Automated Malware Analysis IOC Report for

Details

Name:	00000005.00000002.534203049.0000018413813000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18413813000
Size:	90112

Details

Name:	00000000.00000003.418355553.0000000018E53000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E53000
Size:	4096

Details

Name:	00000000.00000002.536186065.0000000000C10000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C10000
Size:	4096

Details

Name:	00000000.00000002.537559158.000000000B4AB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	B4AB000
Size:	16384

Details

Name:	00000000.00000003.415078154.0000000015C37000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C37000
Size:	4096

Details

Name:	00000000.00000002.550624260.00000000189BC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	189BC000
Size:	8192

Details

Name:	00000013.00000002.441775596.0000009B2E67A000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	9B2E67A000
Size:	24576

Details

Name:	00000014.00000002.430531956.00000015BC11F000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	15BC11F000
Size:	4096

Details

Name:	00000000.00000002.548212281.0000000017EAF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17EAF000
Size:	4096

Details

Name:	00000000.00000003.462926988.0000000015A10000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15A10000
Size:	4096

Details

Name:	00000017.00000002.464100433.00000000005AB000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5AB000
Size:	8192

Details

Name:	00000000.00000003.517326480.000000000E5B5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5B5000
Size:	36864

Details

Name:	0000001A.00000002.533757663.00000059FAEFD000.00000004.00000010.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	59FAEFD000
Size:	12288

Details

Name:	00000000.00000003.413373542.0000000016014000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16014000
Size:	8192

Details

Name:	00000000.00000003.396441546.0000000015C5A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C5A000
Size:	94208

Details

Name:	00000000.00000003.263093763.0000000015BFB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15BFB000
Size:	4096

Details

Name:	00000000.00000003.459303025.000000001316D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1316D000
Size:	4096

Details

Name:	00000000.00000002.551008600.0000000018AD0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18AD0000
Size:	4096

Details

Name:	0000001A.00000002.538803877.000002170B665000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170B665000
Size:	12288

Details

Name:	00000000.00000003.386454945.0000000016241000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16241000
Size:	4096

Details

Name:	00000000.00000003.412685547.0000000015D98000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D98000
Size:	8192

Details

Name:	0000000A.00000002.536167318.00007FF5428BC000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5428BC000
Size:	20480

Details

Name:	00000007.00000003.305786122.00000292D7A63000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A63000
Size:	4096

Details

Name:	0000000B.00000003.308964893.000002A57587C000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2A57587C000
Size:	36864

Details

Name:	00000000.00000003.323807088.000000000E5B3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5B3000
Size:	4096

Details

Name:	0000000F.00000000.366905736.00007FF55D783000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55D783000
Size:	16384

Details

Name:	00000000.00000002.550405929.0000000018804000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18804000
Size:	4096

Details

Name:	0000001A.00000002.537309367.000002170A6D0000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170A6D0000
Size:	4096

Details

Name:	00000013.00000003.421993834.000001EE74E02000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74E02000
Size:	94208

Details

Name:	00000000.00000003.414150836.0000000018CE2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18CE2000
Size:	4096

Details

Name:	00000000.00000003.419063935.0000000015E21000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E21000
Size:	8192

Details

Name:	0000000A.00000002.534277999.0000023EBC680000.00000004.00000020.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	23EBC680000
Size:	32768

Details

Name:	00000000.00000002.552120932.00000000FF54A000.00000020.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute read
Base address:	FF54A000
Size:	4096

Details

Name:	00000000.00000002.548756358.0000000017F63000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17F63000
Size:	12288

Details

Name:	00000000.00000002.549291280.00000000180B9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	180B9000
Size:	4096

Details

Name:	00000001.00000002.535457094.000001FE6D473000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE6D473000
Size:	8192

Details

Name:	00000001.00000002.536487617.000001FE6DD13000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE6DD13000
Size:	20480

Details

Name:	00000017.00000002.464233384.00000000024AB000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24AB000
Size:	4096

Details

Name:	00000000.00000003.411702761.000000000F59E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F59E000
Size:	69632

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	00000001.00000002.538092178.00007FF540FE3000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF540FE3000
Size:	20480

Details

Name:	00000007.00000002.306295488.00007FF5ED568000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED568000
Size:	4096

Details

Name:	00000000.00000002.547273178.0000000017D27000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17D27000
Size:	4096

Details

Name:	00000000.00000003.412254709.0000000015E63000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E63000
Size:	8192

Details

Name:	00000000.00000003.351752349.0000000015E0C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E0C000
Size:	4096

Details

Name:	00000000.00000002.547135114.0000000017CD9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17CD9000
Size:	4096

Details

Name:	0000001A.00000002.539132037.000002170B6B9000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170B6B9000
Size:	8192

Details

Name:	00000000.00000002.549419870.0000000018195000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18195000
Size:	4096

Details

Name:	0000000B.00000002.309819122.00007FF5759B5000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5759B5000
Size:	8192

Details

Name:	00000017.00000002.463939303.00000000001EB000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1EB000
Size:	20480

Details

Name:	00000013.00000003.420989163.000001EE749B2000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE749B2000
Size:	126976

Details

Name:	00000005.00000002.536467799.00007FF526CAB000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF526CAB000
Size:	12288

Details

Name:	00000000.00000003.463152454.000000001316D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1316D000
Size:	4096

Details

Name:	0000001A.00000002.540315231.00007FF539AEC000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539AEC000
Size:	12288

Details

Name:	00000013.00000003.427812076.000001EE74E6A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74E6A000
Size:	425984

Details

Name:	00000000.00000002.542681890.000000001168A000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	1168A000
Size:	24576

Details

Name:	00000000.00000003.411484222.000000000F5FD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5FD000
Size:	16384

Details

Name:	00000017.00000002.464042006.0000000000558000.00000004.00000020.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	558000
Size:	28672

Details

Name:	00000001.00000002.535519120.000001FE6D478000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE6D478000
Size:	4096

Details

Name:	00000000.00000002.543929173.0000000013171000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	13171000
Size:	12288

Details

Name:	00000000.00000002.552018482.0000000067E19000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	67E19000
Size:	245760

Details

Name:	00000000.00000003.412146000.0000000016010000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16010000
Size:	4096

Details

Name:	00000000.00000002.550965863.0000000018AC8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18AC8000
Size:	4096

Details

Name:	00000000.00000003.417993534.0000000018E6B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E6B000
Size:	4096

Details

Name:	00000017.00000002.464015230.0000000000525000.00000004.00000020.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	525000
Size:	12288

Details

Name:	00000000.00000003.463050039.0000000013215000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13215000
Size:	172032

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.551428689.0000000018B28000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18B28000
Size:	4096

Details

Name:	00000013.00000002.442612983.000001EE74968000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74968000
Size:	8192

Details

Name:	00000013.00000002.443472906.00007FF52B463000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B463000
Size:	16384

Details

Name:	00000000.00000003.397440816.0000000013039000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13039000
Size:	4096

Details

Name:	00000000.00000003.412483264.0000000015DC4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DC4000
Size:	8192

Details

Name:	00000000.00000003.416881524.0000000018E7F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E7F000
Size:	49152

Details

Name:	00000013.00000003.426050965.000001EE74966000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74966000
Size:	20480

Details

Name:	00000000.00000002.549395434.000000001816D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1816D000
Size:	4096

Details

Name:	0000000A.00000000.295167582.00007DF543DC0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF543DC0000
Size:	12288

Details

Name:	00000000.00000002.548662823.0000000017F43000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17F43000
Size:	20480

Details

Name:	00000017.00000000.458758352.000000007F382000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F382000
Size:	4096

Details

Name:	00000001.00000002.537765986.00007DF440710000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF440710000
Size:	20480

Details

Name:	00000000.00000002.546546547.0000000017BF3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17BF3000
Size:	4096

Details

Name:	00000000.00000003.416709203.0000000018D68000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D68000
Size:	8192

Details

Name:	00000000.00000003.417375190.0000000018D5A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D5A000
Size:	4096

Details

Name:	00000000.00000003.412902444.0000000015DEA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DEA000
Size:	32768

Details

Name:	00000001.00000003.268376387.000001FE6DD18000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE6DD18000
Size:	4096

Details

Name:	0000000D.00000002.325678288.0000026002D90000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	26002D90000
Size:	4096

Details

Name:	00000000.00000002.545557847.0000000015CF7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15CF7000
Size:	4096

Details

Name:	00000000.00000003.383750928.00000000131C8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	131C8000
Size:	77824

Details

Name:	00000000.00000002.546450351.0000000016F13000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	16F13000
Size:	12288

Details

Name:	00000000.00000002.535375420.0000000000B4E000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	B4E000
Size:	8192

Details

Name:	0000001A.00000002.540982283.00007FF539C69000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539C69000
Size:	8192

Details

Name:	00000000.00000002.547341869.0000000017D45000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17D45000
Size:	4096

Details

Name:	00000006.00000002.536250304.00007FF5ED735000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED735000
Size:	20480

Details

Name:	0000001A.00000002.540518815.00007FF539B5E000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539B5E000
Size:	24576

Details

Name:	0000000B.00000002.309862271.00007FF575AEB000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF575AEB000
Size:	8192

Details

Name:	00000014.00000002.432904074.00007DF50B652000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50B652000
Size:	4096

Details

Name:	00000000.00000003.460169381.00000000130A8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130A8000
Size:	4096

Details

Name:	00000000.00000003.413767515.00000000161B4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	161B4000
Size:	8192

Details

Name:	0000000F.00000002.378597705.000001B379C70000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B379C70000
Size:	90112

Details

Name:	0000001A.00000002.539371620.00007DF53B152000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF53B152000
Size:	4096

Details

Name:	00000009.00000002.533989434.000002A6003B0000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A6003B0000
Size:	12288

Details

Name:	00000000.00000002.542140539.000000000F5E3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F5E3000
Size:	16384

Details

Name:	00000006.00000002.534971407.00007DF4ECB00000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4ECB00000
Size:	20480

Details

Name:	00000000.00000002.547083759.0000000017CCB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17CCB000
Size:	4096

Details

Name:	00000000.00000003.350738668.0000000015AF6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15AF6000
Size:	4096

Details

Name:	00000000.00000003.260319317.0000000015260000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15260000
Size:	40960

Details

Name:	00000000.00000003.396695859.00000000130DF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130DF000
Size:	196608

Details

Name:	00000000.00000003.419117128.0000000015E35000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E35000
Size:	4096

Details

Name:	00000000.00000002.550067104.00000000185A9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	185A9000
Size:	4096

Details

Name:	00000014.00000000.417735571.00007DF50B642000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50B642000
Size:	4096

Details

Name:	00000000.00000002.550152508.0000000018654000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18654000
Size:	8192

Details

Name:	0000001A.00000002.536989489.000002170A664000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170A664000
Size:	4096

Details

Name:	00000000.00000002.543606832.0000000013026000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	13026000
Size:	77824

Details

Name:	00000000.00000003.412397591.0000000015D85000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D85000
Size:	4096

Details

Name:	00000000.00000003.414186860.0000000018CF1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18CF1000
Size:	4096

Details

Name:	00000000.00000002.534103121.0000000000A50000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A50000
Size:	8192

Details

Name:	0000000F.00000002.378987778.00007FF55D529000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55D529000
Size:	8192

Details

Name:	00000000.00000003.416156411.0000000015CE7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CE7000
Size:	69632

Details

Name:	00000000.00000003.463288701.0000000015B00000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15B00000
Size:	40960

Details

Name:	00000017.00000002.464258480.0000000002669000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2669000
Size:	4096

Details

Name:	00000000.00000002.544376264.00000000156C0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	156C0000
Size:	8192

Details

Name:	00000000.00000003.417393673.0000000018D64000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D64000
Size:	4096

Details

Name:	00000000.00000002.543527281.0000000012F8F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12F8F000
Size:	28672

Details

Name:	00000000.00000003.412048405.000000001602D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1602D000
Size:	4096

Details

Name:	00000000.00000003.459167828.00000000130DA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130DA000
Size:	16384

Details

Name:	00000000.00000003.411255862.0000000015CC2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CC2000
Size:	94208

Details

Name:	00000000.00000003.351358299.0000000015DF4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DF4000
Size:	4096

Details

Name:	00000000.00000003.258811096.000000000E5A5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5A5000
Size:	20480

Details

Name:	0000000B.00000002.309958291.00007FF575B19000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF575B19000
Size:	24576

Details

Name:	00000000.00000002.547046402.0000000017CA5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17CA5000
Size:	4096

Details

Name:	00000000.00000003.412506824.0000000015DDC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DDC000
Size:	49152

Details

Name:	00000000.00000003.414283929.0000000018D12000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D12000
Size:	16384

Details

Name:	00000013.00000002.442270250.000001EE740CE000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE740CE000
Size:	81920

Details

Name:	00000000.00000003.350698474.0000000015AE6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15AE6000
Size:	4096

Details

Name:	00000000.00000002.536282865.0000000000C25000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	C25000
Size:	24576

Details

Name:	00000000.00000003.418848337.0000000018E70000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E70000
Size:	4096

Details

Name:	0000000D.00000002.326717026.00007FF51BCFF000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51BCFF000
Size:	16384

Details

Name:	00000006.00000002.534059424.000001E968770000.00000004.00000040.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1E968770000
Size:	4096

Details

Name:	00000000.00000003.416869657.0000000018E7A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E7A000
Size:	4096

Details

Name:	00000000.00000002.544353559.0000000015570000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15570000
Size:	4096

Details

Name:	00000000.00000002.540238977.000000000DD9E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DD9E000
Size:	8192

Details

Name:	00000000.00000002.549163648.0000000017FDF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17FDF000
Size:	4096

Details

Name:	00000006.00000000.282494201.00007DF5EEC40000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EEC40000
Size:	4096

Details

Name:	00000000.00000002.549117220.0000000017FC7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17FC7000
Size:	4096

Details

Name:	00000000.00000003.383442423.000000001309B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1309B000
Size:	8192

Details

Name:	00000000.00000003.261925673.000000000E5D1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5D1000
Size:	4096

Details

Name:	00000009.00000002.534513498.000002A67FE00000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A67FE00000
Size:	4096

Details

Name:	00000007.00000002.306089243.00000292D7A32000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A32000
Size:	24576

Details

Name:	0000000F.00000000.366801412.00007DF55EBD0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55EBD0000
Size:	4096

Details

Name:	00000000.00000002.549902580.00000000183E4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	183E4000
Size:	16384

Details

Name:	00000000.00000003.462955973.0000000015A17000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15A17000
Size:	417792

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.260270306.0000000012FD9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12FD9000
Size:	229376

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.544365620.00000000156B0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	156B0000
Size:	4096

Details

Name:	0000000A.00000002.534728735.0000023EBC8F9000.00000004.00000040.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	23EBC8F9000
Size:	4096

Details

Name:	00000001.00000002.537053050.000001FE728F0000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE728F0000
Size:	4096

Details

Name:	00000000.00000003.259301871.000000000E5C8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5C8000
Size:	12288

Details

Name:	00000001.00000002.538358611.00007FF541125000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541125000
Size:	4096

Details

Name:	00000000.00000003.413053364.0000000015D76000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D76000
Size:	4096

Details

Name:	00000005.00000002.534621874.00000184138CB000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	184138CB000
Size:	106496

Details

Name:	00000000.00000003.397374359.000000001316F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1316F000
Size:	4096

Details

Name:	0000001A.00000002.537428016.000002170A740000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170A740000
Size:	4096

Details

Name:	00000005.00000002.537019945.00007FF526D44000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF526D44000
Size:	8192

Details

Name:	00000000.00000003.416684730.0000000018D5F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D5F000
Size:	4096

Details

Name:	00000000.00000003.413877355.0000000015DC9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DC9000
Size:	4096

Details

Name:	00000009.00000002.533510670.000000BC0B97E000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	BC0B97E000
Size:	8192

Details

Name:	00000005.00000002.536572202.00007FF526CBF000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF526CBF000
Size:	16384

Details

Name:	00000000.00000003.412616401.0000000015D6C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D6C000
Size:	8192

Details

Name:	0000000F.00000002.378507498.000001B379C13000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B379C13000
Size:	86016

Details

Name:	00000000.00000003.460193812.00000000130C3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130C3000
Size:	12288

Details

Name:	0000000D.00000002.326583908.00007FF51BB99000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51BB99000
Size:	8192

Details

Name:	00000000.00000002.549312514.00000000180E1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	180E1000
Size:	4096

Details

Name:	00000000.00000002.551696652.0000000067BC1000.00000020.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	67BC1000
Size:	2236416

Details

Name:	00000000.00000002.548734443.0000000017F53000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17F53000
Size:	61440

Details

Name:	0000001A.00000002.536862678.0000020F0A2FD000.00000004.00000040.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	20F0A2FD000
Size:	8192

Details

Name:	00000000.00000002.540082324.000000000D99F000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	D99F000
Size:	4096

Details

Name:	00000013.00000002.443277038.00007FF52B378000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B378000
Size:	16384

Details

Name:	00000000.00000003.411468104.000000000F5F7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5F7000
Size:	4096

Details

Name:	00000000.00000002.545149945.0000000015AF1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15AF1000
Size:	4096

Details

Name:	00000000.00000002.543897696.0000000013168000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	13168000
Size:	16384

Details

Name:	00000007.00000003.305796117.00000292D7A60000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A60000
Size:	4096

Details

Name:	00000000.00000002.535733959.0000000000B68000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	B68000
Size:	12288

Details

Name:	00000017.00000002.464507701.0000000002852000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2852000
Size:	16384

Details

Name:	00000000.00000003.517015201.000000001230F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1230F000
Size:	32768

Details

Name:	00000000.00000002.543668539.0000000013090000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	13090000
Size:	61440

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.386568216.000000001622D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1622D000
Size:	49152

Details

Name:	0000001A.00000002.534309165.0000020F08889000.00000004.00000020.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	20F08889000
Size:	176128

Details

Name:	00000017.00000000.457652533.000000000286B000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	286B000
Size:	16384

Details

Name:	00000017.00000000.457693812.000000007F390000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F390000
Size:	12288

Details

Name:	00000017.00000002.464031083.0000000000550000.00000004.00000020.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	550000
Size:	24576

Details

Name:	0000001A.00000002.538204154.000002170B25C000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170B25C000
Size:	4096

Details

Name:	00000000.00000003.418300564.0000000018D6D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D6D000
Size:	4096

Details

Name:	00000009.00000002.535050749.00007DF591480000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF591480000
Size:	4096

Details

Name:	00000000.00000002.542699682.00000000116CD000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	116CD000
Size:	12288

Details

Name:	0000001A.00000002.536900498.000002170A64C000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170A64C000
Size:	4096

Details

Name:	00000000.00000003.260207363.0000000012F98000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12F98000
Size:	217088

Details

Name:	0000001A.00000002.536535515.0000020F0A180000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20F0A180000
Size:	4096

Details

Name:	00000000.00000003.416663247.0000000018D55000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D55000
Size:	4096

Details

Name:	00000000.00000003.417630968.0000000015DEA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DEA000
Size:	32768

Details

Name:	00000000.00000002.544225895.000000001517B000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1517B000
Size:	4096

Details

Name:	00000000.00000002.550199947.0000000018690000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18690000
Size:	8192

Details

Name:	00000000.00000003.414564418.000000000F58E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F58E000
Size:	36864

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.459883095.00000000131C8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	131C8000
Size:	20480

Details

Name:	00000000.00000002.541083138.000000000E5A7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E5A7000
Size:	20480

Details

Name:	00000013.00000003.420915496.000001EE74960000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74960000
Size:	53248

Details

Name:	00000000.00000003.262867755.0000000015A31000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15A31000
Size:	294912

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000007.00000002.306379857.00007FF5ED859000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED859000
Size:	8192

Details

Name:	00000000.00000002.550987869.0000000018ACC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18ACC000
Size:	4096

Details

Name:	00000000.00000002.549034644.0000000017FB3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17FB3000
Size:	12288

Details

Name:	0000000B.00000002.309484186.000002A57586D000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A57586D000
Size:	20480

Details

Name:	00000005.00000000.280834863.00007DF528200000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF528200000
Size:	4096

Details

Name:	00000000.00000003.462628181.0000000015B6A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15B6A000
Size:	4096

Details

Name:	00000000.00000003.351391589.0000000015DFE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DFE000
Size:	4096

Details

Name:	00000013.00000002.441846744.0000009B2EB7B000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	9B2EB7B000
Size:	20480

Details

Name:	0000000D.00000002.326274570.0000026002E90000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	26002E90000
Size:	24576

Details

Name:	00000000.00000002.548994625.0000000017FA1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17FA1000
Size:	4096

Details

Name:	00000001.00000003.259662168.000001FE72A20000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE72A20000
Size:	4096

Details

Name:	0000001A.00000002.540766147.00007FF539BFB000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539BFB000
Size:	8192

Details

Name:	00000005.00000002.534915285.0000018413E90000.00000008.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page write copy
Base address:	18413E90000
Size:	266240

Details

Name:	00000000.00000002.543236302.0000000011C4F000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	11C4F000
Size:	40960

Details

Name:	00000000.00000003.411539550.000000000F666000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F666000
Size:	8192

Details

Name:	00000007.00000002.306305928.00007FF5ED7EF000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED7EF000
Size:	16384

Details

Name:	00000000.00000003.517263120.000000000E5BE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5BE000
Size:	4096

Details

Name:	0000000B.00000002.309909852.00007FF575B04000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF575B04000
Size:	28672

Details

Name:	00000009.00000002.534137259.000002A600602000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A600602000
Size:	4096

Details

Name:	00000000.00000002.545827342.00000000161B4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	161B4000
Size:	8192

Details

Name:	00000001.00000002.537944554.00007FF540C6A000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF540C6A000
Size:	24576

Details

Name:	00000014.00000002.433002938.00007FF50A0FF000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50A0FF000
Size:	4096

Details

Name:	00000000.00000003.260856738.000000000E5D1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5D1000
Size:	24576

Details

Name:	00000000.00000003.417413226.0000000018D6D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D6D000
Size:	4096

Details

Name:	00000000.00000002.550713999.0000000018A21000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18A21000
Size:	4096

Details

Name:	0000000A.00000002.533675494.0000023EBC4A0000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	23EBC4A0000
Size:	4096

Details

Name:	00000000.00000002.540269196.000000000DE9E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DE9E000
Size:	8192

Details

Name:	00000000.00000002.540472861.000000000DFFC000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DFFC000
Size:	16384

Details

Name:	00000000.00000003.418939328.0000000015C9D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C9D000
Size:	8192

Details

Name:	00000000.00000003.418328658.0000000018E05000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E05000
Size:	4096

Details

Name:	00000000.00000003.397066517.0000000013068000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13068000
Size:	86016

Details

Name:	00000000.00000003.386671638.0000000000A70000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A70000
Size:	32768

Details

Name:	00000000.00000002.544239073.00000000151F0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	151F0000
Size:	4096

