000.00000002.384701289.0000000001473000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1473000
Size:	28672

Details

Name:	00000014.00000002.477277210.00007FF5B38A4000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B38A4000
Size:	8192

Details

Name:	0000000B.00000002.412478043.00000165C6108000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	165C6108000
Size:	24576

Details

Name:	00000000.00000003.372685926.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000001A.00000002.600546817.000000010017E000.00000004.00000010.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	10017E000
Size:	8192

Details

Name:	00000000.00000003.374375388.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.351404212.0000000007CC0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7CC0000
Size:	65536

Details

Name:	00000013.00000002.488768735.000001F9B3B70000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F9B3B70000
Size:	12288

Details

Name:	00000013.00000003.467799127.000001F9B456C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B456C000
Size:	4096

Details

Name:	00000000.00000003.339100099.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000D.00000003.436490851.0000000000A21000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A21000
Size:	40960

Details

Name:	00000000.00000003.352811117.0000000007D5A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7D5A000
Size:	24576

Details

Name:	00000000.00000003.337245234.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000007.00000003.503170642.0000000000DDE000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DDE000
Size:	36864

Details

Name:	0000001A.00000002.602411546.00007FF515513000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF515513000
Size:	8192

Details

Name:	0000000E.00000002.443021012.00007DF5AA020000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5AA020000
Size:	12288

Details

Name:	00000008.00000003.404265277.00000000005E4000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5E4000
Size:	8192

Details

Name:	00000000.00000003.343283348.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	0000000D.00000000.426236473.000000007FFC0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000000.00000003.335793941.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	57344

Details

Name:	00000013.00000002.489838336.00007FF56B784000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B784000
Size:	4096

Details

Name:	00000000.00000003.339436345.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000C.00000000.414613300.00000000001A0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000013.00000002.490182941.00007FF56B93D000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B93D000
Size:	20480

Details

Name:	00000000.00000003.346736353.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000011.00000002.457983535.00000000001B0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	0000000C.00000003.422218982.000000000222D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	222D000
Size:	20480

Details

Name:	00000000.00000003.338555949.0000000005D54000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D54000
Size:	4096

Details

Name:	00000011.00000000.439906231.000000007FFB0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000000.00000003.368988861.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	4096

Details

Name:	0000000D.00000003.436831484.0000000000A21000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A21000
Size:	24576

Details

Name:	00000000.00000003.350087705.0000000005D7F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7F000
Size:	61440

Details

Name:	00000011.00000003.455394481.00000000020FD000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20FD000
Size:	16384

Details

Name:	00000011.00000003.456704250.00000000020E1000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20E1000
Size:	57344

Details

Name:	00000018.00000002.604802923.00007FF5985E7000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5985E7000
Size:	8192

Details

Name:	0000001B.00000000.584324552.000000007FFC0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000000.00000003.334646840.0000000005D60000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D60000
Size:	4096

Details

Name:	0000000A.00000002.601291586.0000022D483A0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	22D483A0000
Size:	20480

Details

Name:	00000000.00000003.370533789.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000018.00000002.600719586.00000034B177B000.00000004.00000010.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	34B177B000
Size:	20480

Details

Name:	00000011.00000002.458596768.00000000025B0000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	25B0000
Size:	4096

Details

Name:	00000013.00000002.490045935.00007FF56B8A5000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56B8A5000
Size:	12288

Details

Name:	00000013.00000003.476370041.000001F9B4590000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4590000
Size:	53248

Details

Name:	00000007.00000003.384951975.0000000002944000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2944000
Size:	8192

Details

Name:	00000007.00000002.607126936.00000000050FD000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	50FD000
Size:	12288

Details

Name:	0000000C.00000003.423442107.0000000002241000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2241000
Size:	61440

Details

Name:	0000000C.00000003.423615238.0000000002237000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2237000
Size:	12288

Details

Name:	0000000B.00000002.413195403.00007FF5DB6D6000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5DB6D6000
Size:	16384

Details

Name:	00000018.00000002.603224785.000001550F0C0000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1550F0C0000
Size:	4096

Details

Name:	0000000C.00000000.414314685.000000007FFD0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	0000000D.00000003.438083615.0000000000A21000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A21000
Size:	49152

Details

Name:	00000000.00000003.351948659.0000000007CD0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7CD0000
Size:	40960

Details

Name:	00000014.00000003.476285631.00000285CBB2D000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	285CBB2D000
Size:	8192

Details

Name:	0000001A.00000002.601830756.00007FF515338000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF515338000
Size:	12288

Details

Name:	00000018.00000002.602265166.0000015509FA0000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	15509FA0000
Size:	20480