Details

Name:	00000000.00000003.349871059.000000000F66C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F66C000
Size:	176128

Details

Name:	00000000.00000003.351462740.0000000015E19000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E19000
Size:	20480

Details

Name:	0000000A.00000002.534794666.0000023EBCB10000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	23EBCB10000
Size:	4096

Details

Name:	00000007.00000000.283844502.00007DF5EED42000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EED42000
Size:	4096

Details

Name:	00000007.00000002.306315596.00007FF5ED7F8000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED7F8000
Size:	16384

Details

Name:	00000000.00000003.351874395.0000000015DEA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DEA000
Size:	4096

Details

Name:	00000000.00000003.412677761.0000000015D94000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D94000
Size:	4096

Details

Name:	00000000.00000003.418434148.0000000018E7A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E7A000
Size:	4096

Details

Name:	00000000.00000003.416575474.0000000018CEC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18CEC000
Size:	4096

Details

Name:	0000000A.00000000.295162208.00007DF543DB2000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF543DB2000
Size:	4096

Details

Name:	00000000.00000003.263246828.0000000015A31000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15A31000
Size:	294912

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.534055889.00000000008A2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8A2000
Size:	4096

Details

Name:	00000000.00000003.411888196.0000000015F90000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15F90000
Size:	4096

Details

Name:	00000000.00000002.542176746.000000000F5F0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F5F0000
Size:	4096

Details

Name:	00000001.00000002.536932836.000001FE6E430000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FE6E430000
Size:	65536

Details

Name:	00000000.00000003.415938971.0000000015DEA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DEA000
Size:	32768

Details

Name:	00000014.00000002.430505605.00000015BC09A000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15BC09A000
Size:	24576

Details

Name:	0000000F.00000002.378940950.00007FF55D286000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55D286000
Size:	20480

Details

Name:	0000000B.00000002.309703870.00007DF577042000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF577042000
Size:	4096

Details

Name:	00000000.00000003.396802736.0000000013164000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13164000
Size:	4096

Details

Name:	00000005.00000002.534808717.0000018413C00000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	18413C00000
Size:	12288

Details

Name:	00000000.00000002.543757684.00000000130DA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	130DA000
Size:	16384

Details

Name:	00000000.00000003.461124430.0000000015D31000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D31000
Size:	12288

Details

Name:	0000001A.00000002.540445020.00007FF539B30000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539B30000
Size:	24576

Details

Name:	0000000B.00000002.309264575.000002A575750000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A575750000
Size:	102400

Details

Name:	00000000.00000002.540175433.000000000DC1F000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DC1F000
Size:	4096

Details

Name:	00000001.00000002.538816894.00007FF5412A1000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5412A1000
Size:	32768

Details

Name:	00000000.00000002.539162069.000000000D779000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	D779000
Size:	4096

Details

Name:	00000000.00000003.460251272.00000000130DF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130DF000
Size:	208896

Details

Name:	0000000D.00000003.325244212.0000026002E4E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	26002E4E000
Size:	12288

Details

Name:	00000000.00000003.396678970.00000000130D7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130D7000
Size:	4096

Details

Name:	00000000.00000002.539047342.000000000D750000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	D750000
Size:	57344

Details

Name:	0000000D.00000002.326497193.00007FF51B5A2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51B5A2000
Size:	4096

Details

Name:	00000017.00000002.464125514.00000000006CC000.00000004.00000010.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	6CC000
Size:	16384

Details

Name:	00000000.00000003.459494364.00000000130A2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130A2000
Size:	16384

Details

Name:	00000000.00000002.550300949.000000001871C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1871C000
Size:	8192

Details

Name:	00000000.00000003.397572770.000000000F66C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F66C000
Size:	208896

Details

Name:	00000000.00000003.459721249.0000000013159000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13159000
Size:	4096

Details

Name:	00000014.00000003.430286170.000001338A79D000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1338A79D000
Size:	4096

Details

Name:	00000013.00000003.420946123.000001EE7497C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE7497C000
Size:	69632

Details

Name:	00000000.00000002.551343573.0000000018B0C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18B0C000
Size:	4096

Details

Name:	00000013.00000002.443383949.00007FF52B3D2000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B3D2000
Size:	12288

Details

Name:	00000013.00000000.416375868.00007DF52C8B0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF52C8B0000
Size:	4096

Details

Name:	00000007.00000002.306125404.00000292D7A62000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A62000
Size:	4096

Details

Name:	00000000.00000002.546681682.0000000017C13000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C13000
Size:	4096

Details

Name:	0000000D.00000002.326640600.00007FF51BC2A000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51BC2A000
Size:	20480

Details

Name:	00000000.00000003.263303744.0000000013143000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13143000
Size:	57344

Details

Name:	00000000.00000002.533780508.00000000007A3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7A3000
Size:	118784

Details

Name:	00000000.00000003.263403796.00000000131C8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	131C8000
Size:	36864

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.262836902.0000000015C5A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C5A000
Size:	4096

Details

Name:	00000000.00000003.351630185.0000000015DDB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DDB000
Size:	4096

Details

Name:	00000000.00000003.411393552.0000000015F90000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15F90000
Size:	4096

Details

Name:	00000000.00000003.460360031.000000001315D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1315D000
Size:	24576

Details

Name:	00000000.00000003.351147740.000000000F66C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F66C000
Size:	176128

Details

Name:	00000007.00000002.306170994.00000292D7C00000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	292D7C00000
Size:	4096

Details

Name:	00000000.00000003.351947283.0000000015E07000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E07000
Size:	4096

Details

Name:	00000000.00000002.544143781.00000000148E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	148E0000
Size:	4096

Details

Name:	00000000.00000002.551590831.0000000018BBC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18BBC000
Size:	4096

Details

Name:	00000000.00000003.263363412.0000000013175000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13175000
Size:	290816

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.416470560.0000000015DBD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DBD000
Size:	4096

Details

Name:	00000000.00000003.415741285.0000000015D87000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D87000
Size:	4096

Details

Name:	0000000A.00000002.536470372.00007FF542953000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF542953000
Size:	16384

Details

Name:	00000001.00000002.534254017.000001FE6D350000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FE6D350000
Size:	16384

Details

Name:	00000000.00000002.536149703.0000000000C00000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C00000
Size:	4096

Details

Name:	00000013.00000002.443345136.00007FF52B3A1000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B3A1000
Size:	49152

Details

Name:	00000000.00000002.538190874.000000000C7A5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C7A5000
Size:	8192

Details

Name:	00000000.00000002.534569941.0000000000AED000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	AED000
Size:	307200

Details

Name:	00000000.00000003.463090734.0000000013159000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13159000
Size:	4096

Details

Name:	00000000.00000003.351058410.000000000F602000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F602000
Size:	4096

Details

Name:	00000005.00000002.536998194.00007FF526D36000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF526D36000
Size:	20480

Details

Name:	00000001.00000002.538736091.00007FF541200000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541200000
Size:	4096

Details

Name:	00000000.00000003.419053315.0000000015CD1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CD1000
Size:	4096

Details

Name:	00000000.00000003.415530270.0000000016039000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16039000
Size:	4096

Details

Name:	00000000.00000003.458933232.0000000015D46000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D46000
Size:	28672

Details

Name:	00000009.00000002.533624558.000000BC0BCFD000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	BC0BCFD000
Size:	12288

Details

Name:	00000000.00000002.551083685.0000000018ADE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18ADE000
Size:	4096

Details

Name:	00000000.00000002.545911951.0000000016202000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	16202000
Size:	28672

Details

Name:	00000000.00000003.418505742.0000000018D5A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D5A000
Size:	4096

Details

Name:	00000000.00000003.517027598.0000000012320000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12320000
Size:	8192

Details

Name:	00000000.00000002.547619582.0000000017DF0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17DF0000
Size:	57344

Details

Name:	00000000.00000003.397276287.000000001316F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1316F000
Size:	4096

Details

Name:	00000001.00000002.534673579.000001FE6D413000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE6D413000
Size:	86016

Details

Name:	0000001A.00000002.539910882.00007FF539893000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539893000
Size:	4096

Details

Name:	00000000.00000003.462519042.0000000015D31000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D31000
Size:	12288

Details

Name:	0000000D.00000002.326197632.0000026002E3C000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	26002E3C000
Size:	45056

Details

Name:	00000000.00000003.416484131.0000000015DC2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DC2000
Size:	4096

Details

Name:	00000000.00000002.537490052.00000000046D0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	46D0000
Size:	12288

Details

Name:	00000000.00000003.460286010.0000000013113000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13113000
Size:	4096

Details

Name:	00000000.00000003.396929162.0000000013209000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13209000
Size:	221184

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.459589023.00000000130DF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130DF000
Size:	208896

Details

Name:	00000000.00000003.416897878.0000000015CDD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CDD000
Size:	36864

Details

Name:	00000000.00000003.417765692.0000000018CFF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18CFF000
Size:	8192

Details

Name:	0000000A.00000002.534905605.0000023EBD1E0000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	23EBD1E0000
Size:	20480

Details

Name:	00000000.00000003.517163926.0000000016255000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16255000
Size:	8192

Details

Name:	0000000F.00000002.378485138.000001B379C00000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B379C00000
Size:	4096

Details

Name:	00000000.00000003.262749089.0000000015C00000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C00000
Size:	4096

Details

Name:	00000000.00000003.418514278.0000000018D5F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D5F000
Size:	4096

Details

Name:	00000001.00000002.538203299.00007FF5410DD000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5410DD000
Size:	20480

Details

Name:	0000000D.00000002.326226626.0000026002E56000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	26002E56000
Size:	102400

Details

Name:	00000000.00000003.396825434.000000001316F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1316F000
Size:	4096

Details

Name:	00000000.00000002.550817800.0000000018A30000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18A30000
Size:	393216

Details

Name:	00000000.00000003.411311810.0000000015D43000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D43000
Size:	4096

Details

Name:	00000017.00000003.460976778.00000000005AD000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AD000
Size:	40960

Details

Name:	0000000D.00000002.326293824.0000026002F00000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	26002F00000
Size:	4096

Details

Name:	00000000.00000002.550024402.0000000018531000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18531000
Size:	4096

Details

Name:	00000000.00000002.551513610.0000000018B32000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18B32000
Size:	4096

Details

Name:	00000000.00000003.418492058.0000000018D55000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D55000
Size:	4096

Details

Name:	00000000.00000002.551231162.0000000018AF0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18AF0000
Size:	4096

Details

Name:	0000000B.00000002.309728576.00007FF575389000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF575389000
Size:	4096

Details

Name:	00000001.00000002.539080157.00007FF5412FF000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5412FF000
Size:	16384

Details

Name:	00000000.00000002.543852871.000000001315B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1315B000
Size:	4096

Details

Name:	00000000.00000003.418831971.0000000018E6B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E6B000
Size:	4096

Details

Name:	00000017.00000003.463696488.00000000005AA000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5AA000
Size:	12288

Details

Name:	00000000.00000003.415305689.0000000016008000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16008000
Size:	4096

Details

Name:	00000005.00000002.534308252.000001841383E000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1841383E000
Size:	155648

Details

Name:	00000000.00000003.414196300.0000000018CF6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18CF6000
Size:	4096

Details

Name:	00000000.00000002.542191956.000000000F5F2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F5F2000
Size:	8192

Details

Name:	00000000.00000003.262941493.0000000013166000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13166000
Size:	4096

Details

Name:	00000000.00000003.351026221.000000000F5F9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5F9000
Size:	4096

Details

Name:	0000001A.00000003.469174987.0000020F0891D000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20F0891D000
Size:	4096

Details

Name:	00000013.00000003.427151478.000001EE74992000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74992000
Size:	425984

Details

Name:	00000006.00000002.533968365.0000008674F7E000.00000004.00000010.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8674F7E000
Size:	8192

Details

Name:	00000000.00000003.349265252.0000000015B91000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15B91000
Size:	4096

Details

Name:	00000000.00000003.263330759.000000001315B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1315B000
Size:	4096

Details

Name:	00000000.00000002.548142554.0000000017EA1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17EA1000
Size:	28672

Details

Name:	00000000.00000002.543075952.0000000011B7F000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	11B7F000
Size:	40960

Details

Name:	00000005.00000002.533600005.00000066903FE000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	66903FE000
Size:	8192

Details

Name:	00000013.00000002.442661870.000001EE7497F000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE7497F000
Size:	65536

Details

Name:	00000000.00000003.396339404.0000000015D2A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D2A000
Size:	4096

Details

Name:	00000001.00000002.537072433.000001FE72900000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE72900000
Size:	4096

Details

Name:	00000000.00000003.351976351.0000000015E11000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E11000
Size:	4096

Details

Name:	00000000.00000002.547757814.0000000017E27000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17E27000
Size:	12288

Details

Name:	00000000.00000003.459410247.00000000131E6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	131E6000
Size:	139264

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.262765255.0000000015C5A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C5A000
Size:	4096

Details

Name:	00000000.00000003.397232937.0000000013159000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13159000
Size:	4096

Details

Name:	0000000B.00000002.309812143.00007FF5759AF000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5759AF000
Size:	8192

Details

Name:	00000000.00000002.548070390.0000000017E87000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17E87000
Size:	12288

Details

Name:	00000000.00000002.544617086.0000000015960000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15960000
Size:	4096

Details

Name:	00000000.00000002.537800729.000000000C566000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C566000
Size:	102400

Details

Name:	0000000F.00000002.378773445.000001B37A402000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B37A402000
Size:	4096

Details

Name:	00000000.00000002.550731995.0000000018A23000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18A23000
Size:	4096

Details

Name:	00000000.00000002.550050385.0000000018581000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18581000
Size:	4096

Details

Name:	0000001A.00000002.539486181.00007FF5393B6000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5393B6000
Size:	122880

Details

Name:	0000000B.00000002.309167549.000000BC02CFE000.00000004.00000010.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	BC02CFE000
Size:	8192

Details

Name:	00000000.00000002.547168885.0000000017CF1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17CF1000
Size:	4096

Details

Name:	00000000.00000003.396168738.0000000015C88000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C88000
Size:	8192

Details

Name:	0000001A.00000002.537254847.000002170A6B8000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170A6B8000
Size:	4096

Details

Name:	00000000.00000003.418607420.0000000018E05000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E05000
Size:	4096

Details

Name:	00000000.00000002.543726118.00000000130C7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	130C7000
Size:	8192

Details

Name:	00000000.00000002.549301617.00000000180CD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	180CD000
Size:	4096

Details

Name:	00000006.00000002.535598499.00007FF5ED595000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED595000
Size:	4096

Details

Name:	00000000.00000003.349444293.0000000015DF9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DF9000
Size:	4096

Details

Name:	00000000.00000003.419142971.0000000015E3F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E3F000
Size:	4096

Details

Name:	00000000.00000003.418037099.0000000018E7A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E7A000
Size:	4096

Details

Name:	00000000.00000003.417227170.0000000015CC0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CC0000
Size:	4096

Details

Name:	00000000.00000003.350491254.000000000F698000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F698000
Size:	28672

Details

Name:	00000000.00000002.536815675.0000000002A10000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A10000
Size:	36864

Details

Name:	0000000D.00000002.325649129.0000026002C60000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26002C60000
Size:	12288

Details

Name:	00000013.00000002.441795151.0000009B2E87F000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	9B2E87F000
Size:	4096

Details

Name:	00000000.00000003.411359171.0000000015E00000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E00000
Size:	28672

Details

Name:	00000000.00000003.383469956.00000000130BA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130BA000
Size:	28672

Details

Name:	00000000.00000003.349321860.0000000015D64000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D64000
Size:	4096

Details

Name:	00000000.00000003.262720109.0000000015AEE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15AEE000
Size:	8192

Details

Name:	00000000.00000003.419228102.0000000018DC8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18DC8000
Size:	4096

Details

Name:	00000000.00000003.415789945.0000000015D9B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D9B000
Size:	4096

Details

Name:	00000000.00000002.549859338.00000000183A8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	183A8000
Size:	8192

Details

Name:	00000007.00000002.306361555.00007FF5ED835000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED835000
Size:	20480

Details

Name:	00000000.00000003.417729819.0000000018CF1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18CF1000
Size:	4096

Details

Name:	00000017.00000002.464297752.000000000274C000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	274C000
Size:	4096

Details

Name:	00000000.00000003.412361933.0000000015D6C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D6C000
Size:	8192

Details

Name:	00000013.00000002.442628736.000001EE7496C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE7496C000
Size:	36864

Details

Name:	00000013.00000003.422014914.000001EE74990000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74990000
Size:	94208

Details

Name:	00000000.00000002.547553708.0000000017DE3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17DE3000
Size:	4096

Details

Name:	00000000.00000002.540682919.000000000E340000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E340000
Size:	4096

Details

Name:	00000017.00000002.464414238.000000000281F000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	281F000
Size:	16384

Details

Name:	00000009.00000002.536138189.00007FF58FFA9000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58FFA9000
Size:	8192

Details

Name:	00000000.00000003.517316704.000000000E5B3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5B3000
Size:	4096

Details

Name:	00000000.00000003.416985277.0000000015E26000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E26000
Size:	4096

Details

Name:	00000000.00000003.350419344.00000000130C7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130C7000
Size:	8192

Details

Name:	00000006.00000002.535568281.00007FF5ED575000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED575000
Size:	16384

Details

Name:	00000009.00000002.534672239.000002A67FE29000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A67FE29000
Size:	40960

Details

Name:	00000009.00000002.535917127.00007FF58FF50000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58FF50000
Size:	12288

Details

Name:	00000000.00000003.396687219.00000000130DA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130DA000
Size:	16384

Details

Name:	00000000.00000003.351430119.0000000015E0C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E0C000
Size:	4096

Details

Name:	0000000F.00000002.378756146.000001B37A350000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B37A350000
Size:	4096

Details

Name:	00000000.00000003.350388006.00000000130A2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130A2000
Size:	16384

Details

Name:	0000001A.00000002.533952125.00000059FB1FF000.00000004.00000010.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	59FB1FF000
Size:	4096

Details

Name:	0000000B.00000002.309767654.00007FF5756EC000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5756EC000
Size:	32768

Details

Name:	00000009.00000000.287083954.00007FF590033000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF590033000
Size:	16384

Details

Name:	00000000.00000003.413469728.000000001612E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1612E000
Size:	8192

Details

Name:	0000001A.00000002.539254184.00007DF439010000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF439010000
Size:	20480

Details

Name:	0000001A.00000002.541203704.00007FFF9D5E0000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFF9D5E0000
Size:	4096

Details

Name:	00000000.00000003.412734486.0000000015DB6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DB6000
Size:	4096

Details

Name:	00000000.00000002.546526192.0000000017BF1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17BF1000
Size:	4096

Details

Name:	00000000.00000002.534223517.0000000000AAB000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	AAB000
Size:	245760

Details

Name:	0000001A.00000002.536683006.0000020F0A199000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20F0A199000
Size:	16384

Details

Name:	00000013.00000002.442143319.000001EE7404E000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE7404E000
Size:	4096

Details

Name:	00000000.00000003.349574960.000000000F536000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F536000
Size:	348160

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.412119931.0000000016001000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16001000
Size:	4096

Details

Name:	00000000.00000003.383374763.0000000013037000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13037000
Size:	114688

Details

Name:	00000000.00000003.459159881.00000000130D7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130D7000
Size:	4096

Details

Name:	00000000.00000003.418734419.0000000018E7F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E7F000
Size:	28672

Details

Name:	00000001.00000002.537006622.000001FE6E790000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE6E790000
Size:	4096

Details

Name:	00000000.00000003.458918979.0000000015D35000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D35000
Size:	4096

Details

Name:	00000000.00000002.542392326.000000000F666000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F666000
Size:	8192

Details

Name:	00000000.00000002.543042477.0000000011B4E000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	11B4E000
Size:	12288

Details

Name:	00000005.00000002.533572743.00000066902FD000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	66902FD000
Size:	12288

Details

Name:	00000017.00000000.458011057.000000007F370000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F370000
Size:	4096

Details

Name:	00000014.00000002.433012399.00007FF50A101000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50A101000
Size:	4096

Details

Name:	00000001.00000002.537358535.000001FE72C3D000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE72C3D000
Size:	49152

Details

Name:	00000001.00000002.538996826.00007FF5412E0000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5412E0000
Size:	8192

Details

Name:	00000000.00000003.397412878.0000000015B00000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15B00000
Size:	40960

Details

Name:	00000000.00000003.386435776.000000001624F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1624F000
Size:	32768

Details

Name:	00000000.00000003.260079837.00000000130BA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130BA000
Size:	28672

Details

Name:	00000000.00000003.417074009.0000000015E57000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E57000
Size:	4096

Details

Name:	00000000.00000003.415096895.0000000015C3C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C3C000
Size:	4096

Details

Name:	00000000.00000002.551198071.0000000018AEC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18AEC000
Size:	4096

Details

Name:	00000000.00000003.257163338.000000000DEF0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DEF0000
Size:	4096

Details

Name:	00000000.00000003.413137931.0000000015DA2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DA2000
Size:	4096

Details

Name:	00000000.00000002.540848419.000000000E52D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E52D000
Size:	40960

Details

Name:	00000000.00000003.459466961.0000000013081000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13081000
Size:	12288

Details

Name:	00000000.00000003.460140942.000000001309F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1309F000
Size:	4096

Details

Name:	00000000.00000003.458982423.0000000018E6B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E6B000
Size:	4096

Details

Name:	00000000.00000002.547859285.0000000017E3B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17E3B000
Size:	77824

Details

Name:	00000000.00000002.551019253.0000000018AD2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18AD2000
Size:	4096

Details

Name:	00000007.00000002.306223926.00007DF5EED50000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EED50000
Size:	12288

Details

Name:	00000000.00000003.415639626.0000000015D65000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D65000
Size:	4096

Details

Name:	00000013.00000002.441897982.0000009B2EE7F000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	9B2EE7F000
Size:	4096

Details

Name:	00000000.00000002.551029758.0000000018AD4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18AD4000
Size:	4096

Details

Name:	0000000D.00000003.325265037.0000026002E48000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	26002E48000
Size:	4096

Details

Name:	00000013.00000002.441740398.0000009B2E16C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	9B2E16C000
Size:	16384

Details

Name:	00000000.00000003.383682392.0000000013168000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13168000
Size:	16384

Details

Name:	00000000.00000003.260821213.000000000E5D7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5D7000
Size:	98304

Details

Name:	00000000.00000003.419073064.0000000015E26000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E26000
Size:	4096

Details

Name:	00000000.00000003.411479039.000000000F5FB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5FB000
Size:	4096

Details

Name:	0000001A.00000002.540802091.00007FF539C05000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539C05000
Size:	8192

Details

Name:	00000014.00000002.432287590.000001338A787000.00000004.00000020.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1338A787000
Size:	61440