Details

Name:	00000000.00000003.342174898.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000011.00000002.458367640.000000000093A000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	93A000
Size:	4096

Details

Name:	00000000.00000003.373270434.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000018.00000003.528441659.000001550A359000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1550A359000
Size:	4096

Details

Name:	00000007.00000003.409217836.0000000005AA0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA0000
Size:	65536

Details

Name:	0000001B.00000000.584790579.000000007FFC0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	0000000C.00000000.413678571.00000000001A0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	0000000D.00000000.428915326.000000007FFC2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	0000000B.00000002.413181212.00007FF5DB6D3000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5DB6D3000
Size:	8192

Details

Name:	00000018.00000002.602630211.000001550A860000.00000004.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1550A860000
Size:	4096

Details

Name:	00000013.00000003.473627359.000001F9B45A0000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B45A0000
Size:	32768

Details

Name:	0000000B.00000002.412667260.00007DF5E54A0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E54A0000
Size:	12288

Details

Name:	0000000D.00000003.436738221.0000000000A2D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A2D000
Size:	20480

Details

Name:	00000000.00000003.369196422.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000002.604682205.0000000002B83000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2B83000
Size:	4096

Details

Name:	00000008.00000000.394393023.000000007FFC2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000000.00000003.370865670.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.373368958.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000A.00000002.600479449.00000072143FB000.00000004.00000010.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	72143FB000
Size:	20480

Details

Name:	00000007.00000003.385004351.0000000002940000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2940000
Size:	28672

Details

Name:	00000007.00000003.409548980.0000000005D80000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D80000
Size:	57344

Details

Name:	0000000D.00000003.438879436.0000000000A2E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A2E000
Size:	4096

Details

Name:	0000000E.00000000.430637369.00007DF5AA002000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5AA002000
Size:	4096

Details

Name:	00000000.00000003.333269608.00000000053B0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	53B0000
Size:	65536

Details

Name:	00000000.00000003.335506625.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.344105611.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	0000000B.00000002.412599455.00007DF5E5480000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5E5480000
Size:	4096

Details

Name:	00000000.00000003.371182997.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.348834556.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000013.00000002.489354038.000001F9B4402000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4402000
Size:	4096

Details

Name:	00000000.00000003.373844794.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000007.00000003.388347888.0000000005A50000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A50000
Size:	16384

Details

Name:	00000013.00000003.465609288.000001F9B3CA2000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B3CA2000
Size:	4096

Details

Name:	0000000C.00000003.423665859.000000000222E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	222E000
Size:	4096

Details

Name:	00000000.00000003.369640320.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.341138836.0000000005D7B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7B000
Size:	8192

Details

Name:	00000000.00000003.338395162.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	90112

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000007.00000002.605224302.0000000002C4E000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C4E000
Size:	4096

Details

Name:	00000004.00000002.364135195.00000171B8000000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	171B8000000
Size:	4096

Details

Name:	00000013.00000003.472766458.000001F9B4587000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4587000
Size:	131072

Details

Name:	0000000D.00000000.426650003.000000007FFC0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	0000000C.00000002.425415003.0000000002800000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2800000
Size:	4096

Details

Name:	00000000.00000003.351428398.0000000007CB0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7CB0000
Size:	65536

Details

Name:	00000007.00000000.379474882.0000000000B60000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	B60000
Size:	16384

Details

Name:	00000000.00000003.346561019.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	98304

Details

Name:	00000007.00000002.605957028.0000000002CAE000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2CAE000
Size:	4096

Details

Name:	0000000C.00000002.425275721.0000000000BC0000.00000004.00000040.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	BC0000
Size:	8192

Details

Name:	0000000C.00000003.423425294.00000000005C4000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C4000
Size:	8192

Details

Name:	00000007.00000003.409657947.0000000000DC1000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DC1000
Size:	61440

Details

Name:	00000000.00000003.337014888.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	73728

Details

Name:	00000018.00000002.604064218.00007FF597F3F000.00000002.00020000.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF597F3F000
Size:	4096

Details

Name:	0000000C.00000003.423588449.000000000223E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	223E000
Size:	12288

Details

Name:	00000007.00000000.382395583.0000000000B70000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	B70000
Size:	4096

Details

Name:	00000000.00000002.384844951.0000000001510000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1510000
Size:	45056

Details

Name:	00000000.00000003.372249946.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.370749432.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000013.00000003.467763050.000001F9B4569000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4569000
Size:	4096

Details

Name:	00000007.00000000.382423907.000000007F880000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F880000
Size:	4096

Details

Name:	0000001B.00000002.585345639.00000000001A0000.00000002.00020000.sdmp
TargetID:	27
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000013.00000003.488385544.000001F9B3C55000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B3C55000
Size:	8192