Details

Name:	00000013.00000003.421924690.000001EE7496E000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE7496E000
Size:	65536

Details

Name:	00000000.00000003.412237936.00000000161B4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	161B4000
Size:	8192

Details

Name:	0000001A.00000002.540005685.00007FF5398E3000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5398E3000
Size:	4096

Details

Name:	00000000.00000003.263055085.0000000013144000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13144000
Size:	49152

Details

Name:	0000000F.00000002.378327925.0000000C7B07E000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	C7B07E000
Size:	8192

Details

Name:	00000000.00000003.397337781.000000001315D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1315D000
Size:	24576

Details

Name:	00000000.00000003.383229325.0000000015C2B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C2B000
Size:	65536

Details

Name:	00000007.00000002.306032099.00000292D7980000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	292D7980000
Size:	16384

Details

Name:	00000007.00000002.306175412.00000292D7E00000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	292D7E00000
Size:	12288

Details

Name:	00000000.00000002.547465710.0000000017D95000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17D95000
Size:	4096

Details

Name:	00000000.00000003.411461818.000000000F5F4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5F4000
Size:	8192

Details

Name:	0000000F.00000002.378833060.00007DF55EBE2000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55EBE2000
Size:	4096

Details

Name:	00000006.00000002.535942040.00007FF5ED6F8000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED6F8000
Size:	16384

Details

Name:	00000000.00000002.547057782.0000000017CBB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17CBB000
Size:	4096

Details

Name:	00000000.00000002.550524593.00000000188F4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	188F4000
Size:	8192

Details

Name:	0000000F.00000002.378640823.000001B379D00000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B379D00000
Size:	4096

Details

Name:	00000000.00000003.413501458.00000000161B4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	161B4000
Size:	8192

Details

Name:	00000000.00000003.419262769.0000000018E42000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E42000
Size:	4096

Details

Name:	0000001A.00000002.539309601.00007DF53B140000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF53B140000
Size:	4096

Details

Name:	0000001A.00000002.540642091.00007FF539BA1000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539BA1000
Size:	32768

Details

Name:	0000000D.00000002.326509002.00007FF51B8F6000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51B8F6000
Size:	20480

Details

Name:	00000000.00000003.386505060.000000000E5B3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5B3000
Size:	4096

Details

Name:	00000000.00000003.351134230.000000000F666000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F666000
Size:	8192

Details

Name:	00000000.00000003.458814700.00000000151D0000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	151D0000
Size:	4096

Details

Name:	00000000.00000003.411207908.0000000015DFA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DFA000
Size:	53248

Details

Name:	00000000.00000002.551390538.0000000018B14000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18B14000
Size:	4096

Details

Name:	0000000A.00000002.534821807.0000023EBCD10000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	23EBCD10000
Size:	12288

Details

Name:	0000001A.00000000.463400691.00007DF53B142000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF53B142000
Size:	4096

Details

Name:	00000001.00000002.536551230.000001FE6E220000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE6E220000
Size:	4096

Details

Name:	00000000.00000003.259297083.000000000E5C6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5C6000
Size:	4096

Details

Name:	00000000.00000002.535900192.0000000000B7B000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	B7B000
Size:	16384

Details

Name:	00000005.00000002.536336215.00007FF526C84000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF526C84000
Size:	4096

Details

Name:	00000001.00000002.537034354.000001FE727D0000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE727D0000
Size:	4096

Details

Name:	00000000.00000003.263098310.0000000015C00000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C00000
Size:	4096

Details

Name:	00000000.00000003.412129292.0000000016006000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16006000
Size:	4096

Details

Name:	00000001.00000002.533934303.000001FE6D210000.00000004.00000040.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1FE6D210000
Size:	4096

Details

Name:	00000000.00000003.351806443.0000000015E19000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E19000
Size:	20480

Details

Name:	00000000.00000002.542772455.00000000117E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	117E0000
Size:	73728

Signature Hits	Behavior Group	Mitre Attack
Contains functionality to create processes via WMI	System Summary	Windows Management Instrumentation

Details

Name:	00000000.00000003.412648330.0000000015D80000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D80000
Size:	4096

Details

Name:	00000000.00000003.416360666.0000000015D91000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D91000
Size:	4096

Details

Name:	00000000.00000003.416460674.0000000015DB8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DB8000
Size:	4096

Details

Name:	00000007.00000002.306069025.00000292D7A13000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A13000
Size:	86016

Details

Name:	00000013.00000003.430441396.000001EE74990000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74990000
Size:	397312

Details

Name:	0000000B.00000002.309429374.000002A57584F000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A57584F000
Size:	8192

Details

Name:	00000013.00000003.428538209.000001EE74979000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74979000
Size:	16384

Details

Name:	0000000B.00000002.309306188.000002A575780000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A575780000
Size:	4096

Details

Name:	00000000.00000003.260415319.00000000152A0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	152A0000
Size:	40960

Details

Name:	0000001A.00000002.540860918.00007FF539C21000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539C21000
Size:	16384

Details

Name:	00000017.00000000.457997040.000000000286B000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	286B000
Size:	16384

Details

Name:	00000000.00000003.412431540.0000000015D9D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D9D000
Size:	8192

Details

Name:	00000000.00000003.415779897.0000000015D96000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D96000
Size:	4096

Details

Name:	00000000.00000003.414118077.0000000018CD8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18CD8000
Size:	8192

Details

Name:	00000000.00000002.546569460.0000000017BF7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17BF7000
Size:	4096

Details

Name:	00000000.00000003.350926711.0000000015AAB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15AAB000
Size:	53248

Details

Name:	0000001A.00000002.534265254.0000020F08850000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20F08850000
Size:	4096

Details

Name:	00000000.00000002.550940581.0000000018AC4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18AC4000
Size:	4096

Details

Name:	00000007.00000003.305818606.00000292D7A3D000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A3D000
Size:	49152

Details

Name:	00000000.00000002.537585300.000000000B4B5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	B4B5000
Size:	4096

Details

Name:	00000000.00000003.416604114.0000000018CFB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18CFB000
Size:	4096

Details

Name:	00000000.00000002.546367876.0000000016EF8000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	16EF8000
Size:	28672

Details

Name:	00000000.00000003.349432704.0000000015DEF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DEF000
Size:	4096

Details

Name:	00000013.00000002.442014743.000001EE73FD0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1EE73FD0000
Size:	16384

Details

Name:	00000014.00000002.438781335.00007FF50A1E6000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50A1E6000
Size:	12288

Details

Name:	00000000.00000002.536377553.0000000000F20000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	F20000
Size:	8192

Details

Name:	00000017.00000002.463983860.000000000033C000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	33C000
Size:	4096

Details

Name:	00000005.00000002.535480180.0000018414002000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18414002000
Size:	4096

Details

Name:	0000000F.00000002.379060138.00007FF55D67C000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55D67C000
Size:	8192

Details

Name:	00000000.00000003.462686983.0000000015BCE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15BCE000
Size:	4096

Details

Name:	00000000.00000003.260144631.0000000012F4D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12F4D000
Size:	208896

Details

Name:	00000000.00000003.351075893.000000000F617000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F617000
Size:	36864

Details

Name:	00000000.00000002.551523731.0000000018B34000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18B34000
Size:	4096

Details

Name:	0000001A.00000003.469104734.0000020F088BC000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20F088BC000
Size:	200704

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000014.00000003.430203482.000001338A782000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1338A782000
Size:	106496

Details

Name:	00000000.00000003.417978921.0000000018E66000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E66000
Size:	8192

Details

Name:	00000000.00000002.535259905.0000000000B45000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	B45000
Size:	28672

Details

Name:	00000000.00000003.417450990.0000000018E05000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E05000
Size:	4096

Details

Name:	00000000.00000003.396830555.0000000013171000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13171000
Size:	12288

Details

Name:	0000001A.00000002.539330337.00007DF53B142000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF53B142000
Size:	4096

Details

Name:	00000013.00000003.426028753.000001EE74960000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74960000
Size:	45056

Details

Name:	00000000.00000002.546094457.0000000016E89000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	16E89000
Size:	16384

Details

Name:	00000000.00000002.539522332.000000000D7EA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	D7EA000
Size:	12288

Details

Name:	00000005.00000002.536941313.00007FF526D22000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF526D22000
Size:	12288

Details

Name:	00000000.00000003.411338021.0000000015D35000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D35000
Size:	4096

Details

Name:	00000006.00000000.282483250.00007DF5EEC30000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EEC30000
Size:	4096

Details

Name:	00000013.00000003.430954143.000001EE74978000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74978000
Size:	20480

Details

Name:	00000000.00000003.262769691.0000000015C5F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C5F000
Size:	4096

Details

Name:	00000000.00000003.415857212.0000000015DB3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DB3000
Size:	4096

Details

Name:	00000001.00000002.536249380.000001FE6DBE0000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE6DBE0000
Size:	4096

Details

Name:	00000013.00000003.429521647.000001EE749A1000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE749A1000
Size:	32768

Details

Name:	00000000.00000003.414596493.000000000F598000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F598000
Size:	20480

Details

Name:	00000000.00000003.260097713.00000000130E8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130E8000
Size:	12288

Details

Name:	00000007.00000002.306411139.00007FF5ED8C6000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED8C6000
Size:	8192

Details

Name:	00000000.00000003.383268170.0000000015B6A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15B6A000
Size:	4096

Details

Name:	00000000.00000002.544757598.0000000015AAB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15AAB000
Size:	53248

Details

Name:	00000000.00000003.412039925.0000000016028000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16028000
Size:	4096

Details

Name:	00000009.00000002.534916223.000002A67FF02000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A67FF02000
Size:	28672

Details

Name:	00000013.00000003.421019632.000001EE74992000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74992000
Size:	131072

Details

Name:	00000014.00000002.431288152.000001338A760000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1338A760000
Size:	8192

Details

Name:	00000000.00000003.416597764.0000000018CF6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18CF6000
Size:	4096

Details

Name:	00000000.00000002.541002951.000000000E582000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E582000
Size:	32768

Details

Name:	00000000.00000002.550977283.0000000018ACA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18ACA000
Size:	4096

Details

Name:	00000013.00000002.443441176.00007FF52B3F4000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B3F4000
Size:	8192

Details

Name:	00000000.00000003.263119072.0000000015C5A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C5A000
Size:	4096

Details

Name:	00000000.00000003.349407091.0000000015DE0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DE0000
Size:	4096

Details

Name:	00000000.00000003.412424879.0000000015D98000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D98000
Size:	8192

Details

Name:	00000000.00000003.413823359.00000000161B4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	161B4000
Size:	8192

Details

Name:	00000000.00000003.517203347.000000000E5B3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5B3000
Size:	4096

Details

Name:	00000000.00000002.547565987.0000000017DE5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17DE5000
Size:	4096

Details

Name:	00000001.00000002.539216549.00007FF541314000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541314000
Size:	28672

Details

Name:	00000000.00000003.416353568.0000000015D8C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D8C000
Size:	4096

Details

Name:	0000000B.00000002.309829602.00007FF575A1A000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF575A1A000
Size:	20480

Details

Name:	00000000.00000003.396283213.0000000015D2A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D2A000
Size:	4096

Details

Name:	00000000.00000003.260167102.0000000012F82000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12F82000
Size:	40960

Details

Name:	00000000.00000003.350328934.0000000013068000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13068000
Size:	86016

Details

Name:	00000000.00000002.544115329.0000000014600000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	14600000
Size:	4096

Details

Name:	0000001A.00000002.537161251.000002170A68C000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170A68C000
Size:	8192

Details

Name:	0000000D.00000002.325625574.0000026002C40000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26002C40000
Size:	102400

Details

Name:	00000000.00000002.550287850.0000000018708000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18708000
Size:	8192

Details

Name:	00000000.00000002.540501899.000000000E0FD000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	E0FD000
Size:	12288

Details

Name:	0000001A.00000002.534875865.0000020F08971000.00000004.00000020.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	20F08971000
Size:	57344

Details

Name:	00000000.00000003.460004006.000000000F6A0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F6A0000
Size:	389120

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.419431291.0000000015FCB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15FCB000
Size:	16384

Details

Name:	00000000.00000003.397557165.000000000F666000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F666000
Size:	8192

Details

Name:	00000000.00000002.547245096.0000000017D1B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17D1B000
Size:	4096

Details

Name:	00000000.00000003.414495578.000000000F52C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F52C000
Size:	40960

Details

Name:	0000001A.00000002.538358345.000002170B3F0000.00000004.00000040.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2170B3F0000
Size:	4096

Details

Name:	00000000.00000002.544045161.0000000013209000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	13209000
Size:	221184

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.417849535.0000000018D68000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D68000
Size:	8192

Details

Name:	00000013.00000003.422257654.000001EE74961000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74961000
Size:	4096

Details

Name:	00000013.00000003.429508816.000001EE74990000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74990000
Size:	53248

Details

Name:	00000000.00000002.546661323.0000000017C11000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C11000
Size:	4096

Details

Name:	00000000.00000003.414940079.0000000015C15000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C15000
Size:	4096

Details

Name:	00000000.00000002.548272144.0000000017EC7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17EC7000
Size:	4096

Details

Name:	00000000.00000003.419205014.0000000015E5C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E5C000
Size:	4096

Details

Name:	00000009.00000002.535394344.00007FF58FCE9000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58FCE9000
Size:	4096

Details

Name:	00000000.00000003.262821267.0000000015C05000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C05000
Size:	4096

Details

Name:	00000000.00000003.258477765.000000000E592000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E592000
Size:	36864

Details

Name:	00000000.00000003.383523554.00000000130D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130D0000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000017.00000002.463998497.0000000000400000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	400000
Size:	4096

Details

Name:	00000000.00000002.549735842.00000000182F4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	182F4000
Size:	8192

Details

Name:	0000001A.00000002.535187125.0000020F089E0000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	20F089E0000
Size:	36864

Details

Name:	0000000D.00000002.326702533.00007FF51BCEC000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51BCEC000
Size:	8192

Details

Name:	00000000.00000003.383260704.0000000015B4D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15B4D000
Size:	4096

Details

Name:	00000000.00000002.538170433.000000000C6DB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C6DB000
Size:	4096

Details

Name:	00000013.00000003.426845761.000001EE749A3000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE749A3000
Size:	32768

Details

Name:	00000001.00000002.538704450.00007FF5411E1000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5411E1000
Size:	4096

Details

Name:	00000013.00000003.421939198.000001EE74990000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74990000
Size:	32768

Details

Name:	00000000.00000002.545218080.0000000015AF8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15AF8000
Size:	4096

Details

Name:	00000000.00000003.459815599.000000001316F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1316F000
Size:	4096

Details

Name:	00000000.00000003.413404869.0000000016023000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16023000
Size:	4096

Details

Name:	00000000.00000002.549500072.00000000181E7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	181E7000
Size:	4096

Details

Name:	00000000.00000002.548403259.0000000017EF3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17EF3000
Size:	20480

Details

Name:	00000000.00000003.262918515.0000000013153000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13153000
Size:	20480

Details

Name:	00000000.00000003.260850694.000000000E5DD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5DD000
Size:	16384

Details

Name:	00000000.00000003.258523599.000000000E593000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E593000
Size:	36864

Details

Name:	00000009.00000003.294232235.000002A6004C0000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2A6004C0000
Size:	4096

Details

Name:	00000013.00000002.442701087.00007DF52C8B0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF52C8B0000
Size:	4096

Details

Name:	00000000.00000002.544158563.0000000014900000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	14900000
Size:	4096

Details

Name:	0000000D.00000002.325433062.000000831D3FB000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	831D3FB000
Size:	20480

Details

Name:	00000000.00000003.516990105.0000000012300000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12300000
Size:	16384

Details

Name:	00000000.00000003.417606021.0000000015DCA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DCA000
Size:	28672

Details

Name:	00000007.00000002.306157192.00000292D7A85000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A85000
Size:	32768

Details

Name:	00000017.00000003.460593047.0000000002DE6000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2DE6000
Size:	8192

Details

Name:	00000000.00000002.549372031.0000000018145000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18145000
Size:	4096

Details

Name:	00000000.00000003.351842211.0000000015DE0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DE0000
Size:	4096

Details

Name:	00000000.00000002.543767916.00000000130DF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	130DF000
Size:	208896

Details

Name:	00000000.00000003.396182045.0000000015C98000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C98000
Size:	16384

Details

Name:	00000000.00000002.537745352.000000000C549000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C549000
Size:	40960

Details

Name:	00000000.00000002.534190780.0000000000A90000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	A90000
Size:	8192

Details

Name:	0000001A.00000002.537285540.000002170A6C4000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170A6C4000
Size:	4096

Details

Name:	0000001A.00000002.537499573.000002170A7E0000.00000004.00000040.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2170A7E0000
Size:	8192

Details

Name:	0000000D.00000002.326575916.00007FF51BB52000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51BB52000
Size:	12288

Details

Name:	00000013.00000003.430356596.000001EE749B7000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE749B7000
Size:	200704

Details

Name:	00000000.00000002.547438569.0000000017D83000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17D83000
Size:	4096

Details

Name:	00000000.00000002.546172335.0000000016E9C000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	16E9C000
Size:	16384

Details

Name:	00000000.00000003.262745344.0000000015BFB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15BFB000
Size:	4096

Details

Name:	00000000.00000002.549208808.000000001802D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1802D000
Size:	4096

Details

Name:	00000000.00000003.459754501.000000001315D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1315D000
Size:	24576

Details

Name:	00000013.00000002.442480504.000001EE746A0000.00000008.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page write copy
Base address:	1EE746A0000
Size:	266240

Details

Name:	00000013.00000003.420938997.000001EE74971000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74971000
Size:	4096

Details

Name:	00000000.00000003.460180750.00000000130BA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130BA000
Size:	28672

Details

Name:	00000000.00000003.396495769.0000000015C73000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C73000
Size:	12288

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.544251013.0000000015240000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15240000
Size:	4096

Details

Name:	0000000A.00000002.535624730.00007FF5421E8000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5421E8000
Size:	12288

Details

Name:	00000000.00000003.257778100.000000000DFD0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DFD0000
Size:	12288

Details

Name:	00000000.00000003.350232384.00000000131E6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	131E6000
Size:	139264

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000001A.00000002.537297892.000002170A6CC000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170A6CC000
Size:	4096

Details

Name:	00000007.00000002.306118286.00000292D7A58000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A58000
Size:	8192

Details

Name:	00000000.00000003.413095064.0000000015D8F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D8F000
Size:	4096

Details

Name:	0000000F.00000002.379231843.00007FF55D714000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55D714000
Size:	8192

Details

Name:	00000000.00000003.351211686.0000000015D6D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D6D000
Size:	8192

Details

Name:	00000000.00000002.547699474.0000000017E0B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17E0B000
Size:	4096

Details

Name:	00000000.00000002.540332103.000000000DF60000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	DF60000
Size:	65536

Details

Name:	00000000.00000003.411695953.000000000F598000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F598000
Size:	20480

Details

Name:	00000000.00000002.534203837.0000000000AA0000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	AA0000
Size:	40960

Details

Name:	00000000.00000002.548636280.0000000017F3F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17F3F000
Size:	4096

Details

Name:	00000000.00000003.417176979.0000000015CA2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CA2000
Size:	8192

Details

Name:	00000000.00000003.351551772.0000000015D77000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D77000
Size:	4096

Details

Name:	0000001A.00000002.537103631.000002170A67C000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170A67C000
Size:	4096

Details

Name:	00000017.00000002.464681627.000000000473F000.00000004.00000010.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	473F000
Size:	4096

Details

Name:	00000017.00000002.464178233.000000000086E000.00000004.00000010.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	86E000
Size:	8192

Details

Name:	00000013.00000003.430290154.000001EE74990000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74990000
Size:	319488

Details

Name:	00000000.00000002.549973801.00000000184B9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	184B9000
Size:	4096

Details

Name:	0000000D.00000002.326869177.00007FF51BD5C000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51BD5C000
Size:	20480

Details

Name:	00000013.00000002.443023321.00007FF52B210000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B210000
Size:	4096

Details

Name:	0000000A.00000002.535681990.00007FF5426D7000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5426D7000
Size:	8192

Details

Name:	00000013.00000002.443174295.00007FF52B324000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B324000
Size:	4096

Details

Name:	00000013.00000002.443131625.00007FF52B2DC000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B2DC000
Size:	12288

Details

Name:	00000014.00000002.432250575.000001338A77B000.00000004.00000020.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1338A77B000
Size:	28672

Details

Name:	00000017.00000002.464305610.0000000002763000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2763000
Size:	8192

Details

Name:	00000000.00000002.546581849.0000000017BF9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17BF9000
Size:	4096

Details

Name:	0000001A.00000002.535051035.0000020F089D5000.00000004.00000040.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	20F089D5000
Size:	32768

Details

Name:	00000000.00000003.416039699.0000000015DD1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DD1000
Size:	28672

Details

Name:	00000014.00000002.433183596.00007FF50A1D6000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50A1D6000
Size:	8192

Details

Name:	00000001.00000002.536652443.000001FE6E3F0000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FE6E3F0000
Size:	65536

Details

Name:	00000000.00000003.349694505.000000000F5E9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5E9000
Size:	24576

Details

Name:	00000017.00000002.464543075.000000000285F000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	285F000
Size:	32768

Details

Name:	00000000.00000003.258800447.000000000E59E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E59E000
Size:	8192

Details

Name:	00000000.00000003.412411244.0000000015D8F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D8F000
Size:	4096

Details

Name:	00000000.00000003.416795216.0000000018E58000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E58000
Size:	4096

Details

Name:	00000000.00000003.415495911.000000001602F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1602F000
Size:	4096

Details

Name:	00000000.00000002.541104462.000000000E5B3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E5B3000
Size:	4096

Details

Name:	00000000.00000003.350453236.0000000015B25000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15B25000
Size:	86016

Details

Name:	00000006.00000002.534543338.000001E96883E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E96883E000
Size:	4096

Details

Name:	0000001A.00000002.540602227.00007FF539B93000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539B93000
Size:	8192

Details

Name:	00000000.00000002.547302057.0000000017D33000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17D33000
Size:	4096

Details

Name:	00000000.00000003.416548502.0000000018CDD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18CDD000
Size:	4096

Details

Name:	00000000.00000003.412839897.0000000015CD5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CD5000
Size:	16384

Details

Name:	0000001A.00000002.538028025.000002170B1E0000.00000008.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page write copy
Base address:	2170B1E0000
Size:	266240

Details

Name:	0000000F.00000002.379145650.00007FF55D6C1000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55D6C1000
Size:	49152

Details

Name:	00000007.00000002.306219884.00007DF5EED42000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EED42000
Size:	4096

Details

Name:	00000017.00000003.463721161.0000000000587000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	587000
Size:	65536

Details

Name:	00000000.00000003.417823062.0000000018D5A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D5A000
Size:	4096

Details

Name:	0000000B.00000002.309377461.000002A57582A000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A57582A000
Size:	69632

Details

Name:	00000013.00000003.423523307.000001EE749B4000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE749B4000
Size:	147456

Details

Name:	00000000.00000003.259955951.0000000015260000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15260000
Size:	28672

Details

Name:	0000000F.00000002.378724404.000001B37A0E0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B37A0E0000
Size:	12288

Details

Name:	00000000.00000003.263447705.0000000013209000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13209000
Size:	221184

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000001A.00000002.541141601.00007FF539CDC000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539CDC000
Size:	8192

Details

Name:	00000000.00000003.418522093.0000000018D64000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D64000
Size:	4096

Details

Name:	00000000.00000003.417328694.0000000018CFB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18CFB000
Size:	4096

Details

Name:	00000000.00000003.417964502.0000000018E62000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E62000
Size:	4096

Details

Name:	00000006.00000002.533745537.000000867497F000.00000004.00000010.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	867497F000
Size:	4096

Details

Name:	00000005.00000002.536850031.00007FF526CF1000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF526CF1000
Size:	49152

Details

Name:	00000000.00000003.413078699.0000000015D85000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D85000
Size:	4096

Details

Name:	00000000.00000002.546866024.0000000017C27000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C27000
Size:	4096

Details

Name:	00000000.00000003.350067742.0000000013164000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13164000
Size:	4096

Details

Name:	00000013.00000002.442730863.00007DF52C8C0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF52C8C0000
Size:	4096

Details

Name:	00000005.00000002.535814634.00007FF52660F000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52660F000
Size:	8192

Details

Name:	0000001A.00000002.537223486.000002170A6A1000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170A6A1000
Size:	40960

Details

Name:	00000000.00000003.463143428.0000000013168000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13168000
Size:	16384

Details

Name:	0000000B.00000002.309748396.00007FF575392000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF575392000
Size:	4096

Details

Name:	00000000.00000003.383697775.000000001316F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1316F000
Size:	4096

Details

Name:	00000000.00000003.386490660.000000000E59F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E59F000
Size:	57344

Details

Name:	00000000.00000003.458891141.0000000015D00000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D00000
Size:	45056

Details

Name:	0000000A.00000002.533572600.0000008CD25FE000.00000004.00000010.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8CD25FE000
Size:	8192

Details

Name:	00000000.00000003.415517048.0000000016034000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16034000
Size:	4096

Details

Name:	00000000.00000002.548361571.0000000017EDB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17EDB000
Size:	77824

Details

Name:	0000000B.00000002.309157912.000000BC02C7B000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	BC02C7B000
Size:	20480

Details

Name:	00000000.00000002.551131190.0000000018AE4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18AE4000
Size:	4096

Details

Name:	00000005.00000002.534533977.0000018413889000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18413889000
Size:	4096

Details

Name:	00000001.00000002.538906755.00007FF5412CC000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5412CC000
Size:	8192

Details

Name:	00000001.00000002.537601132.000001FE72CA2000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE72CA2000
Size:	237568

Details

Name:	00000000.00000002.546893989.0000000017C2B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C2B000
Size:	4096

Details

Name:	0000000A.00000002.535431492.00007FF5420EB000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5420EB000
Size:	4096

Details

Name:	00000000.00000002.548323729.0000000017ED5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17ED5000
Size:	4096

Details

Name:	00000000.00000003.350133174.0000000013175000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13175000
Size:	335872

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.536033325.0000000000B9C000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	B9C000
Size:	12288

Details

Name:	00000000.00000003.349671049.000000000F5C8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5C8000
Size:	94208

Details

Name:	00000000.00000002.547185900.0000000017CF3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17CF3000
Size:	4096

Details

Name:	00000014.00000000.417748392.00007DF50B650000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50B650000
Size:	4096

Details

Name:	00000000.00000002.549086993.0000000017FC3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17FC3000
Size:	4096

Details

Name:	00000000.00000003.414706098.000000000F5C8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5C8000
Size:	94208

Details

Name:	00000000.00000003.418793749.0000000018E58000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E58000
Size:	4096

Details

Name:	00000017.00000002.464051183.0000000000561000.00000004.00000020.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	561000
Size:	118784

Details

Name:	00000013.00000002.442530646.000001EE74900000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74900000
Size:	176128

Details

Name:	00000001.00000002.539532662.00007FF541376000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541376000
Size:	20480

Details

Name:	00000000.00000003.396582293.0000000013068000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13068000
Size:	86016

Details

Name:	00000000.00000003.413242042.0000000015DDC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DDC000
Size:	49152

Details

Name:	00000000.00000002.549800327.0000000018358000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18358000
Size:	8192

Details

Name:	00000000.00000003.351438959.0000000015E11000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E11000
Size:	4096

Details

Name:	00000000.00000002.544923363.0000000015AD0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15AD0000
Size:	4096

Details

Name:	00000000.00000003.397081776.0000000013081000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13081000
Size:	12288

Details

Name:	0000000A.00000003.297086566.0000023EBC670000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	23EBC670000
Size:	4096

Details

Name:	00000000.00000003.417237445.0000000015CC2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CC2000
Size:	57344

Details

Name:	00000000.00000003.350253673.0000000013209000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13209000
Size:	221184

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.517351290.000000000E58F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E58F000
Size:	36864

Details

Name:	00000000.00000003.415165562.0000000015F94000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15F94000
Size:	4096

Details

Name:	00000000.00000003.411723722.000000000F5C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5C0000
Size:	28672

Details

Name:	00000000.00000003.350357731.0000000013090000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13090000
Size:	40960

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000013.00000003.426833051.000001EE74992000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74992000
Size:	53248

Details

Name:	00000000.00000003.418864749.0000000018E7A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E7A000
Size:	4096

Details

Name:	00000013.00000002.443462371.00007FF52B455000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B455000
Size:	16384

Details

Name:	00000000.00000003.415812318.0000000015DA5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DA5000
Size:	4096

Details

Name:	00000000.00000002.540930275.000000000E554000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E554000
Size:	32768

Details

Name:	0000001A.00000002.538481023.000002170B540000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170B540000
Size:	16384

Details

Name:	00000000.00000003.350099670.000000001316F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1316F000
Size:	4096

Details

Name:	00000000.00000003.415679836.0000000015D74000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D74000
Size:	4096

Details

Name:	00000005.00000002.535553749.00007DF4260D0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4260D0000
Size:	20480

Details

Name:	00000000.00000002.533714252.000000000079B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	79B000
Size:	8192

Details

Name:	00000000.00000002.539215911.000000000D793000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	D793000
Size:	344064

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	00000000.00000002.545254021.0000000015AFC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15AFC000
Size:	16384

Details

Name:	0000000B.00000002.309905024.00007FF575B00000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF575B00000
Size:	12288

Details

Name:	00000000.00000003.412021180.000000001601E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1601E000
Size:	4096

Details

Name:	00000000.00000002.536108639.0000000000BE0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	BE0000
Size:	16384

Details

Name:	00000000.00000002.541359877.000000000E870000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	E870000
Size:	16384

Details

Name:	0000000F.00000002.379020541.00007FF55D571000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55D571000
Size:	4096

Details

Name:	00000000.00000003.418372124.0000000018E5D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E5D000
Size:	4096

Details

Name:	00000000.00000002.550604853.0000000018994000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18994000
Size:	8192

Details

Name:	00000000.00000002.540810771.000000000E517000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E517000
Size:	81920

Details

Name:	00000006.00000002.534781401.000001E968902000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E968902000
Size:	32768

Details

Name:	00000000.00000003.415765359.0000000015D91000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D91000
Size:	4096

Details

Name:	00000001.00000002.534085563.000001FE6D240000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FE6D240000
Size:	12288

Details

Name:	00000000.00000002.540198372.000000000DC5E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DC5E000
Size:	8192

Details

Name:	00000000.00000003.416650320.0000000018D50000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D50000
Size:	4096

Details

Name:	00000001.00000002.536590293.000001FE6E230000.00000004.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1FE6E230000
Size:	4096

Details

Name:	00000000.00000003.351714817.0000000015E02000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E02000
Size:	8192

Details

Name:	00000000.00000002.535680721.0000000000B5F000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	B5F000
Size:	16384

Details

Name:	00000000.00000003.416059382.0000000015DDB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DDB000
Size:	53248

Details

Name:	00000007.00000002.306019215.00000292D7870000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	292D7870000
Size:	12288

Details

Name:	00000000.00000002.547923585.0000000017E5D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17E5D000
Size:	4096

Details

Name:	0000000D.00000002.326900216.00007FF51BD76000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51BD76000
Size:	20480

Details

Name:	00000000.00000003.459271267.000000001315D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1315D000
Size:	24576

Details

Name:	00000000.00000003.416215683.0000000016003000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16003000
Size:	8192

Details

Name:	00000000.00000003.418719429.0000000018E7A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E7A000
Size:	4096

Details

Name:	0000000A.00000003.359785218.0000023EBC6E9000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	23EBC6E9000
Size:	8192

Details

Name:	00000005.00000002.535668948.00007DF528210000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF528210000
Size:	4096

Details

Name:	00000000.00000003.257158044.000000000DEF0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DEF0000
Size:	4096

Details

Name:	00000000.00000002.537418298.0000000004677000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4677000
Size:	36864

Details

Name:	00000000.00000003.350056620.000000001315D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1315D000
Size:	24576

Details

Name:	00000000.00000003.416129638.00000000161A8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	161A8000
Size:	8192

Details

Name:	00000000.00000003.349351188.0000000015D77000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D77000
Size:	4096

Details

Name:	0000000D.00000000.309851125.00007DF51D252000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51D252000
Size:	4096

Details

Name:	00000017.00000002.464215979.00000000009FE000.00000004.00000010.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	9FE000
Size:	8192

Details

Name:	00000000.00000002.551536707.0000000018BB0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18BB0000
Size:	4096

Details

Name:	00000000.00000003.383311908.000000000F699000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F699000
Size:	24576

Details

Name:	00000000.00000003.383463716.00000000130A8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130A8000
Size:	4096

Details

Name:	00000000.00000003.416311351.000000001602A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1602A000
Size:	8192

Details

Name:	00000000.00000002.542545467.000000000F790000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F790000
Size:	4096

Details

Name:	00000000.00000003.460400525.0000000013164000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13164000
Size:	4096

Details

Name:	00000000.00000003.383392806.0000000013059000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13059000
Size:	4096

Details

Name:	0000000B.00000002.309755315.00007FF5756E6000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5756E6000
Size:	20480

Details

Name:	00000013.00000003.419279896.000001EE740A1000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE740A1000
Size:	4096

Details

Name:	00000000.00000003.463275990.0000000013209000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13209000
Size:	49152

Details

Name:	00000007.00000002.306165379.00000292D7B02000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7B02000
Size:	16384

Details

Name:	00000007.00000002.306334518.00007FF5ED811000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED811000
Size:	16384

Details

Name:	00000000.00000003.417194733.0000000015CAC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CAC000
Size:	4096

Details

Name:	00000000.00000003.413969466.00000000161AE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	161AE000
Size:	20480

Details

Name:	00000000.00000002.550804029.0000000018A2B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18A2B000
Size:	4096

Details

Name:	00000000.00000003.459256599.0000000013159000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13159000
Size:	4096

Details

Name:	0000001A.00000002.540666083.00007FF539BB6000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539BB6000
Size:	8192

Details

Name:	00000000.00000002.546504208.00000000172EB000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	172EB000
Size:	4096

Details

Name:	00000000.00000002.546963740.0000000017C38000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C38000
Size:	135168

Details

Name:	00000000.00000002.542208695.000000000F5F5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F5F5000
Size:	4096

Details

Name:	00000000.00000003.349426574.0000000015DEA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DEA000
Size:	4096

Details

Name:	00000000.00000002.551956432.0000000067E0C000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	67E0C000
Size:	12288

Details

Name:	0000001A.00000002.534253223.0000020F08760000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	20F08760000
Size:	4096

Details

Name:	00000000.00000003.517305817.000000000E5AC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5AC000
Size:	4096

Details

Name:	0000001A.00000002.540395176.00007FF539B0A000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539B0A000
Size:	28672

Details

Name:	00000005.00000002.534746234.0000018413913000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18413913000
Size:	4096

Details

Name:	00000000.00000003.414040990.0000000018BEE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18BEE000
Size:	4096

Details

Name:	0000000D.00000002.325658186.0000026002C70000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26002C70000
Size:	4096

Details

Name:	00000000.00000002.549938738.0000000018469000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18469000
Size:	4096

Details

Name:	00000000.00000003.517002894.000000001230C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1230C000
Size:	8192

Details

Name:	00000000.00000003.383650205.000000001315B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1315B000
Size:	4096

Details

Name:	00000013.00000002.442524022.000001EE74802000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74802000
Size:	4096

Details

Name:	00000000.00000003.412438530.0000000015DA2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DA2000
Size:	4096

Details

Name:	00000000.00000003.459567029.00000000130D7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130D7000
Size:	4096

Details

Name:	00000007.00000002.306006453.00000292D7850000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	292D7850000
Size:	102400

Details

Name:	00000000.00000003.397473608.000000000F5F9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5F9000
Size:	4096

Details

Name:	0000001A.00000000.463408472.00007DF53B150000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF53B150000
Size:	4096

Details

Name:	00000000.00000002.544941590.0000000015AD2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15AD2000
Size:	16384

Details

Name:	00000000.00000002.551924732.0000000067DE3000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	67DE3000
Size:	167936

Details

Name:	0000000A.00000002.535136577.00007DF543DB0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF543DB0000
Size:	4096

Details

Name:	00000001.00000002.539099293.00007FF541305000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541305000
Size:	8192

Details

Name:	00000000.00000002.546114615.0000000016E8E000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	16E8E000
Size:	16384

Details

Name:	00000000.00000003.461181079.0000000015D35000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D35000
Size:	4096

Details

Name:	0000000F.00000002.378349007.0000000C7B177000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	C7B177000
Size:	36864

Details

Name:	00000013.00000003.423735543.000001EE74971000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74971000
Size:	8192

Details

Name:	00000014.00000002.433164805.00007FF50A176000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50A176000
Size:	20480

Details

Name:	00000006.00000002.535819138.00007FF5ED6DC000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED6DC000
Size:	8192

Details

Name:	00000000.00000002.545008429.0000000015ADF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15ADF000
Size:	16384

Details

Name:	00000017.00000002.464369086.000000000279F000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	279F000
Size:	8192

Details

Name:	00000000.00000003.412247729.0000000015E5E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E5E000
Size:	8192

Details

Name:	00000000.00000002.545630586.0000000015D43000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15D43000
Size:	4096

Details

Name:	0000000A.00000002.534332374.0000023EBC689000.00000004.00000020.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	23EBC689000
Size:	28672

Details

Name:	00000005.00000002.535843541.00007FF526911000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF526911000
Size:	12288

Details

Name:	00000000.00000003.350775194.0000000015AF9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15AF9000
Size:	4096

Details

Name:	00000017.00000002.464358422.0000000002796000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2796000
Size:	32768

Details

Name:	00000000.00000003.414809376.000000000F5F2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5F2000
Size:	8192

Details

Name:	00000007.00000002.306384467.00007FF5ED85C000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED85C000
Size:	36864

Details

Name:	00000013.00000003.430816714.000001EE74966000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74966000
Size:	4096

Details

Name:	00000000.00000003.384167599.000000000F666000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F666000
Size:	8192

Details

Name:	00000000.00000003.411343957.0000000015D43000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D43000
Size:	4096

Details

Name:	00000001.00000002.534350465.000001FE6D370000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE6D370000
Size:	4096

Details

Name:	00000000.00000003.416026031.0000000015D46000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D46000
Size:	28672

Details

Name:	00000013.00000002.442836798.00007FF52AC3B000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52AC3B000
Size:	4096

Details

Name:	0000001A.00000002.536970171.000002170A660000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170A660000
Size:	4096

Details

Name:	00000000.00000003.260123260.00000000130ED000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130ED000
Size:	28672

Details

Name:	00000000.00000003.417788946.0000000018D50000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D50000
Size:	4096

Details

Name:	00000017.00000002.464192721.0000000000880000.00000004.00000040.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	880000
Size:	16384

Details

Name:	0000001A.00000002.540682904.00007FF539BC4000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539BC4000
Size:	4096

Details

Name:	00000000.00000002.541651563.000000000F4FC000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F4FC000
Size:	16384

Details

Name:	00000007.00000003.305771551.00000292D7A49000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A49000
Size:	53248

Details

Name:	00000000.00000003.260835647.000000000E5EC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5EC000
Size:	12288

Details

Name:	00000000.00000003.414171159.0000000018CEC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18CEC000
Size:	4096

Details

Name:	00000014.00000000.417720614.00007DF50B640000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50B640000
Size:	4096

Details

Name:	00000017.00000002.464690822.00000000047D0000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	47D0000
Size:	4096

Details

Name:	00000017.00000002.464170180.0000000000810000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	810000
Size:	16384

Details

Name:	00000001.00000002.534876324.000001FE6D429000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE6D429000
Size:	86016

Details

Name:	00000000.00000003.419087904.0000000015E2B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E2B000
Size:	4096

Details

Name:	00000000.00000003.414434032.00000000161AE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	161AE000
Size:	20480

Details

Name:	00000000.00000002.546997676.0000000017C5C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C5C000
Size:	4096

Details

Name:	00000013.00000002.442404936.000001EE74108000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74108000
Size:	32768

Details

Name:	0000000A.00000002.536265228.00007FF5428C9000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5428C9000
Size:	4096

Details

Name:	00000001.00000002.539500877.00007FF54136C000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54136C000
Size:	36864

Details

Name:	00000013.00000002.443197780.00007FF52B340000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B340000
Size:	4096

Details

Name:	00000000.00000003.259340623.000000000E5D3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5D3000
Size:	4096

Details

Name:	00000000.00000003.411239823.0000000015F90000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15F90000
Size:	4096

Details

Name:	00000000.00000002.547371483.0000000017D4B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17D4B000
Size:	4096

Details

Name:	00000007.00000002.306207797.00007DF5EED30000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EED30000
Size:	4096

Details

Name:	00000000.00000003.261328451.000000001320F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1320F000
Size:	57344

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.537649125.000000000C4AE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C4AE000
Size:	8192

Details

Name:	00000013.00000002.441837348.0000009B2EA7F000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	9B2EA7F000
Size:	4096

Details

Name:	00000000.00000003.263089178.0000000015BF6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15BF6000
Size:	4096

Details

Name:	00000000.00000003.413354261.0000000016010000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16010000
Size:	4096

Details

Name:	0000001A.00000002.535349588.0000020F08BE0000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	20F08BE0000
Size:	73728

Details

Name:	00000000.00000003.419196974.0000000015E57000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E57000
Size:	4096

Details

Name:	00000000.00000003.412489634.0000000015DC9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DC9000
Size:	4096

Details

Name:	00000006.00000002.534279686.000001E9687A0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E9687A0000
Size:	12288

Details

Name:	00000000.00000003.259457695.000000000E5B0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5B0000
Size:	45056

Details

Name:	00000000.00000003.459641570.0000000013115000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13115000
Size:	274432

Details

Name:	0000000F.00000002.379304812.00007FF55D776000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55D776000
Size:	12288

Details

Name:	0000000F.00000002.378682066.000001B379D13000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B379D13000
Size:	12288

Details

Name:	00000000.00000003.416623039.0000000018CFF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18CFF000
Size:	8192

Details

Name:	00000005.00000002.535893032.00007FF526915000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF526915000
Size:	4096

Details

Name:	00000017.00000000.457971919.0000000000410000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	410000
Size:	4096

Details

Name:	00000000.00000002.537507865.00000000046E0000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	46E0000
Size:	4096

Details

Name:	00000000.00000003.262847524.0000000015C64000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C64000
Size:	4096

Details

Name:	00000000.00000002.542931328.0000000011AA1000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	11AA1000
Size:	102400

Details

Name:	0000000A.00000002.536439782.00007FF542946000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF542946000
Size:	12288

Details

Name:	00000000.00000003.418598183.0000000018DC8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18DC8000
Size:	4096

Details

Name:	00000007.00000002.306326382.00007FF5ED804000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED804000
Size:	28672

Details

Name:	00000000.00000003.459112231.00000000130A8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130A8000
Size:	4096

Details

Name:	00000001.00000002.539191614.00007FF541310000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541310000
Size:	12288

Details

Name:	00000005.00000002.533413610.000000668F92C000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	668F92C000
Size:	16384

Details

Name:	0000001A.00000002.534012556.00000059FB2FE000.00000004.00000010.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	59FB2FE000
Size:	8192

Details

Name:	00000017.00000002.464155755.00000000007CE000.00000004.00000010.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	7CE000
Size:	8192

Details

Name:	0000001A.00000002.533821308.00000059FAFFE000.00000004.00000010.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	59FAFFE000
Size:	8192

Details

Name:	00000007.00000002.305985406.000000991B47E000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	991B47E000
Size:	8192

Details

Name:	00000000.00000003.351579126.0000000015D81000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D81000
Size:	4096

Details

Name:	00000000.00000003.396574403.000000001305B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1305B000
Size:	4096

Details

Name:	00000000.00000002.545495674.0000000015C5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15C5B000
Size:	94208

Details

Name:	00000009.00000002.536440250.00007FF590033000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF590033000
Size:	16384

Details

Name:	00000000.00000003.413260072.0000000015DEA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DEA000
Size:	32768

Details

Name:	0000000B.00000002.310029752.00007FF575B4C000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF575B4C000
Size:	20480

Details

Name:	00000001.00000002.539310153.00007FF541329000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541329000
Size:	24576

Details

Name:	0000000A.00000002.534672685.0000023EBC8F0000.00000004.00000040.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	23EBC8F0000
Size:	12288

Details

Name:	00000014.00000002.433084998.00007FF50A145000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50A145000
Size:	20480

Details

Name:	0000001A.00000003.469030466.0000020F0896D000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20F0896D000
Size:	4096

Details

Name:	00000006.00000002.533934545.0000008674E7F000.00000004.00000010.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8674E7F000
Size:	4096

Details

Name:	00000000.00000003.349334630.0000000015D69000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D69000
Size:	4096

Details

Name:	00000000.00000002.548612354.0000000017F2B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17F2B000
Size:	77824

Details

Name:	00000000.00000002.543683641.00000000130A2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	130A2000
Size:	16384

Details

Name:	0000001A.00000002.540830300.00007FF539C10000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539C10000
Size:	12288

Details

Name:	00000005.00000002.536249195.00007FF526C2C000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF526C2C000
Size:	12288

Details

Name:	00000017.00000002.464329369.0000000002789000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2789000
Size:	4096

Details

Name:	00000000.00000003.412297218.0000000015CE6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CE6000
Size:	163840

Details

Name:	0000000D.00000002.326143692.0000026002E13000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	26002E13000
Size:	86016