Details

Name:	00000000.00000003.368940358.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	4096

Details

Name:	00000000.00000003.334774511.0000000005D44000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D44000
Size:	4096

Details

Name:	00000000.00000003.369614000.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000018.00000002.600792585.00000034B18FF000.00000004.00000010.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	34B18FF000
Size:	4096

Details

Name:	0000001A.00000002.601596760.00007FF4FA3CB000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4FA3CB000
Size:	12288

Details

Name:	00000000.00000003.350308404.0000000005D92000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D92000
Size:	4096

Details

Name:	00000018.00000003.516431133.000001550EF8E000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1550EF8E000
Size:	73728

Details

Name:	00000008.00000000.393756885.000000007FFB0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000000.00000003.348850836.0000000005D42000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D42000
Size:	4096

Details

Name:	00000000.00000003.340062126.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	90112

Details

Name:	00000007.00000003.384820152.0000000002940000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2940000
Size:	32768

Details

Name:	0000000C.00000003.422675938.000000000222D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	222D000
Size:	8192

Details

Name:	00000014.00000002.476492189.000000CD99479000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	CD99479000
Size:	28672

Details

Name:	00000004.00000002.365482932.00007FF567F4F000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF567F4F000
Size:	4096

Details

Name:	00000000.00000003.338456157.0000000005D42000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D42000
Size:	8192

Details

Name:	00000000.00000003.341936589.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000005.00000002.378559661.000000007EFD2000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7EFD2000
Size:	4096

Details

Name:	00000000.00000003.353248009.0000000007630000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7630000
Size:	12288

Details

Name:	00000000.00000003.337479081.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000007.00000002.606885337.0000000005052000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5052000
Size:	4096

Details

Name:	00000011.00000000.440262409.00000000001B0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000005.00000000.376303106.000000007EFD2000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7EFD2000
Size:	4096

Details

Name:	00000000.00000003.337761711.0000000005D42000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D42000
Size:	4096

Details

Name:	00000000.00000002.384900996.0000000001530000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1530000
Size:	32768

Details

Name:	00000000.00000003.340504915.0000000005D71000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D71000
Size:	4096

Details

Name:	00000014.00000002.477367068.00007FF5B38E7000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5B38E7000
Size:	16384

Details

Name:	00000000.00000003.369422447.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.370246921.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	0000000B.00000002.412253892.00000165C5F50000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	165C5F50000
Size:	16384

Details

Name:	00000011.00000003.455714145.00000000005A4000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A4000
Size:	8192

Details

Name:	00000011.00000000.444320139.000000007FFB2000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000014.00000002.476828000.00000285CBD25000.00000004.00000040.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	285CBD25000
Size:	8192

Details

Name:	00000000.00000003.341358279.0000000005D63000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D63000
Size:	61440

Details

Name:	0000000E.00000002.443222267.00007FF5A00A8000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A00A8000
Size:	49152

Details

Name:	00000008.00000000.389142726.000000007FFB0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000000.00000003.371084536.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000013.00000003.469481215.000001F9B4584000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F9B4584000
Size:	8192

Details

Name:	0000000D.00000003.436415474.0000000000A3D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A3D000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000002.440139290.000000007FEB0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FEB0000
Size:	20480

Details

Name:	00000000.00000003.335851461.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	57344

Details

Name:	00000018.00000002.601892919.0000015509AA0000.00000004.00000001.sdmp
TargetID:	24
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15509AA0000
Size:	53248

Details

Name:	00000008.00000000.391067819.000000007FFD0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	0000000C.00000000.412778473.0000000000400000.00000040.00000001.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	4096

Details

Name:	0000000B.00000002.412779009.00007FF5DB39A000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5DB39A000
Size:	8192

Details

Name:	0000000C.00000003.422930188.000000000223D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	223D000
Size:	16384

Details

Name:	0000001A.00000003.578730308.00000170CA8F0000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	170CA8F0000
Size:	20480

Details

Name:	00000000.00000003.341686140.0000000005D7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7D000
Size:	8192

Details

Name:	00000004.00000002.363783461.00000171B7C30000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	171B7C30000
Size:	4096

Details

Name:	00000000.00000003.370828401.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.371736426.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Details

Name:	00000000.00000003.349519108.0000000005D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D5B000
Size:	208896

Details

Name:	00000000.00000003.339664533.0000000005D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D7E000
Size:	4096

Details

Name:	00000000.00000003.371018071.00000000010D4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	10D4000
Size:	8192

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

IOC Report

Files

Processes

URLs

IPs

Memdumps