Details

Name:	00000000.00000002.550910947.0000000018AC0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18AC0000
Size:	4096

Details

Name:	00000000.00000002.550165574.0000000018668000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18668000
Size:	8192

Details

Name:	00000000.00000002.543290444.0000000011C8B000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	11C8B000
Size:	4096

Details

Name:	00000001.00000002.535478502.000001FE6D476000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE6D476000
Size:	4096

Details

Name:	00000007.00000002.305976589.000000991AF9E000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	991AF9E000
Size:	8192

Details

Name:	0000001A.00000002.538869581.000002170B670000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170B670000
Size:	12288

Details

Name:	00000000.00000003.412220215.000000001612E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1612E000
Size:	8192

Details

Name:	00000000.00000002.551072772.0000000018ADC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18ADC000
Size:	4096

Details

Name:	00000000.00000002.549058880.0000000017FBB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17FBB000
Size:	20480

Details

Name:	00000000.00000002.543651820.0000000013068000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	13068000
Size:	86016

Details

Name:	00000000.00000002.549198599.0000000018019000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18019000
Size:	4096

Details

Name:	00000007.00000002.306146214.00000292D7A76000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A76000
Size:	16384

Details

Name:	00000000.00000002.547987604.0000000017E79000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17E79000
Size:	28672

Details

Name:	00000007.00000002.306202160.00007DF4ECC00000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4ECC00000
Size:	20480

Details

Name:	00000000.00000002.551378998.0000000018B12000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18B12000
Size:	4096

Details

Name:	00000007.00000002.305998501.00000292D7830000.00000004.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	292D7830000
Size:	4096

Details

Name:	00000000.00000003.463299244.000000001304F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1304F000
Size:	16384

Details

Name:	00000009.00000002.534790066.000002A67FE3D000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A67FE3D000
Size:	94208

Details

Name:	00000000.00000003.459176801.00000000130DF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130DF000
Size:	208896

Details

Name:	0000001A.00000002.537408083.000002170A6FC000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170A6FC000
Size:	4096

Details

Name:	00000007.00000002.306341064.00007FF5ED819000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED819000
Size:	24576

Details

Name:	00000000.00000002.535936075.0000000000B80000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	B80000
Size:	16384

Details

Name:	00000000.00000003.413953106.000000001612E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1612E000
Size:	20480

Details

Name:	00000000.00000003.260435197.00000000152A0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	152A0000
Size:	28672

Details

Name:	00000009.00000002.534189864.000002A67FC10000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A67FC10000
Size:	102400

Details

Name:	00000000.00000003.415221995.0000000015FA7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15FA7000
Size:	4096

Details

Name:	00000000.00000002.550243564.00000000186CC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	186CC000
Size:	8192

Details

Name:	00000000.00000002.551601831.0000000018BBE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18BBE000
Size:	4096

Details

Name:	00000000.00000003.349721860.000000000F5F7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5F7000
Size:	4096

Details

Name:	0000001A.00000002.534138390.0000020F08720000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	20F08720000
Size:	16384

Details

Name:	00000000.00000002.539131067.000000000D76F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	D76F000
Size:	4096

Details

Name:	00000000.00000003.263083845.0000000015BF1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15BF1000
Size:	4096

Details

Name:	00000000.00000003.265900832.00000000154E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	154E0000
Size:	8192

Details

Name:	00000000.00000003.350690546.0000000015AE4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15AE4000
Size:	4096

Details

Name:	0000001A.00000002.540733729.00007FF539BEC000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539BEC000
Size:	8192

Details

Name:	00000000.00000002.550125245.000000001862C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1862C000
Size:	8192

Details

Name:	00000000.00000003.417841146.0000000018D64000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D64000
Size:	4096

Details

Name:	00000000.00000003.383162880.0000000015DF4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DF4000
Size:	4096

Details

Name:	00000000.00000003.263224145.0000000013124000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13124000
Size:	81920

Details

Name:	0000000D.00000003.325250027.0000026002E4B000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	26002E4B000
Size:	12288

Details

Name:	00000000.00000002.547944213.0000000017E63000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17E63000
Size:	77824

Details

Name:	00000017.00000003.463560546.0000000000A22000.00000004.00000040.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	A22000
Size:	12288

Details

Name:	00000000.00000003.350444942.00000000130E5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130E5000
Size:	40960

Details

Name:	00000000.00000003.383287988.0000000015B28000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15B28000
Size:	73728

Details

Name:	00000000.00000003.383148735.0000000015DEA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DEA000
Size:	4096

Details

Name:	00000000.00000002.544964395.0000000015AD7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15AD7000
Size:	4096

Details

Name:	00000000.00000003.418752826.0000000018DC8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18DC8000
Size:	4096

Details

Name:	00000000.00000003.350478830.0000000015B4D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15B4D000
Size:	4096

Details

Name:	00000000.00000003.411453138.0000000015FCB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15FCB000
Size:	16384

Details

Name:	0000000D.00000002.326915155.00007FF51BDD6000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51BDD6000
Size:	8192

Details

Name:	00000000.00000003.351049775.000000000F5FD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5FD000
Size:	16384

Details

Name:	00000000.00000003.383432005.0000000013090000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13090000
Size:	40960

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000014.00000002.432879184.00007DF50B650000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50B650000
Size:	4096

Details

Name:	00000000.00000002.533487478.00000000006B4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6B4000
Size:	49152

Details

Name:	00000000.00000003.413102790.0000000015D94000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D94000
Size:	4096

Details

Name:	00000000.00000003.416087207.0000000015DFA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DFA000
Size:	61440

Details

Name:	00000000.00000003.413044515.0000000015D71000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D71000
Size:	8192

Details

Name:	00000001.00000002.533860123.0000004ABC8FE000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4ABC8FE000
Size:	8192

Details

Name:	00000013.00000002.442961914.00007FF52B12F000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B12F000
Size:	12288

Details

Name:	00000013.00000003.419516629.000001EE74710000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74710000
Size:	4096

Details

Name:	00000000.00000003.417278438.0000000018CE2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18CE2000
Size:	4096

Details

Name:	00000000.00000002.549812694.000000001836C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1836C000
Size:	8192

Details

Name:	00000000.00000003.414372507.0000000015DF3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DF3000
Size:	20480

Details

Name:	00000000.00000003.416837778.0000000018E6B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E6B000
Size:	4096

Details

Name:	00000001.00000003.261239201.000001FE72A30000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE72A30000
Size:	4096

Details

Name:	00000000.00000003.262991790.00000000131C8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	131C8000
Size:	36864

Details

Name:	00000000.00000002.547007857.0000000017C5E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C5E000
Size:	4096

Details

Name:	00000000.00000003.261290511.000000000F6A0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F6A0000
Size:	389120

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.397129184.00000000130C3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130C3000
Size:	12288

Details

Name:	00000000.00000003.261089655.0000000015A66000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15A66000
Size:	12288

Details

Name:	00000000.00000003.412376582.0000000015D76000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D76000
Size:	4096

Details

Name:	00000013.00000003.427360944.000001EE74E02000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74E02000
Size:	851968

Details

Name:	00000000.00000003.383669439.0000000013164000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13164000
Size:	4096

Details

Name:	00000007.00000002.306138809.00000292D7A70000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A70000
Size:	12288

Details

Name:	00000000.00000002.540519192.000000000E13E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	E13E000
Size:	8192

Details

Name:	00000007.00000002.306112295.00000292D7A4E000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A4E000
Size:	32768

Details

Name:	0000001A.00000002.540920315.00007FF539C45000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539C45000
Size:	20480

Details

Name:	00000000.00000003.349283558.0000000015B9B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15B9B000
Size:	4096

Details

Name:	0000000B.00000002.309187729.000000BC02F7B000.00000004.00000010.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	BC02F7B000
Size:	20480

Details

Name:	00000005.00000002.537033601.00007FF526D96000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF526D96000
Size:	20480

Details

Name:	00000000.00000003.411969156.0000000016001000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16001000
Size:	4096

Details

Name:	00000000.00000002.546919225.0000000017C30000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C30000
Size:	4096

Details

Name:	00000000.00000003.259447959.000000000E5AA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5AA000
Size:	4096

Details

Name:	0000000B.00000002.309229370.000000BC032FF000.00000004.00000010.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	BC032FF000
Size:	4096

Details

Name:	0000000F.00000002.378272546.0000000C7AB4E000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	C7AB4E000
Size:	8192

Details

Name:	00000000.00000002.540617428.000000000E25B000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	E25B000
Size:	4096

Details

Name:	00000000.00000003.350651504.0000000015AD0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15AD0000
Size:	4096

Details

Name:	0000000B.00000000.297086725.00007DF577042000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF577042000
Size:	4096

Details

Name:	00000000.00000002.549383541.0000000018159000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18159000
Size:	4096

Details

Name:	00000000.00000003.397484862.000000000F5FD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5FD000
Size:	16384

Details

Name:	00000000.00000002.539687730.000000000D80C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	D80C000
Size:	274432

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000017.00000002.464068708.000000000057F000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	57F000
Size:	12288

Details

Name:	00000000.00000002.549777238.0000000018330000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18330000
Size:	8192

Details

Name:	00000000.00000003.415842726.0000000015DAE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DAE000
Size:	8192

Details

Name:	00000017.00000003.463620894.0000000000A20000.00000004.00000040.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	A20000
Size:	8192

Details

Name:	00000000.00000002.547723078.0000000017E0F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17E0F000
Size:	12288

Details

Name:	00000017.00000002.464405354.0000000002817000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2817000
Size:	12288

Details

Name:	00000000.00000003.396299933.0000000015D43000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D43000
Size:	4096

Details

Name:	0000001A.00000002.538930361.000002170B678000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170B678000
Size:	4096

Details

Name:	00000000.00000003.418460250.0000000015F13000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15F13000
Size:	12288

Details

Name:	00000000.00000003.411977639.0000000016006000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16006000
Size:	4096

Details

Name:	00000017.00000002.464209017.00000000009BF000.00000004.00000010.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	9BF000
Size:	4096

Details

Name:	00000000.00000003.263188205.0000000015C5A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C5A000
Size:	4096

Details

Name:	00000000.00000003.416434625.0000000015DAE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DAE000
Size:	8192

Details

Name:	00000000.00000002.543465183.0000000012F38000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12F38000
Size:	40960

Details

Name:	00000007.00000002.306392534.00007FF5ED866000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED866000
Size:	4096

Details

Name:	00000000.00000003.413429926.000000001602D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1602D000
Size:	4096

Details

Name:	00000001.00000002.533764605.0000004ABC67E000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4ABC67E000
Size:	8192

Details

Name:	00000013.00000003.430252622.000001EE74E02000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74E02000
Size:	106496

Details

Name:	00000000.00000003.415107992.0000000015C41000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C41000
Size:	4096

Details

Name:	00000000.00000003.396988450.00000000131D8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	131D8000
Size:	12288

Details

Name:	00000013.00000002.441767409.0000009B2E57B000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	9B2E57B000
Size:	20480

Details

Name:	00000000.00000003.396549525.000000001303B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1303B000
Size:	98304

Details

Name:	00000000.00000002.542746592.00000000117D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	117D0000
Size:	36864

Details

Name:	00000001.00000002.535681834.000001FE6D49C000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE6D49C000
Size:	61440

Details

Name:	00000000.00000002.545238756.0000000015AFA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15AFA000
Size:	4096

Details

Name:	00000017.00000003.463769695.000000000057E000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57E000
Size:	16384

Details

Name:	00000001.00000002.537091933.000001FE729E0000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE729E0000
Size:	4096

Details

Name:	00000013.00000002.442473295.000001EE74670000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1EE74670000
Size:	8192

Details

Name:	00000009.00000002.535078371.00007DF591482000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF591482000
Size:	4096

Details

Name:	00000000.00000003.383773537.00000000131DE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	131DE000
Size:	20480

Details

Name:	00000000.00000003.263336500.000000001315E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1315E000
Size:	20480

Details

Name:	00000001.00000002.535411095.000001FE6D46E000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE6D46E000
Size:	4096

Details

Name:	00000000.00000003.350637952.0000000015AC7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15AC7000
Size:	16384

Details

Name:	00000014.00000002.430935222.000001338A700000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1338A700000
Size:	4096

Details

Name:	0000001A.00000002.536956069.000002170A65C000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170A65C000
Size:	4096

Details

Name:	00000000.00000003.351919083.0000000015DFE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DFE000
Size:	4096

Details

Name:	00000009.00000002.535627457.00007FF58FF00000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58FF00000
Size:	12288

Details

Name:	00000013.00000002.442973048.00007FF52B15F000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B15F000
Size:	8192

Details

Name:	0000000B.00000000.296954229.000002A575750000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A575750000
Size:	102400

Details

Name:	00000000.00000003.350633951.0000000015AC5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15AC5000
Size:	4096

Details

Name:	00000000.00000003.397224983.0000000013151000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13151000
Size:	28672

Details

Name:	00000000.00000003.323839841.000000001623E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1623E000
Size:	4096

Details

Name:	00000001.00000003.259448489.000001FE728DE000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE728DE000
Size:	73728

Details

Name:	00000013.00000002.442859178.00007FF52AF66000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52AF66000
Size:	20480

Details

Name:	00000000.00000003.412532590.0000000015DFA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DFA000
Size:	155648

Details

Name:	00000000.00000002.549632631.0000000018290000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18290000
Size:	8192

Details

Name:	00000006.00000002.535876553.00007FF5ED6EF000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED6EF000
Size:	16384

Details

Name:	00000017.00000002.464117576.000000000068E000.00000004.00000010.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	68E000
Size:	8192

Details

Name:	00000000.00000003.415154309.0000000015F8F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15F8F000
Size:	4096

Details

Name:	00000007.00000002.306348294.00007FF5ED821000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED821000
Size:	49152

Details

Name:	0000000D.00000002.326522594.00007FF51B8FC000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51B8FC000
Size:	32768

Details

Name:	00000006.00000002.534103142.000001E968780000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E968780000
Size:	102400

Details

Name:	00000000.00000003.419323822.0000000018E6B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E6B000
Size:	4096

Details

Name:	00000007.00000002.306107744.00000292D7A46000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A46000
Size:	12288

Details

Name:	00000000.00000003.349970702.0000000013115000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13115000
Size:	237568

Details

Name:	00000000.00000002.536610248.0000000000FB0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FB0000
Size:	8192

Details

Name:	00000000.00000003.418189628.0000000018D5A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D5A000
Size:	4096

Details

Name:	00000000.00000002.541587440.000000000F3FD000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F3FD000
Size:	12288

Details

Name:	00000001.00000002.538839106.00007FF5412B4000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5412B4000
Size:	4096

Details

Name:	00000001.00000002.538931360.00007FF5412D0000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5412D0000
Size:	4096

Details

Name:	00000000.00000002.544101415.000000001337E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	1337E000
Size:	8192

Details

Name:	00000000.00000002.552176386.00000000FF652000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF652000
Size:	4096

Details

Name:	00000017.00000002.463991215.000000000033F000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	33F000
Size:	4096

Details

Name:	00000017.00000002.464085495.0000000000587000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	587000
Size:	65536

Details

Name:	0000000A.00000003.295823941.0000023EBC6D1000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	23EBC6D1000
Size:	12288

Details

Name:	00000000.00000003.460484259.000000001316D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1316D000
Size:	4096

Details

Name:	00000000.00000003.412172661.000000001601E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1601E000
Size:	4096

Details

Name:	00000001.00000002.537233287.000001FE72C13000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE72C13000
Size:	24576

Details

Name:	00000000.00000003.349274554.0000000015B96000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15B96000
Size:	4096

Details

Name:	00000000.00000002.549544090.000000001822C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1822C000
Size:	8192

Details

Name:	00000017.00000000.458738556.000000007F370000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F370000
Size:	4096

Details

Name:	00000001.00000003.259443135.000001FE728D8000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE728D8000
Size:	16384

Details

Name:	00000000.00000002.545813122.00000000160F0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	160F0000
Size:	4096

Details

Name:	00000000.00000003.397252152.0000000013164000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13164000
Size:	4096

Details

Name:	00000000.00000003.350703019.0000000015AE8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15AE8000
Size:	16384

Details

Name:	00000001.00000002.537169900.000001FE72C00000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE72C00000
Size:	69632

Details

Name:	0000001A.00000002.539887299.00007FF539886000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539886000
Size:	8192

Details

Name:	00000000.00000002.546855266.0000000017C25000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C25000
Size:	4096

Details

Name:	00000000.00000003.411754779.000000000F5E3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5E3000
Size:	16384

Details

Name:	00000000.00000003.419163161.0000000015E49000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E49000
Size:	4096

Details

Name:	00000006.00000002.533879538.0000008674C7F000.00000004.00000010.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8674C7F000
Size:	4096

Details

Name:	00000013.00000002.442901318.00007FF52AFC9000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52AFC9000
Size:	4096

Details

Name:	00000000.00000002.542878305.0000000011A6A000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	11A6A000
Size:	8192

Details

Name:	00000000.00000003.517272343.000000000E5C5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5C5000
Size:	53248

Details

Name:	0000001A.00000002.539841252.00007FF5397D1000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5397D1000
Size:	12288

Details

Name:	00000001.00000003.268502738.000001FE72CF3000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE72CF3000
Size:	12288

Details

Name:	00000009.00000002.535713497.00007FF58FF2C000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58FF2C000
Size:	8192

Details

Name:	00000000.00000002.543918833.000000001316F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1316F000
Size:	4096

Details

Name:	00000000.00000002.546701633.0000000017C15000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C15000
Size:	4096

Details

Name:	00000000.00000003.417480092.0000000018E53000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E53000
Size:	4096

Details

Name:	00000000.00000002.538263734.000000000D67B000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	D67B000
Size:	20480

Details

Name:	0000001A.00000002.536880151.000002170A648000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170A648000
Size:	4096

Details

Name:	00000001.00000002.537467516.000001FE72C62000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE72C62000
Size:	245760

Details

Name:	00000000.00000003.350196235.00000000131C8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	131C8000
Size:	77824

Details

Name:	00000000.00000003.351908593.0000000015DF9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DF9000
Size:	4096

Details

Name:	00000000.00000003.351680598.0000000015DF4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DF4000
Size:	4096

Details

Name:	0000001A.00000002.540991806.00007FF539C6C000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539C6C000
Size:	36864

Details

Name:	00000000.00000003.418818399.0000000018E66000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E66000
Size:	8192

Details

Name:	00000000.00000003.419189056.0000000015E52000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E52000
Size:	4096

Details

Name:	0000000F.00000002.379102412.00007FF55D6A0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55D6A0000
Size:	12288

Details

Name:	00000000.00000003.397565428.000000000F669000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F669000
Size:	8192

Details

Name:	00000000.00000002.549710440.00000000182CC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	182CC000
Size:	8192

Details

Name:	00000000.00000003.350782425.0000000015AFC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15AFC000
Size:	167936

Details

Name:	00000001.00000002.533560366.0000004ABC1FB000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4ABC1FB000
Size:	20480

Details

Name:	00000014.00000002.432464655.000001338A870000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1338A870000
Size:	36864

Details

Name:	00000000.00000003.414746299.000000000F5E3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5E3000
Size:	16384

Details

Name:	00000000.00000002.551182658.0000000018AEA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18AEA000
Size:	4096

Details

Name:	00000001.00000002.534467661.000001FE6D400000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE6D400000
Size:	73728

Details

Name:	00000000.00000002.544892598.0000000015ACC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15ACC000
Size:	4096

Details

Name:	00000000.00000003.416228355.0000000016008000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16008000
Size:	4096

Details

Name:	00000000.00000003.459295139.0000000013168000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13168000
Size:	16384

Details

Name:	00000000.00000003.415372059.0000000016012000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16012000
Size:	4096

Details

Name:	00000001.00000003.259402929.000001FE728D0000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE728D0000
Size:	28672

Details

Name:	00000001.00000002.533910614.000001FE6D200000.00000004.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1FE6D200000
Size:	4096

Details

Name:	00000005.00000002.536676661.00007FF526CD0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF526CD0000
Size:	12288

Details

Name:	00000009.00000002.534101792.000002A6004D0000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A6004D0000
Size:	4096

Details

Name:	00000017.00000002.464241141.00000000024EF000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24EF000
Size:	16384

Details

Name:	00000000.00000003.258834031.000000000E250000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E250000
Size:	12288

Details

Name:	0000000B.00000002.309530122.000002A575900000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A575900000
Size:	4096

Details

Name:	00000017.00000002.464185753.0000000000870000.00000004.00000040.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	870000
Size:	4096

Details

Name:	00000001.00000002.535901136.000001FE6D502000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE6D502000
Size:	45056

Details

Name:	0000000F.00000002.378419956.000001B379B80000.00000004.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1B379B80000
Size:	4096

Details

Name:	00000000.00000003.262860413.0000000015A0E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15A0E000
Size:	12288

Details

Name:	00000006.00000002.534371244.000001E968800000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E968800000
Size:	4096

Details

Name:	00000000.00000003.459037166.0000000018BE1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18BE1000
Size:	69632

Details

Name:	00000000.00000003.416009288.0000000015D35000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D35000
Size:	4096

Details

Name:	00000000.00000003.349662919.000000000F5C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5C0000
Size:	28672

Details

Name:	00000000.00000003.411490284.000000000F602000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F602000
Size:	4096

Details

Name:	00000006.00000002.533704184.000000867487E000.00000004.00000010.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	867487E000
Size:	8192

Details

Name:	0000000A.00000000.295243269.00007FF520356000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF520356000
Size:	8192

Details

Name:	00000017.00000002.464320743.0000000002784000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2784000
Size:	4096

Details

Name:	00000013.00000002.442389334.000001EE74102000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74102000
Size:	16384

Details

Name:	00000000.00000002.546284977.0000000016EB9000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	16EB9000
Size:	32768

Details

Name:	00000001.00000002.538895854.00007FF5412C4000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5412C4000
Size:	4096

Details

Name:	00000000.00000003.386461874.0000000016245000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16245000
Size:	16384

Details

Name:	0000000A.00000002.534703503.0000023EBC8F5000.00000004.00000040.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	23EBC8F5000
Size:	12288

Details

Name:	00000005.00000002.536108695.00007FF526B45000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF526B45000
Size:	12288

Details

Name:	00000001.00000002.537718466.000001FE72CF4000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE72CF4000
Size:	24576

Details

Name:	00000007.00000002.306271032.00007FF5ED0B1000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED0B1000
Size:	4096

Details

Name:	00000000.00000003.416787362.0000000018E53000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E53000
Size:	4096

Details

Name:	00000000.00000003.463127278.0000000013164000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13164000
Size:	4096

Details

Name:	00000007.00000002.306002684.00000292D7840000.00000004.00000040.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	292D7840000
Size:	4096

Details

Name:	0000000B.00000002.309692461.00007DF577032000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF577032000
Size:	4096

Details

Name:	00000000.00000003.396365193.0000000015D46000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D46000
Size:	28672

Details

Name:	00000000.00000002.550924981.0000000018AC2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18AC2000
Size:	4096

Details

Name:	00000000.00000003.411656756.000000000F537000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F537000
Size:	344064

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.351240455.0000000015D81000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D81000
Size:	4096

Details

Name:	00000000.00000002.540219082.000000000DD5F000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DD5F000
Size:	4096

Details

Name:	00000000.00000003.397386669.0000000013175000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13175000
Size:	217088

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.416292689.0000000016021000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16021000
Size:	4096

Details

Name:	0000000B.00000002.309197657.000000BC02FFE000.00000004.00000010.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	BC02FFE000
Size:	8192

Details

Name:	00000000.00000003.516976239.00000000122FB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	122FB000
Size:	16384

Details

Name:	00000000.00000002.549888141.00000000183D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	183D0000
Size:	8192

Details

Name:	00000013.00000003.419527377.000001EE74710000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74710000
Size:	4096

Details

Name:	00000000.00000003.516922352.00000000122E2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	122E2000
Size:	16384

Details

Name:	00000000.00000003.351703339.0000000015DFE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DFE000
Size:	4096

Details

Name:	00000000.00000002.543268096.0000000011C71000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	11C71000
Size:	102400

Details

Name:	00000000.00000003.351088183.000000000F621000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F621000
Size:	278528

Details

Name:	0000000D.00000002.326939623.00007FF51BDE6000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51BDE6000
Size:	12288

Details

Name:	00000000.00000002.549011400.0000000017FA3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17FA3000
Size:	61440

Details

Name:	00000000.00000003.384122175.000000000F617000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F617000
Size:	36864

Details

Name:	00000000.00000003.414298349.0000000015E0D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E0D000
Size:	77824

Details

Name:	00000000.00000003.413196929.0000000015DBF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DBF000
Size:	8192

Details

Name:	00000000.00000002.546985792.0000000017C5A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C5A000
Size:	4096

Details

Name:	00000000.00000003.413321844.0000000016001000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16001000
Size:	4096

Details

Name:	00000017.00000002.464141124.000000000074F000.00000004.00000010.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	74F000
Size:	4096

Details

Name:	00000007.00000003.305732031.00000292D7A7A000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A7A000
Size:	36864

Details

Name:	0000000A.00000002.535769769.00007FF54277E000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54277E000
Size:	4096

Details

Name:	00000006.00000002.534644016.000001E96885A000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E96885A000
Size:	40960

Details

Name:	00000017.00000003.463603729.0000000002DE0000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2DE0000
Size:	16384

Details

Name:	00000000.00000003.418085372.0000000015CE7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CE7000
Size:	69632

Details

Name:	00000000.00000003.463135491.0000000013166000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13166000
Size:	4096

Details

Name:	0000000B.00000002.310086308.00007FF575B5C000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF575B5C000
Size:	36864

Details

Name:	00000000.00000003.349291426.0000000015BA0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15BA0000
Size:	4096

Details

Name:	00000007.00000002.306027899.00000292D78A0000.00000004.00000020.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	292D78A0000
Size:	8192

Details

Name:	0000000B.00000002.309738411.00007FF57538C000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF57538C000
Size:	16384

Details

Name:	00000000.00000002.546953015.0000000017C36000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C36000
Size:	4096

Details

Name:	00000005.00000002.537083827.00007FF526DA5000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF526DA5000
Size:	16384

Details

Name:	00000014.00000002.430578502.00000015BC4F9000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	15BC4F9000
Size:	28672

Details

Name:	00000013.00000002.443085309.00007FF52B27A000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B27A000
Size:	4096

Details

Name:	00000000.00000003.411746183.000000000F5E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5E0000
Size:	8192

Details

Name:	00000000.00000003.350034555.000000001315B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1315B000
Size:	4096

Details

Name:	00000001.00000003.259377220.000001FE72A30000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE72A30000
Size:	8192

Details

Name:	00000000.00000003.417086275.0000000015E5C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E5C000
Size:	4096

Details

Name:	00000000.00000003.349904456.000000000F6A0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F6A0000
Size:	389120

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.547886952.0000000017E51000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17E51000
Size:	28672

Details

Name:	00000000.00000003.351234480.0000000015D7C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D7C000
Size:	4096

Details

Name:	0000000B.00000002.310124714.00007FF575BD6000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF575BD6000
Size:	12288

Details

Name:	00000014.00000003.430272497.000001338A796000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1338A796000
Size:	24576

Details

Name:	00000000.00000003.262842933.0000000015C5F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C5F000
Size:	4096

Details

Name:	00000000.00000003.462301825.0000000015CF8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CF8000
Size:	16384

Details

Name:	00000000.00000002.548032646.0000000017E83000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17E83000
Size:	4096

Details

Name:	0000000A.00000002.535042867.00007DF441C70000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF441C70000
Size:	20480

Details

Name:	00000013.00000002.443120777.00007FF52B2A0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B2A0000
Size:	24576

Details

Name:	00000000.00000002.550259197.00000000186E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	186E0000
Size:	8192

Details

Name:	00000013.00000003.424691651.000001EE74990000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74990000
Size:	131072

Details

Name:	00000000.00000002.547843141.0000000017E39000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17E39000
Size:	4096

Details

Name:	00000017.00000000.458730473.000000000286B000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	286B000
Size:	16384

Details

Name:	00000000.00000003.412919610.0000000015DFA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DFA000
Size:	155648

Details

Name:	00000007.00000002.306135300.00000292D7A6A000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A6A000
Size:	8192

Details

Name:	00000006.00000002.535041696.00007DF5EEC30000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EEC30000
Size:	4096

Details

Name:	00000000.00000003.412352439.0000000015D46000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D46000
Size:	28672

Details

Name:	0000000A.00000002.534158415.0000023EBC610000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	23EBC610000
Size:	16384

Details

Name:	00000013.00000002.442795830.00007FF52AC0C000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52AC0C000
Size:	16384

Details

Name:	00000000.00000002.535109201.0000000000B39000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	B39000
Size:	12288

Details

Name:	0000000A.00000003.295794706.0000023EBC6C9000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	23EBC6C9000
Size:	4096

Details

Name:	00000001.00000002.538787280.00007FF541270000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541270000
Size:	4096

Details

Name:	00000000.00000003.412863343.0000000015CE6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CE6000
Size:	73728

Details

Name:	0000000A.00000000.295145156.00007DF543DA2000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF543DA2000
Size:	4096

Details

Name:	00000000.00000002.551096024.0000000018AE0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18AE0000
Size:	4096

Details

Name:	00000000.00000002.551318404.0000000018B08000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18B08000
Size:	4096

Details

Name:	00000006.00000002.535971752.00007FF5ED700000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED700000
Size:	12288

Details

Name:	00000000.00000002.548045122.0000000017E85000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17E85000
Size:	4096

Details

Name:	00000000.00000003.263112729.0000000015C0F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C0F000
Size:	4096

Details

Name:	00000007.00000003.305814135.00000292D7A5A000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A5A000
Size:	4096

Details

Name:	00000013.00000002.441880543.0000009B2ED78000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	9B2ED78000
Size:	32768

Details

Name:	00000007.00000002.306320931.00007FF5ED800000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED800000
Size:	12288

Details

Name:	00000000.00000003.349954522.00000000130EF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130EF000
Size:	118784

Details

Name:	00000000.00000003.459978602.000000000F677000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F677000
Size:	163840

Details

Name:	00000009.00000002.534525230.000002A67FE02000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A67FE02000
Size:	65536

Details

Name:	00000001.00000002.534392694.000001FE6D380000.00000004.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1FE6D380000
Size:	4096

Details

Name:	00000001.00000002.536615886.000001FE6E310000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE6E310000
Size:	4096

Details

Name:	0000000D.00000002.326345089.0000026003200000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26003200000
Size:	12288

Details

Name:	00000000.00000003.416048857.0000000015DD9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DD9000
Size:	4096

Details

Name:	00000001.00000002.538337075.00007FF54111F000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54111F000
Size:	12288

Details

Name:	00000000.00000003.397001902.00000000131E6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	131E6000
Size:	139264

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000001A.00000002.540422064.00007FF539B2A000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539B2A000
Size:	20480

Details

Name:	00000000.00000002.534139169.0000000000A60000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	A60000
Size:	8192

Details

Name:	0000000D.00000003.325271387.0000026002E47000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	26002E47000
Size:	4096

Details

Name:	00000017.00000000.457663159.000000007F370000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F370000
Size:	4096

Details

Name:	00000013.00000003.420858592.000001EE74972000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74972000
Size:	90112

Details

Name:	00000000.00000003.351937788.0000000015E02000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E02000
Size:	8192

Details

Name:	00000013.00000002.442984558.00007FF52B18F000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B18F000
Size:	12288

Details

Name:	00000005.00000002.536138696.00007FF526BC5000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF526BC5000
Size:	8192

Details

Name:	00000000.00000002.551113839.0000000018AE2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18AE2000
Size:	4096

Details

Name:	00000007.00000002.306024063.00000292D7880000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	292D7880000
Size:	4096

Details

Name:	0000000F.00000002.379111353.00007FF55D6A4000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55D6A4000
Size:	28672

Details

Name:	00000000.00000002.548847166.0000000017F7B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17F7B000
Size:	77824

Details

Name:	00000000.00000003.459012603.0000000018E7F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E7F000
Size:	28672

Details

Name:	00000014.00000002.432970507.00007FF5099CB000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5099CB000
Size:	4096

Details

Name:	00000009.00000002.534738027.000002A67FE34000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A67FE34000
Size:	32768

Details

Name:	00000000.00000003.263009518.00000000131E6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	131E6000
Size:	139264

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.383676141.0000000013166000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13166000
Size:	4096

Details

Name:	00000000.00000002.544606164.0000000015920000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15920000
Size:	4096

Details

Name:	00000005.00000002.535790080.00007DFB38729000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DFB38729000
Size:	4096

Details

Name:	00000000.00000003.411170933.0000000015DCA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DCA000
Size:	69632

Details

Name:	00000000.00000002.551214218.0000000018AEE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18AEE000
Size:	4096

Details

Name:	00000000.00000003.415386505.0000000016017000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16017000
Size:	4096

Details

Name:	00000005.00000002.534892421.0000018413D90000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	18413D90000
Size:	12288

Details

Name:	00000017.00000002.464313160.0000000002774000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2774000
Size:	8192

Details

Name:	00000000.00000003.351790623.0000000015E16000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E16000
Size:	4096

Details

Name:	00000000.00000003.415800634.0000000015DA0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DA0000
Size:	4096

Details

Name:	00000013.00000003.423718169.000001EE74960000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74960000
Size:	65536

Details

Name:	0000000D.00000002.326310200.0000026002F08000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	26002F08000
Size:	24576

Details

Name:	00000017.00000003.463679850.00000000005C4000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C4000
Size:	4096

Details

Name:	00000000.00000003.459774605.0000000013164000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13164000
Size:	4096

Details

Name:	00000000.00000003.417711588.0000000018CE7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18CE7000
Size:	4096

Details

Name:	00000000.00000002.550644633.00000000189E4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	189E4000
Size:	16384

Details

Name:	00000000.00000003.258795051.000000000E59A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E59A000
Size:	12288

Details

Name:	00000000.00000003.415059226.0000000015C32000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C32000
Size:	4096

Details

Name:	00000000.00000003.417104916.0000000015F13000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15F13000
Size:	12288

Details

Name:	00000000.00000003.351308514.0000000015DE0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DE0000
Size:	4096

Details

Name:	00000000.00000003.261930900.000000000E5D3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5D3000
Size:	12288

Details

Name:	00000000.00000003.411958649.0000000015FCB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15FCB000
Size:	16384

Details

Name:	00000017.00000002.463929503.00000000001AC000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1AC000
Size:	16384

Details

Name:	00000000.00000003.350284223.0000000013023000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13023000
Size:	196608

Details

Name:	00000000.00000003.397149753.00000000130D7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130D7000
Size:	4096

Details

Name:	00000000.00000003.458926384.0000000015D43000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D43000
Size:	4096

Details

Name:	00000009.00000000.287045509.00007DF5914A0000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5914A0000
Size:	12288

Details

Name:	00000000.00000002.540155285.000000000DB1E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DB1E000
Size:	8192

Details

Name:	00000000.00000002.543887611.0000000013166000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	13166000
Size:	4096

Details

Name:	0000000B.00000003.308985727.000002A575851000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2A575851000
Size:	110592

Details

Name:	00000001.00000002.537146754.000001FE72A10000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE72A10000
Size:	4096

Details

Name:	00000001.00000002.533446353.0000004ABBCFB000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4ABBCFB000
Size:	20480

Details

Name:	00000000.00000003.260200026.0000000012F8F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12F8F000
Size:	28672

Details

Name:	00000000.00000002.540665324.000000000E30D000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	E30D000
Size:	12288

Details

Name:	00000013.00000002.442692216.00007DF42A780000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF42A780000
Size:	20480

Details

Name:	00000006.00000002.535070028.00007DF5EEC32000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EEC32000
Size:	4096

Details

Name:	00000000.00000003.383835526.0000000015AFE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15AFE000
Size:	49152

Details

Name:	00000000.00000003.258587271.000000000E597000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E597000
Size:	20480

Details

Name:	00000000.00000002.551356478.0000000018B0E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18B0E000
Size:	4096

Details

Name:	00000000.00000003.260110109.00000000130C7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130C7000
Size:	20480

Details

Name:	00000000.00000003.262928399.000000001315B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1315B000
Size:	4096

Details

Name:	00000000.00000003.417204617.0000000015CB1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CB1000
Size:	4096

Details

Name:	00000000.00000003.412804900.0000000015DF3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DF3000
Size:	20480

Details

Name:	00000000.00000003.460111881.0000000013215000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13215000
Size:	172032

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.544204658.0000000015172000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	15172000
Size:	28672

Details

Name:	0000000B.00000002.309338059.000002A575800000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A575800000
Size:	4096

Details

Name:	00000009.00000002.533688202.000000BC0BE7F000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	BC0BE7F000
Size:	4096

Details

Name:	00000000.00000003.397524334.000000000F621000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F621000
Size:	278528

Details

Name:	00000000.00000003.418986540.0000000015CB1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CB1000
Size:	4096

Details

Name:	00000017.00000002.464669848.00000000046FE000.00000004.00000010.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	46FE000
Size:	8192

Details

Name:	00000000.00000003.460228782.00000000130D7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130D7000
Size:	4096

Details

Name:	00000000.00000002.542418167.000000000F669000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F669000
Size:	8192

Details

Name:	00000000.00000002.549230327.0000000018055000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18055000
Size:	4096

Details

Name:	00000009.00000002.535109941.00007DF591490000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF591490000
Size:	4096

Details

Name:	00000007.00000003.305753618.00000292D7A7E000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A7E000
Size:	20480

Details

Name:	00000013.00000002.441940546.000001EE73EA0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1EE73EA0000
Size:	102400

Details

Name:	0000000D.00000002.326710561.00007FF51BCFB000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51BCFB000
Size:	8192

Details

Name:	00000000.00000003.418395305.0000000018E6B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E6B000
Size:	4096

Details

Name:	00000000.00000002.541998187.000000000F58E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F58E000
Size:	36864

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000001.00000002.534177130.000001FE6D250000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FE6D250000
Size:	4096

Details

Name:	00000009.00000002.535348753.00007FF58FCE5000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58FCE5000
Size:	12288

Details

Name:	00000000.00000002.547801170.0000000017E33000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17E33000
Size:	4096

Details

Name:	0000000D.00000002.325665608.0000026002C90000.00000004.00000020.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	26002C90000
Size:	8192

Details

Name:	00000001.00000002.537267868.000001FE72C1C000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE72C1C000
Size:	53248

Details

Name:	00000000.00000002.545389842.0000000015B26000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15B26000
Size:	81920

Details

Name:	00000001.00000002.536022466.000001FE6D800000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FE6D800000
Size:	12288

Details

Name:	00000000.00000002.548906859.0000000017F93000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17F93000
Size:	20480

Details

Name:	00000000.00000002.540972698.000000000E56D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E56D000
Size:	77824

Details

Name:	00000000.00000003.383177193.0000000015DFE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DFE000
Size:	4096

Details

Name:	0000001A.00000002.540782701.00007FF539BFF000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539BFF000
Size:	16384

Details

Name:	00000000.00000003.418628833.0000000018E53000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E53000
Size:	4096

Details

Name:	00000000.00000003.349727504.000000000F5F9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5F9000
Size:	4096

Details

Name:	00000000.00000002.546474859.0000000016F24000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	16F24000
Size:	4096

Details

Name:	0000001A.00000002.537202874.000002170A698000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170A698000
Size:	4096

Details

Name:	00000013.00000002.443229250.00007FF52B35B000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B35B000
Size:	12288

Details

Name:	00000017.00000002.464469561.000000000283A000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	283A000
Size:	32768

Details

Name:	00000000.00000003.417570308.0000000018E7A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E7A000
Size:	4096

Details

Name:	00000000.00000003.383885505.000000000F5F4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5F4000
Size:	8192

Details

Name:	00000000.00000003.412012456.0000000016019000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16019000
Size:	8192

Details

Name:	00000000.00000003.260036466.0000000013074000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13074000
Size:	36864

Details

Name:	00000007.00000002.306099170.00000292D7A3E000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A3E000
Size:	12288

Details

Name:	00000000.00000003.413160237.0000000015DAC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DAC000
Size:	4096

Details

Name:	00000000.00000003.413225348.0000000015DCC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DCC000
Size:	49152

Details

Name:	00000009.00000002.535994478.00007FF58FF61000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58FF61000
Size:	16384

Details

Name:	00000000.00000002.536223454.0000000000C20000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	C20000
Size:	16384

Details

Name:	0000001A.00000002.539661142.00007FF539402000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539402000
Size:	4096

Details

Name:	00000006.00000002.535745932.00007FF5ED6C5000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED6C5000
Size:	16384

Details

Name:	00000000.00000003.350402728.00000000130BA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130BA000
Size:	28672

Details

Name:	0000001A.00000002.540586555.00007FF539B6C000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539B6C000
Size:	12288

Details

Name:	0000000A.00000002.535078657.00007DF543DA0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF543DA0000
Size:	4096

Details

Name:	00000013.00000002.441760457.0000009B2E47E000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	9B2E47E000
Size:	8192

Details

Name:	00000005.00000002.534021776.00000184137F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	184137F0000
Size:	4096

Details

Name:	00000006.00000002.533842530.0000008674B7E000.00000004.00000010.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8674B7E000
Size:	8192

Details

Name:	00000000.00000003.323824035.0000000016228000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16228000
Size:	16384

Details

Name:	0000000B.00000002.309622754.000002A575AD0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A575AD0000
Size:	4096

Details

Name:	00000000.00000003.383712060.0000000013175000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13175000
Size:	335872

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.545534092.0000000015C73000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15C73000
Size:	12288

Details

Name:	00000000.00000002.545064152.0000000015AE8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15AE8000
Size:	16384

Details

Name:	00000000.00000002.535569273.0000000000B59000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	B59000
Size:	4096

Details

Name:	0000001A.00000002.537242228.000002170A6B0000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170A6B0000
Size:	8192

Details

Name:	00000006.00000002.534915119.000001E968F30000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E968F30000
Size:	4096

Details

Name:	00000009.00000002.536021777.00007FF58FF85000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58FF85000
Size:	20480

Details

Name:	00000000.00000002.545459271.0000000015B9C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15B9C000
Size:	8192

Details

Name:	00000000.00000003.416632440.0000000018D04000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D04000
Size:	8192

Details

Name:	00000000.00000002.542453823.000000000F686000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F686000
Size:	102400

Details

Name:	00000000.00000003.417043444.0000000015E44000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E44000
Size:	4096

Details

Name:	00000014.00000002.431300545.000001338A770000.00000004.00000020.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1338A770000
Size:	40960

Details

Name:	0000000A.00000002.536360280.00007FF5428D6000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5428D6000
Size:	20480

Details

Name:	0000001A.00000003.466878212.000002170B750000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2170B750000
Size:	4096

Details

Name:	00000000.00000002.550565842.0000000018944000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18944000
Size:	8192

Details

Name:	0000000B.00000002.310096434.00007FF575B66000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF575B66000
Size:	20480

Details

Name:	00000006.00000000.282500046.00007DF5EEC42000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EEC42000
Size:	4096

Details

Name:	00000000.00000003.415175367.0000000015F99000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15F99000
Size:	4096

Details

Name:	00000000.00000003.418687250.0000000018E6B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E6B000
Size:	4096

Details

Name:	00000000.00000003.262932753.000000001315E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1315E000
Size:	20480

Details

Name:	00000017.00000000.457929045.0000000000150000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	150000
Size:	102400

Details

Name:	00000000.00000002.547290423.0000000017D29000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17D29000
Size:	4096

Details

Name:	00000000.00000003.263315376.0000000013155000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13155000
Size:	12288

Details

Name:	00000005.00000002.533624777.00000066904FE000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	66904FE000
Size:	8192

Details

Name:	00000000.00000003.349378239.0000000015DD6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DD6000
Size:	8192

Details

Name:	00000000.00000003.349372082.0000000015D86000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D86000
Size:	4096

Details

Name:	00000000.00000002.543210826.0000000011C22000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	11C22000
Size:	131072

Details

Name:	0000000D.00000002.326206036.0000026002E4C000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	26002E4C000
Size:	8192

Details

Name:	00000000.00000003.412754986.0000000015DC4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DC4000
Size:	8192

Details

Name:	00000000.00000003.460672806.00000000131CE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	131CE000
Size:	28672

Details

Name:	00000000.00000003.261066598.0000000015A66000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15A66000
Size:	12288

Details

Name:	00000014.00000002.432850404.00007DF50B640000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50B640000
Size:	4096

Details

Name:	00000000.00000003.413440807.0000000016032000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16032000
Size:	4096

Details

Name:	00000000.00000003.412516505.0000000015DEA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DEA000
Size:	32768

Details

Name:	00000001.00000000.258582460.00007DF542840000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF542840000
Size:	4096

Details

Name:	00000000.00000002.536707258.0000000001010000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1010000
Size:	24576

Details

Name:	00000000.00000003.411713629.000000000F5B1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5B1000
Size:	53248

Details

Name:	00000000.00000003.412189815.0000000016028000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16028000
Size:	4096

Details

Name:	00000000.00000003.266415241.00000000118F0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	118F0000
Size:	65536

Details

Name:	00000000.00000002.549241469.0000000018069000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18069000
Size:	4096

Details

Name:	0000000D.00000003.325217755.0000026002E55000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	26002E55000
Size:	106496

Details

Name:	00000000.00000002.551649239.0000000018E42000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18E42000
Size:	4096

Details

Name:	00000000.00000002.540547328.000000000E23D000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	E23D000
Size:	12288

Details

Name:	0000000D.00000002.325398026.000000831CEAB000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	831CEAB000
Size:	20480

Details

Name:	00000001.00000002.536408721.000001FE6DD02000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE6DD02000
Size:	32768

Details

Name:	00000017.00000000.458417717.000000007F382000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F382000
Size:	4096

Details

Name:	00000000.00000003.459083818.0000000013081000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13081000
Size:	12288

Details

Name:	00000000.00000003.415719658.0000000015D82000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D82000
Size:	8192

Details

Name:	00000000.00000003.263066675.0000000013138000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13138000
Size:	49152

Details

Name:	00000000.00000002.547688038.0000000017E09000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17E09000
Size:	4096

Details

Name:	00000000.00000003.418802878.0000000018E5D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E5D000
Size:	4096

Details

Name:	00000000.00000002.552006376.0000000067E17000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	67E17000
Size:	4096

Details

Name:	00000000.00000003.517039971.0000000012323000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12323000
Size:	32768

Details

Name:	00000000.00000003.418559692.0000000018D6D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D6D000
Size:	4096

Details

Name:	00000000.00000003.517177146.000000000E598000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E598000
Size:	4096

Details

Name:	00000000.00000003.411732551.000000000F5C8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5C8000
Size:	94208

Details

Name:	00000000.00000003.459141219.00000000130C7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130C7000
Size:	8192

Details

Name:	00000000.00000002.550665033.00000000189F0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	189F0000
Size:	196608

Details

Name:	0000001A.00000002.537352049.000002170A6E8000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170A6E8000
Size:	4096

Details

Name:	00000000.00000003.414161158.0000000018CE7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18CE7000
Size:	4096

Details

Name:	0000000A.00000002.535298788.00007FF520356000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF520356000
Size:	8192

Details

Name:	00000013.00000002.443408980.00007FF52B3DC000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B3DC000
Size:	36864

Details

Name:	00000000.00000003.350621028.0000000015ABE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15ABE000
Size:	16384

Details

Name:	00000000.00000002.550425404.000000001882C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1882C000
Size:	4096

Details

Name:	00000000.00000002.538202635.000000000C7A8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C7A8000
Size:	8192

Details

Name:	00000000.00000003.263204211.0000000015C64000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C64000
Size:	4096

Details

Name:	0000000F.00000002.378648792.000001B379D02000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B379D02000
Size:	16384

Details

Name:	00000013.00000002.442564854.000001EE7492F000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE7492F000
Size:	49152

Details

Name:	00000001.00000002.533727265.0000004ABC57E000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4ABC57E000
Size:	8192

Details

Name:	00000000.00000003.349356253.0000000015D7C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D7C000
Size:	4096

Details

Name:	00000000.00000002.543359602.0000000012E61000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12E61000
Size:	40960

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.418044093.0000000018E7F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E7F000
Size:	49152

Details

Name:	0000001A.00000002.540749242.00007FF539BF8000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539BF8000
Size:	4096

Details

Name:	00000000.00000003.261935536.000000000E5D7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5D7000
Size:	98304

Details

Name:	00000000.00000003.416118568.0000000018E86000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E86000
Size:	16384

Details

Name:	00000000.00000002.536508190.0000000000F80000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F80000
Size:	4096

Details

Name:	00000000.00000003.460721096.00000000131E6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	131E6000
Size:	139264

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000001A.00000002.535628470.0000020F08D70000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	20F08D70000
Size:	344064

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	00000013.00000003.423776074.000001EE74971000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74971000
Size:	8192

Details

Name:	00000000.00000002.551638414.0000000018BE0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18BE0000
Size:	4096

Details

Name:	0000001A.00000002.539020845.000002170B69D000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170B69D000
Size:	16384

Details

Name:	00000017.00000002.464581200.0000000002EE0000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2EE0000
Size:	36864

Details

Name:	0000000D.00000002.326483719.00007FF51B59C000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51B59C000
Size:	16384

Details

Name:	00000001.00000002.537799955.00007DF542842000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF542842000
Size:	4096

Details

Name:	00000000.00000002.548468453.0000000017EFD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17EFD000
Size:	4096

Details

Name:	00000000.00000003.255996701.0000000000B90000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	B90000
Size:	57344

Details

Name:	00000001.00000002.538870215.00007FF5412C0000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5412C0000
Size:	12288

Details

Name:	00000000.00000002.541284408.000000000E7EC000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	E7EC000
Size:	16384

Details

Name:	00000007.00000002.306211658.00007DF5EED32000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EED32000
Size:	4096

Details

Name:	00000000.00000002.549347642.000000001811D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1811D000
Size:	4096

Details

Name:	00000000.00000003.260091406.00000000130C7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130C7000
Size:	20480

Details

Name:	00000000.00000003.351991357.0000000015E16000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E16000
Size:	4096

Details

Name:	00000013.00000003.422280688.000001EE7496B000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE7496B000
Size:	16384

Details

Name:	00000001.00000002.536843362.000001FE6E410000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FE6E410000
Size:	65536

Details

Name:	00000000.00000002.542957216.0000000011ABB000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	11ABB000
Size:	4096

Details

Name:	00000013.00000000.416337698.000001EE73EA0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1EE73EA0000
Size:	102400

Details

Name:	0000000F.00000002.378258376.0000000C7AACC000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C7AACC000
Size:	16384

Details

Name:	00000000.00000003.459225361.0000000013115000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13115000
Size:	274432

Details

Name:	0000000A.00000002.535812248.00007FF5427C5000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5427C5000
Size:	12288

Details

Name:	00000000.00000003.460515475.0000000013171000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13171000
Size:	12288

Details

Name:	00000000.00000003.386643492.0000000000A70000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A70000
Size:	28672

Details

Name:	00000013.00000002.442156396.000001EE74055000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74055000
Size:	110592

Details

Name:	00000000.00000002.547503684.0000000017DBD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17DBD000
Size:	4096

Details

Name:	00000006.00000002.536010133.00007FF5ED704000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED704000
Size:	28672

Details

Name:	00000000.00000002.544483825.0000000015810000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	15810000
Size:	155648

Details

Name:	00000000.00000003.418447268.0000000018E7F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E7F000
Size:	28672

Details

Name:	00000001.00000002.536185806.000001FE6DBC3000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE6DBC3000
Size:	4096

Details

Name:	00000001.00000002.535553103.000001FE6D489000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE6D489000
Size:	16384

Details

Name:	00000000.00000003.260743734.000000000E5D3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5D3000
Size:	102400

Details

Name:	00000000.00000003.397461855.000000000F5F4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5F4000
Size:	8192

Details

Name:	00000007.00000003.305790424.00000292D7A61000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A61000
Size:	8192

Details

Name:	00000000.00000003.418478707.0000000018D50000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D50000
Size:	4096

Details

Name:	00000000.00000003.416535576.0000000018CD8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18CD8000
Size:	8192

Details

Name:	00000000.00000003.414628702.000000000F59E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F59E000
Size:	69632

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	00000001.00000002.535970936.000001FE6D513000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE6D513000
Size:	12288

Details

Name:	00000005.00000002.536708614.00007FF526CD4000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF526CD4000
Size:	28672

Details

Name:	0000001A.00000002.540840887.00007FF539C14000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539C14000
Size:	28672

Details

Name:	0000000A.00000002.535169808.00007DF543DB2000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF543DB2000
Size:	4096

Details

Name:	00000000.00000002.544302032.00000000153E0000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	153E0000
Size:	4096

Details

Name:	00000000.00000002.544908152.0000000015ACE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15ACE000
Size:	4096

Details

Name:	00000000.00000002.536909500.0000000002D90000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D90000
Size:	4096

Details

Name:	0000001A.00000002.538226359.000002170B26C000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170B26C000
Size:	4096

Details

Name:	00000000.00000003.351272366.0000000015DD6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DD6000
Size:	8192

Details

Name:	00000001.00000002.539280696.00007FF541321000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541321000
Size:	16384

Details

Name:	00000000.00000003.416402946.0000000015DA0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DA0000
Size:	4096

Details

Name:	00000000.00000003.412748041.0000000015DBF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DBF000
Size:	8192

Details

Name:	00000013.00000002.442910024.00007FF52AFCB000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52AFCB000
Size:	4096

Details

Name:	00000000.00000002.550098585.0000000018604000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18604000
Size:	8192

Details

Name:	00000000.00000002.549762239.000000001831C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1831C000
Size:	8192

Details

Name:	00000000.00000003.416566822.0000000018CE7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18CE7000
Size:	4096

Details

Name:	00000013.00000003.424605394.000001EE749A1000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE749A1000
Size:	32768

Details

Name:	00000000.00000003.417309259.0000000018CF1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18CF1000
Size:	4096

Details

Name:	0000000D.00000002.326593472.00007FF51BBBD000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51BBBD000
Size:	4096

Details

Name:	00000000.00000003.459050668.0000000013059000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13059000
Size:	4096

Details

Name:	00000000.00000003.418421998.0000000018E75000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E75000
Size:	4096

Details

Name:	00000000.00000002.548699873.0000000017F4D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17F4D000
Size:	4096

Details

Name:	00000000.00000003.350351825.0000000013081000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13081000
Size:	12288

Details

Name:	0000000D.00000003.325259781.0000026002E49000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	26002E49000
Size:	8192

Details

Name:	0000000F.00000000.366821062.00007DF55EBF0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55EBF0000
Size:	12288

Details

Name:	00000017.00000002.464604015.00000000030E0000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	30E0000
Size:	73728

Details

Name:	00000000.00000003.414844861.00000000161AE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	161AE000
Size:	20480

Details

Name:	00000013.00000002.443325660.00007FF52B399000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B399000
Size:	24576

Details

Name:	00000000.00000002.547976821.0000000017E77000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17E77000
Size:	4096

Details

Name:	00000006.00000002.535421051.00007FF5ED4AF000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED4AF000
Size:	12288

Details

Name:	00000000.00000002.549103953.0000000017FC5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17FC5000
Size:	4096

Details

Name:	0000001A.00000002.540383692.00007FF539B05000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539B05000
Size:	8192

Details

Name:	00000000.00000002.548834077.0000000017F77000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17F77000
Size:	12288

Details

Name:	00000000.00000002.545800949.0000000015F13000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15F13000
Size:	12288

Details

Name:	00000000.00000002.541318603.000000000E82D000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	E82D000
Size:	12288

Details

Name:	0000001A.00000002.541056370.00007FF539C84000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539C84000
Size:	86016

Details

Name:	00000000.00000003.349622287.000000000F58E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F58E000
Size:	36864

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.351637584.0000000015DE0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DE0000
Size:	4096

Details

Name:	00000013.00000002.443287170.00007FF52B380000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B380000
Size:	12288

Details

Name:	0000000F.00000002.378743629.000001B37A260000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B37A260000
Size:	4096

Details

Name:	0000000F.00000002.378469952.000001B379BD0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B379BD0000
Size:	4096

Details

Name:	00000000.00000003.412339109.0000000015D35000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D35000
Size:	4096

Details

Name:	00000000.00000003.418230345.0000000018D64000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D64000
Size:	4096

Details

Name:	00000000.00000002.551148973.0000000018AE6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18AE6000
Size:	4096

Details

Name:	00000013.00000003.423477191.000001EE749B2000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE749B2000
Size:	118784

Details

Name:	00000000.00000003.349866222.000000000F669000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F669000
Size:	8192

Details

Name:	00000000.00000003.418676746.0000000018E66000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E66000
Size:	8192

Details

Name:	00000001.00000002.536223732.000001FE6DBD0000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE6DBD0000
Size:	4096

Details

Name:	00000017.00000003.461008576.00000000005B8000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5B8000
Size:	36864

Details

Name:	00000001.00000002.533780954.0000004ABC779000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4ABC779000
Size:	28672

Details

Name:	00000000.00000002.544397107.00000000156E3000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	156E3000
Size:	8192

Details

Name:	00000000.00000002.534490079.0000000000AE8000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	AE8000
Size:	16384

Details

Name:	00000000.00000003.397425273.0000000015E0D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E0D000
Size:	45056

Details

Name:	0000001A.00000002.534688222.0000020F08921000.00000004.00000020.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	20F08921000
Size:	184320

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.412606905.0000000015D46000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D46000
Size:	28672

Details

Name:	00000006.00000002.535922550.00007FF5ED6F5000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED6F5000
Size:	8192

Details

Name:	00000000.00000003.414030016.0000000018BE9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18BE9000
Size:	4096

Details

Name:	00000001.00000002.537020393.000001FE727C0000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE727C0000
Size:	4096

Details

Name:	00000000.00000002.550445329.0000000018854000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18854000
Size:	4096

Details

Name:	00000000.00000002.550483907.00000000188A4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	188A4000
Size:	8192

Details

Name:	00000000.00000003.417220404.0000000015CBB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CBB000
Size:	4096

Details

Name:	00000000.00000003.351902188.0000000015DF4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DF4000
Size:	4096

Details

Name:	00000000.00000003.414206265.0000000018CFB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18CFB000
Size:	4096

Details

Name:	00000007.00000002.306054274.00000292D79A0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	292D79A0000
Size:	4096

Details

Name:	00000000.00000003.349533225.0000000015E19000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E19000
Size:	20480

Details

Name:	00000000.00000003.459064880.0000000013068000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13068000
Size:	86016

Details

Name:	0000000B.00000002.310077735.00007FF575B59000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF575B59000
Size:	8192

Details

Name:	00000001.00000002.533594146.0000004ABC2FA000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4ABC2FA000
Size:	24576

Details

Name:	00000005.00000002.533539890.00000066901FB000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	66901FB000
Size:	20480

Details

Name:	00000000.00000003.396875548.00000000131C8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	131C8000
Size:	20480

Details

Name:	0000000D.00000002.326848538.00007FF51BD31000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51BD31000
Size:	49152

Details

Name:	00000013.00000003.430492838.000001EE74E02000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74E02000
Size:	794624

Details

Name:	00000000.00000003.416802326.0000000018E5D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E5D000
Size:	4096

Details

Name:	00000000.00000003.350960334.0000000015B0A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15B0A000
Size:	110592

Details

Name:	00000000.00000003.351650120.0000000015DE5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DE5000
Size:	4096

Details

Name:	00000000.00000002.546243632.0000000016EB0000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	16EB0000
Size:	12288

Details

Name:	0000001A.00000002.537007337.000002170A668000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170A668000
Size:	4096

Details

Name:	00000000.00000003.411306059.0000000015D35000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D35000
Size:	4096

Details

Name:	00000000.00000003.258199487.0000000012E51000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12E51000
Size:	512000

Details

Name:	00000000.00000003.414225944.0000000018CFF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18CFF000
Size:	8192

Details

Name:	00000000.00000003.411227192.0000000015E24000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E24000
Size:	4096

Details

Name:	00000000.00000003.417695606.0000000018CDD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18CDD000
Size:	4096

Details

Name:	00000000.00000003.351447447.0000000015E16000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E16000
Size:	4096

Details

Name:	00000000.00000003.411473293.000000000F5F9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5F9000
Size:	4096

Details

Name:	00000000.00000003.416375451.0000000015D9B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D9B000
Size:	4096

Details

Name:	00000000.00000003.412383211.0000000015D7B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D7B000
Size:	4096

Details

Name:	00000009.00000002.533758807.000002A600010000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A600010000
Size:	4096

Details

Name:	00000000.00000003.419350512.0000000018E7A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E7A000
Size:	4096

Details

Name:	00000017.00000002.464006682.0000000000520000.00000004.00000020.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	520000
Size:	16384

Details

Name:	00000000.00000003.262752527.0000000015C05000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C05000
Size:	4096

Details

Name:	00000014.00000002.433072774.00007FF50A121000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50A121000
Size:	16384

Details

Name:	0000000D.00000002.326875955.00007FF51BD62000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51BD62000
Size:	12288

Details

Name:	00000000.00000002.552212055.00000000FF670000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF670000
Size:	12288

Details

Name:	00000000.00000003.383243782.0000000015C5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C5B000
Size:	77824

Details

Name:	00000001.00000002.536328853.000001FE6DC02000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE6DC02000
Size:	4096

Details

Name:	00000000.00000003.412418326.0000000015D94000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D94000
Size:	4096

Details

Name:	0000000D.00000002.326250380.0000026002E81000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	26002E81000
Size:	57344

Details

Name:	00000000.00000003.460205365.00000000130C7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130C7000
Size:	8192

Details

Name:	00000000.00000002.543995993.00000000131CE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	131CE000
Size:	28672

Details

Name:	00000000.00000003.459554867.00000000130D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130D0000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000009.00000002.533860118.000002A600220000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A600220000
Size:	12288

Details

Name:	0000000F.00000002.378919813.00007FF55CF2C000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55CF2C000
Size:	16384

Details

Name:	0000000B.00000002.309873223.00007FF575AEF000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF575AEF000
Size:	16384

Details

Name:	00000000.00000003.416778652.0000000018E42000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E42000
Size:	4096

Details

Name:	00000000.00000003.415582589.0000000015D57000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D57000
Size:	4096

Details

Name:	00000013.00000003.423549459.000001EE749B4000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE749B4000
Size:	294912

Details

Name:	00000013.00000003.426093776.000001EE74990000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74990000
Size:	4096

Details

Name:	00000000.00000003.413393898.000000001601E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1601E000
Size:	4096

Details

Name:	00000000.00000003.350009822.0000000013151000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13151000
Size:	28672

Details

Name:	00000013.00000002.441909150.0000009B2EF7F000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	9B2EF7F000
Size:	4096

Details

Name:	00000000.00000003.417385740.0000000018D5F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D5F000
Size:	4096

Details

Name:	00000000.00000002.551367320.0000000018B10000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18B10000
Size:	4096

Details

Name:	00000000.00000002.548786179.0000000017F6B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17F6B000
Size:	20480

Details

Name:	00000000.00000002.550274152.00000000186F4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	186F4000
Size:	8192

Details

Name:	00000000.00000003.418162221.0000000018D50000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D50000
Size:	4096

Details

Name:	0000000D.00000002.326664439.00007FF51BC30000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51BC30000
Size:	24576

Details

Name:	00000000.00000003.399131900.0000000015C42000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C42000
Size:	40960

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.351286991.0000000015DDB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DDB000
Size:	4096

Details

Name:	00000000.00000003.349740719.000000000F5FB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5FB000
Size:	4096

Details

Name:	00000001.00000002.539466845.00007FF541362000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541362000
Size:	12288

Details

Name:	00000017.00000003.463643450.0000000000A27000.00000004.00000040.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	A27000
Size:	8192

Details

Name:	00000000.00000003.351478204.0000000015D64000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D64000
Size:	4096

Details

Name:	00000000.00000003.459149781.00000000130D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130D0000
Size:	20480

Details

Name:	0000000F.00000002.378476986.000001B379BF0000.00000004.00000020.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1B379BF0000
Size:	8192

Details

Name:	00000001.00000002.535022507.000001FE6D43F000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE6D43F000
Size:	94208

Details

Name:	00000000.00000003.351414877.0000000015E07000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E07000
Size:	4096

Details

Name:	00000000.00000002.546310032.0000000016EC2000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	16EC2000
Size:	16384

Details

Name:	00000000.00000002.544471379.0000000015716000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15716000
Size:	8192

Details

Name:	0000001A.00000002.541368259.00007FFF9D605000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFF9D605000
Size:	4096

Details

Name:	00000000.00000003.412203131.0000000016032000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16032000
Size:	4096

Details

Name:	00000000.00000003.416171985.0000000013025000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13025000
Size:	81920

Details

Name:	0000001A.00000002.536794664.0000020F0A2A0000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20F0A2A0000
Size:	4096

Details

Name:	00000013.00000002.443037382.00007FF52B22D000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B22D000
Size:	4096

Details

Name:	00000013.00000002.442413667.000001EE74113000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74113000
Size:	8192

Details

Name:	00000017.00000002.464784133.000000007F382000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F382000
Size:	4096

Details

Name:	00000005.00000002.533445980.000000668FEFF000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	668FEFF000
Size:	4096

Details

Name:	00000000.00000003.459326223.0000000013175000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13175000
Size:	335872

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.419339804.0000000018E75000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E75000
Size:	4096

Details

Name:	00000000.00000003.383278532.0000000015B20000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15B20000
Size:	20480

Details

Name:	0000000A.00000002.534612120.0000023EBC8A0000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	23EBC8A0000
Size:	4096

Details

Name:	00000006.00000002.534807622.000001E968913000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E968913000
Size:	4096

Details

Name:	0000000A.00000002.533642536.0000023EBC490000.00000004.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	23EBC490000
Size:	4096

Details

Name:	00000000.00000003.262725072.0000000015AF3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15AF3000
Size:	4096

Details

Name:	00000000.00000003.418308293.0000000018D72000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D72000
Size:	4096

Details

Name:	00000001.00000003.259519214.000001FE728F1000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE728F1000
Size:	4096

Details

Name:	00000001.00000002.537850135.00007DF542860000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF542860000
Size:	12288

Details

Name:	00000000.00000003.416140484.0000000015CD2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CD2000
Size:	81920

Details

Name:	0000001A.00000002.541105948.00007FF539CD6000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539CD6000
Size:	20480

Details

Name:	00000000.00000003.397119562.00000000130BA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130BA000
Size:	28672

Details

Name:	00000017.00000000.458426607.000000007F390000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F390000
Size:	12288

Details

Name:	0000001A.00000002.540939685.00007FF539C5C000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539C5C000
Size:	20480

Details

Name:	00000007.00000003.305739303.00000292D7A7C000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A7C000
Size:	28672

Details

Name:	0000001A.00000003.469184261.0000020F08921000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20F08921000
Size:	167936

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.417147453.0000000015C8F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C8F000
Size:	4096

Details

Name:	00000001.00000002.536101689.000001FE6D990000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FE6D990000
Size:	20480

Details

Name:	00000000.00000002.548772308.0000000017F67000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17F67000
Size:	12288

Details

Name:	00000000.00000003.411842075.0000000015DF3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DF3000
Size:	20480

Details

Name:	0000001A.00000002.540486409.00007FF539B52000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539B52000
Size:	40960

Details

Name:	00000006.00000002.536554722.00007FF5ED75C000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED75C000
Size:	36864

Details

Name:	00000000.00000003.396469762.0000000015E18000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E18000
Size:	8192

Details

Name:	00000000.00000002.543254617.0000000011C5F000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	11C5F000
Size:	4096

Details

Name:	00000000.00000003.397166856.00000000130DF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130DF000
Size:	196608

Details

Name:	00000000.00000003.383184194.0000000015E02000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E02000
Size:	8192

Details

Name:	00000000.00000003.415198326.0000000015F9D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15F9D000
Size:	8192

Details

Name:	00000007.00000002.305981094.000000991B37E000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	991B37E000
Size:	8192

Details

Name:	00000000.00000003.265919501.00000000154D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	154D0000
Size:	65536

Details

Name:	00000001.00000003.264144175.000001FE728D0000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE728D0000
Size:	4096

Details

Name:	00000000.00000003.383914243.000000000F5FD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5FD000
Size:	16384

Details

Name:	00000000.00000003.397215986.0000000013145000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13145000
Size:	40960

Details

Name:	00000001.00000002.537110368.000001FE729F0000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE729F0000
Size:	4096

Details

Name:	00000006.00000000.282469375.000001E968780000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E968780000
Size:	102400

Details

Name:	00000013.00000002.442036416.000001EE74000000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74000000
Size:	73728

Details

Name:	00000001.00000002.536353415.000001FE6DC15000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE6DC15000
Size:	4096

Details

Name:	00000000.00000003.415409009.000000001601C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1601C000
Size:	4096

Details

Name:	00000000.00000003.413740653.00000000161AE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	161AE000
Size:	20480

Details

Name:	0000000D.00000002.326955710.00007FF51BDF3000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51BDF3000
Size:	16384

Details

Name:	00000000.00000002.537358493.000000000433C000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	433C000
Size:	16384

Details

Name:	00000000.00000002.548924570.0000000017F99000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17F99000
Size:	4096

Details

Name:	00000000.00000002.542239339.000000000F5F9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F5F9000
Size:	4096

Details

Name:	00000000.00000002.548538958.0000000017F19000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17F19000
Size:	4096

Details

Name:	00000005.00000002.534039387.0000018413800000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18413800000
Size:	73728

Details

Name:	00000000.00000003.415604927.0000000015D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D5B000
Size:	8192

Details

Name:	0000001A.00000002.540716598.00007FF539BE0000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539BE0000
Size:	8192

Details

Name:	00000009.00000002.535769562.00007FF58FF3F000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58FF3F000
Size:	4096

Details

Name:	00000000.00000002.537602405.000000000B4C9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	B4C9000
Size:	118784

Details

Name:	00000001.00000002.538381482.00007FF541152000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541152000
Size:	12288

Details

Name:	00000000.00000002.549048243.0000000017FB7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17FB7000
Size:	12288

Details

Name:	00000000.00000002.548382721.0000000017EEF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17EEF000
Size:	4096

Details

Name:	00000000.00000002.539966328.000000000D850000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	D850000
Size:	8192

Details

Name:	00000001.00000002.537678490.000001FE72CEA000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE72CEA000
Size:	28672

Details

Name:	00000001.00000002.536141394.000001FE6DBC0000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE6DBC0000
Size:	8192

Details

Name:	00000000.00000003.418785476.0000000018E53000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E53000
Size:	4096

Details

Name:	00000000.00000003.397491981.000000000F602000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F602000
Size:	4096

Details

Name:	00000005.00000002.535626317.00007DF528202000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF528202000
Size:	4096

Details

Name:	00000000.00000003.516935602.00000000122E7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	122E7000
Size:	16384

Details

Name:	00000014.00000003.430302999.000001338A79F000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1338A79F000
Size:	77824

Details

Name:	00000007.00000003.305745467.00000292D7A6C000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A6C000
Size:	28672

Details

Name:	00000017.00000003.463687471.00000000005C6000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C6000
Size:	12288

Details

Name:	00000017.00000002.464290059.000000000274A000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	274A000
Size:	4096

Details

Name:	00000001.00000000.258654073.00007FF5413F3000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5413F3000
Size:	16384

Details

Name:	0000001A.00000003.469090020.0000020F08971000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20F08971000
Size:	57344

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000000.309816728.0000026002C40000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	26002C40000
Size:	102400

Details

Name:	00000000.00000003.386383152.0000000000BB0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BB0000
Size:	40960

Details

Name:	0000000D.00000002.325469684.000000831D7FE000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	831D7FE000
Size:	8192

Details

Name:	00000000.00000003.397238692.000000001315B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1315B000
Size:	4096

Details

Name:	0000000D.00000002.326435712.00007DF51D252000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51D252000
Size:	4096

Details

Name:	00000000.00000003.459833964.0000000013175000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13175000
Size:	335872

Details

Name:	00000014.00000002.432993504.00007FF509DC9000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF509DC9000
Size:	4096

Details

Name:	00000000.00000002.546040894.00000000165A0000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	165A0000
Size:	12288

Details

Name:	0000000B.00000002.309208252.000000BC030F7000.00000004.00000010.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	BC030F7000
Size:	36864

Details

Name:	00000017.00000000.458764794.000000007F390000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F390000
Size:	12288

Details

Name:	00000000.00000003.351188434.0000000015D64000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D64000
Size:	4096

Details

Name:	00000009.00000000.287024104.00007DF591480000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF591480000
Size:	4096

Details

Name:	00000006.00000002.534839898.000001E968CD0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E968CD0000
Size:	12288

Details

Name:	00000000.00000003.397018434.0000000013209000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13209000
Size:	221184

Details

Name:	00000000.00000003.411201225.0000000015DF3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DF3000
Size:	20480

Details

Name:	00000000.00000003.350379316.000000001309E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1309E000
Size:	8192

Details

Name:	0000000D.00000002.326303680.0000026002F02000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	26002F02000
Size:	12288

Details

Name:	00000000.00000003.396459406.0000000015C73000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C73000
Size:	12288

Details

Name:	00000000.00000000.254449985.00000000FF650000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF650000
Size:	4096

Details

Name:	00000001.00000002.537668120.000001FE72CE2000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE72CE2000
Size:	4096

Details

Name:	00000000.00000003.459950914.0000000013209000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13209000
Size:	221184

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000013.00000003.441549492.000001EE74052000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74052000
Size:	122880

Details

Name:	00000000.00000003.411273863.0000000015CE6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CE6000
Size:	163840

Details

Name:	00000000.00000002.535170712.0000000000B42000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	B42000
Size:	8192

Details

Name:	00000000.00000002.548688790.0000000017F4B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17F4B000
Size:	4096

Details

Name:	00000000.00000002.540456901.000000000DFB0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	DFB0000
Size:	8192

Details

Name:	00000000.00000002.537695251.000000000C4B7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C4B7000
Size:	8192

Details

Name:	00000000.00000003.415879705.0000000015DC2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DC2000
Size:	4096

Details

Name:	00000000.00000003.413592366.0000000015DF3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DF3000
Size:	20480

Details

Name:	00000000.00000002.545115746.0000000015AEF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15AEF000
Size:	4096

Details

Name:	00000013.00000003.423765206.000001EE7496A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE7496A000
Size:	24576

Details

Name:	00000000.00000003.418711555.0000000018E75000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E75000
Size:	4096

Details

Name:	00000001.00000002.537964865.00007FF540C74000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF540C74000
Size:	4096

Details

Name:	00000001.00000002.538064637.00007FF540FA2000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF540FA2000
Size:	8192

Details

Name:	00000000.00000000.254460014.00000000FF660000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF660000
Size:	4096

Details

Name:	00000000.00000003.463161162.000000001316F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1316F000
Size:	4096

Details

Name:	00000000.00000002.541066077.000000000E59F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E59F000
Size:	28672

Details

Name:	00000009.00000002.534644699.000002A67FE24000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A67FE24000
Size:	16384

Details

Name:	00000000.00000002.544193948.0000000015160000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15160000
Size:	8192

Details

Name:	00000013.00000002.441985337.000001EE73ED0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1EE73ED0000
Size:	4096

Details

Name:	0000000B.00000002.309698066.00007DF577040000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF577040000
Size:	4096

Details

Name:	00000017.00000000.458711271.00000000001F0000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F0000
Size:	16384

Details

Name:	00000000.00000003.349391259.0000000015DDB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DDB000
Size:	4096

Details

Name:	00000000.00000002.552109621.00000000FF548000.00000020.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute read
Base address:	FF548000
Size:	4096

Details

Name:	00000000.00000003.349641759.000000000F59E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F59E000
Size:	69632

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	00000000.00000003.459915131.00000000131D8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	131D8000
Size:	53248

Details

Name:	00000000.00000002.548576688.0000000017F23000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17F23000
Size:	4096

Details

Name:	0000001A.00000000.463387386.00007DF53B140000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF53B140000
Size:	4096

Details

Name:	00000009.00000002.536376265.00007FF59001C000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59001C000
Size:	4096

Details

Name:	00000000.00000002.551971777.0000000067E0F000.00000008.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page write copy
Base address:	67E0F000
Size:	4096

Details

Name:	00000000.00000003.323748551.0000000016241000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16241000
Size:	4096

Details

Name:	00000000.00000002.546430110.0000000016F0A000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	16F0A000
Size:	32768

Details

Name:	00000000.00000003.460297811.0000000013115000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13115000
Size:	274432

Details

Name:	00000000.00000002.545294976.0000000015B01000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15B01000
Size:	36864

Details

Name:	00000000.00000002.551243732.0000000018AF2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18AF2000
Size:	4096

Details

Name:	00000000.00000003.351692257.0000000015DF9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DF9000
Size:	4096

Details

Name:	00000013.00000003.425783019.000001EE749B2000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE749B2000
Size:	122880

Details

Name:	00000000.00000002.545683409.0000000015DDB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15DDB000
Size:	53248

Details

Name:	00000000.00000002.542912768.0000000011A8E000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	11A8E000
Size:	4096

Details

Name:	00000000.00000003.458989600.0000000018E70000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E70000
Size:	4096

Details

Name:	00000017.00000002.464658348.00000000046BF000.00000004.00000010.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	46BF000
Size:	4096

Details

Name:	00000006.00000002.536355362.00007FF5ED74C000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED74C000
Size:	20480

Details

Name:	00000000.00000003.415890874.0000000015DC7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DC7000
Size:	4096

Details

Name:	00000009.00000002.534429007.000002A67FC30000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A67FC30000
Size:	12288

Details

Name:	00000013.00000003.419291423.000001EE740A8000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE740A8000
Size:	16384

Details

Name:	0000000B.00000002.309718182.00007DF577050000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF577050000
Size:	12288

Details

Name:	00000000.00000002.543624266.000000001303A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1303A000
Size:	86016

Details

Name:	0000000A.00000002.535719327.00007FF542765000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF542765000
Size:	8192

Details

Name:	00000000.00000002.544169260.0000000014920000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	14920000
Size:	4096

Details

Name:	00000000.00000003.413331954.0000000016006000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16006000
Size:	4096

Details

Name:	00000009.00000002.535936170.00007FF58FF54000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58FF54000
Size:	28672

Details

Name:	0000000D.00000002.325464333.000000831D6FF000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	831D6FF000
Size:	4096

Details

Name:	0000001A.00000002.533726836.00000059FADFE000.00000004.00000010.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	59FADFE000
Size:	8192

Details

Name:	00000000.00000003.460703068.00000000131D8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	131D8000
Size:	53248

Details

Name:	00000000.00000003.262741878.0000000015BF6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15BF6000
Size:	4096

Details

Name:	00000009.00000002.534468521.000002A67FC40000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A67FC40000
Size:	4096

Details

Name:	0000001A.00000003.469056454.000002170B64B000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2170B64B000
Size:	81920

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.416672963.0000000018D5A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D5A000
Size:	4096

Details

Name:	00000000.00000003.396218574.0000000015CC8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CC8000
Size:	32768

Details

Name:	00000000.00000003.384197429.000000000F66C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F66C000
Size:	155648

Details

Name:	00000013.00000003.423589908.000001EE74990000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74990000
Size:	147456

Details

Name:	00000000.00000003.462771787.000000000F6A0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F6A0000
Size:	389120

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.397479593.000000000F5FB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5FB000
Size:	4096

Details

Name:	0000000B.00000002.309318000.000002A5757A0000.00000004.00000020.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2A5757A0000
Size:	8192

Details

Name:	00000000.00000002.547114529.0000000017CD1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17CD1000
Size:	4096

Details

Name:	00000000.00000002.547585012.0000000017DE7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17DE7000
Size:	4096

Details

Name:	00000000.00000003.396638697.00000000130BA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130BA000
Size:	28672

Details

Name:	0000001A.00000002.540878489.00007FF539C29000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539C29000
Size:	24576

Details

Name:	00000000.00000002.542589017.000000000F7C0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	F7C0000
Size:	65536

Details

Name:	00000013.00000002.442027705.000001EE73FF0000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE73FF0000
Size:	4096

Details

Name:	00000000.00000003.351827344.0000000015DDB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DDB000
Size:	4096

Details

Name:	00000013.00000002.442825538.00007FF52AC37000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52AC37000
Size:	8192

Details

Name:	00000001.00000002.539477878.00007FF541369000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541369000
Size:	8192

Details

Name:	0000001A.00000002.540063863.00007FF5398F3000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5398F3000
Size:	4096

Details

Name:	00000000.00000003.351965409.0000000015E0C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E0C000
Size:	4096

Details

Name:	00000000.00000002.536053550.0000000000BA0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	BA0000
Size:	16384

Details

Name:	00000000.00000002.549485200.00000000181E5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	181E5000
Size:	4096

Details

Name:	00000000.00000003.418810908.0000000018E62000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E62000
Size:	4096

Details

Name:	00000000.00000003.411267051.0000000015CDA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CDA000
Size:	28672

Details

Name:	0000000D.00000002.326178352.0000026002E29000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	26002E29000
Size:	73728

Details

Name:	00000000.00000003.260047424.0000000013081000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13081000
Size:	12288

Details

Name:	00000000.00000002.543908603.000000001316D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1316D000
Size:	4096

Details

Name:	00000013.00000003.422318980.000001EE74993000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74993000
Size:	32768

Details

Name:	00000000.00000003.262812341.0000000015BFB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15BFB000
Size:	4096

Details

Name:	00000000.00000002.547712497.0000000017E0D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17E0D000
Size:	4096

Details

Name:	00000000.00000003.517285521.000000000E5D3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5D3000
Size:	114688

Details

Name:	00000014.00000002.433137084.00007FF50A16C000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50A16C000
Size:	36864

Details

Name:	00000001.00000002.534440621.000001FE6D3E1000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE6D3E1000
Size:	4096

Details

Name:	00000000.00000003.458944691.0000000018E53000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E53000
Size:	4096

Details

Name:	00000000.00000003.323830295.000000001622D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1622D000
Size:	45056

Details

Name:	00000001.00000002.539646711.00007FF5413E5000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5413E5000
Size:	16384

Details

Name:	00000007.00000002.306058229.00000292D7A00000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A00000
Size:	73728

Details

Name:	00000013.00000000.416403606.00007DF52C8B2000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF52C8B2000
Size:	4096

Details

Name:	00000005.00000002.534764954.0000018413A00000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	18413A00000
Size:	4096

Details

Name:	0000000F.00000002.379004077.00007FF55D54F000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55D54F000
Size:	8192

Details

Name:	00000000.00000002.540792413.000000000E50D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E50D000
Size:	8192

Details

Name:	00000000.00000003.412911212.0000000015DF3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DF3000
Size:	20480

Details

Name:	00000000.00000003.419271356.0000000018E53000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E53000
Size:	4096

Details

Name:	00000000.00000002.549992260.00000000184E1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	184E1000
Size:	4096

Details

Name:	0000001A.00000002.536727058.0000020F0A280000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	20F0A280000
Size:	12288

Details

Name:	00000000.00000002.542436345.000000000F66C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F66C000
Size:	45056

Details

Name:	00000000.00000002.540749256.000000000E4F0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E4F0000
Size:	4096

Details

Name:	00000017.00000002.464148245.000000000078E000.00000004.00000010.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	78E000
Size:	8192

Details

Name:	00000000.00000003.462570445.0000000015D43000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D43000
Size:	4096

Details

Name:	00000000.00000003.416301284.0000000016026000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16026000
Size:	4096

Details

Name:	00000000.00000002.549188335.0000000018005000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18005000
Size:	4096

Details

Name:	00000000.00000002.551686408.0000000067BC0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	67BC0000
Size:	4096

Details

Name:	00000001.00000000.258599601.00007DF542860000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF542860000
Size:	12288

Details

Name:	00000000.00000003.350424637.00000000130D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130D0000
Size:	20480

Details

Name:	00000000.00000002.544792914.0000000015ABE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15ABE000
Size:	16384

Details

Name:	0000001A.00000002.541189499.00007FF539CF3000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539CF3000
Size:	16384

Details

Name:	00000000.00000003.350713427.0000000015AED000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15AED000
Size:	4096

Details

Name:	00000000.00000003.259355814.000000000E5BB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5BB000
Size:	45056

Details

Name:	00000000.00000002.542608765.0000000011144000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	11144000
Size:	4096

Details

Name:	00000000.00000003.396981074.00000000131CE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	131CE000
Size:	28672

Details

Name:	00000001.00000003.260750185.000001FE729A0000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE729A0000
Size:	4096

Details

Name:	00000000.00000003.413189226.0000000015DBB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DBB000
Size:	4096

Details

Name:	00000000.00000002.546739627.0000000017C19000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C19000
Size:	4096

Details

Name:	00000000.00000002.544260983.0000000015250000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15250000
Size:	4096

Details

Name:	00000006.00000002.534332246.000001E9687D0000.00000004.00000020.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1E9687D0000
Size:	8192

Details

Name:	0000001A.00000003.469151527.0000020F088F8000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20F088F8000
Size:	131072

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.415864638.0000000015DB8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DB8000
Size:	4096

Details

Name:	00000000.00000002.533934983.00000000007D0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7D0000
Size:	4096

Details

Name:	00000000.00000003.383423666.0000000013081000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13081000
Size:	12288

Details

Name:	0000000A.00000002.535481308.00007FF5420F0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5420F0000
Size:	4096

Details

Name:	00000000.00000002.544289334.00000000153DF000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	153DF000
Size:	4096

Details

Name:	00000000.00000003.459437246.0000000013209000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13209000
Size:	221184

Details

Name:	00000000.00000003.463243652.00000000131D8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	131D8000
Size:	53248

Details

Name:	00000000.00000002.548012609.0000000017E81000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17E81000
Size:	4096

Details

Name:	00000000.00000003.262760289.0000000015C0F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C0F000
Size:	4096

Details

Name:	00000013.00000003.423795263.000001EE74971000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74971000
Size:	8192

Details

Name:	00000000.00000002.548494116.0000000017EFF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17EFF000
Size:	12288

Details

Name:	00000000.00000003.418337108.0000000018E42000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E42000
Size:	4096

Details

Name:	00000000.00000003.460661501.00000000131C8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	131C8000
Size:	20480

Details

Name:	00000017.00000003.463736701.0000000000582000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	582000
Size:	16384

Details

Name:	00000000.00000003.412525011.0000000015DF3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DF3000
Size:	20480

Details

Name:	0000000D.00000002.326612423.00007FF51BBBF000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51BBBF000
Size:	8192

Details

Name:	00000000.00000003.461076855.0000000015D29000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D29000
Size:	20480

Details

Name:	0000000B.00000000.297076776.00007DF577040000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF577040000
Size:	4096

Details

Name:	00000000.00000003.419390817.0000000015F13000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15F13000
Size:	12288

Details

Name:	00000000.00000003.413217700.0000000015DC9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DC9000
Size:	4096

Details

Name:	0000001A.00000002.537437870.000002170A750000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2170A750000
Size:	8192

Details

Name:	00000017.00000002.464499774.000000000284E000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	284E000
Size:	4096

Details

Name:	0000000F.00000002.378931834.00007FF55CF32000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55CF32000
Size:	4096

Details

Name:	00000000.00000002.548822910.0000000017F75000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17F75000
Size:	4096

Details

Name:	00000009.00000002.536108209.00007FF58FFA2000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58FFA2000
Size:	12288

Details

Name:	00000014.00000002.433110911.00007FF50A162000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50A162000
Size:	12288

Details

Name:	00000000.00000003.351857645.0000000015DE5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DE5000
Size:	4096

Details

Name:	0000001A.00000002.534085749.00000059FB5FE000.00000004.00000010.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	59FB5FE000
Size:	8192

Details

Name:	00000017.00000002.464488518.0000000002843000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2843000
Size:	36864

Details

Name:	00000005.00000002.533945434.00000184136F0000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	184136F0000
Size:	8192

Details

Name:	00000000.00000003.417916845.0000000018E53000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E53000
Size:	4096

Details

Name:	00000000.00000002.548677372.0000000017F49000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17F49000
Size:	4096

Details

Name:	0000000D.00000002.325425380.000000831D2FB000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	831D2FB000
Size:	20480

Details

Name:	00000014.00000002.433200524.00007FF50A1DC000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50A1DC000
Size:	8192

Details

Name:	00000001.00000002.538427914.00007FF541188000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541188000
Size:	4096

Details

Name:	00000000.00000003.411511792.000000000F621000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F621000
Size:	278528

Details

Name:	00000000.00000003.383907358.000000000F5FB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5FB000
Size:	4096

Details

Name:	00000000.00000003.417675615.0000000018C1A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18C1A000
Size:	4096

Details

Name:	0000001A.00000002.537474905.000002170A7C0000.00000004.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2170A7C0000
Size:	20480

Details

Name:	00000014.00000002.432868668.00007DF50B642000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50B642000
Size:	4096

Details

Name:	00000000.00000003.397332227.000000001315B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1315B000
Size:	4096

Details

Name:	00000000.00000003.463180999.0000000013175000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13175000
Size:	335872

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000F.00000002.378672028.000001B379D08000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B379D08000
Size:	24576

Details

Name:	00000013.00000002.441784420.0000009B2E777000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	9B2E777000
Size:	36864

Details

Name:	00000000.00000003.351064270.000000000F60B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F60B000
Size:	40960

Details

Name:	00000000.00000003.349687522.000000000F5E3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5E3000
Size:	16384

Details

Name:	0000000A.00000002.534033505.0000023EBC5D0000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	23EBC5D0000
Size:	8192

Details

Name:	00000000.00000003.396794828.000000001315D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1315D000
Size:	24576

Details

Name:	00000014.00000002.432488125.000001338AA70000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1338AA70000
Size:	16384

Details

Name:	0000001A.00000002.541340824.00007FFF9D602000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFF9D602000
Size:	8192

Details

Name:	00000000.00000003.383900296.000000000F5F9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5F9000
Size:	4096

Details

Name:	00000013.00000003.423804426.000001EE74975000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74975000
Size:	16384

Details

Name:	00000000.00000002.550037675.0000000018559000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18559000
Size:	4096

Details

Name:	0000001A.00000002.534102571.0000020F08710000.00000004.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	20F08710000
Size:	4096

Details

Name:	0000000B.00000002.309341948.000002A575802000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A575802000
Size:	65536

Details

Name:	00000000.00000003.411246502.0000000015FCB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15FCB000
Size:	16384

Details

Name:	00000000.00000003.263217745.00000000130F3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130F3000
Size:	4096

Details

Name:	00000000.00000003.411317012.0000000015D46000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D46000
Size:	28672

Details

Name:	00000014.00000003.430243917.000001338A79F000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1338A79F000
Size:	77824

Details

Name:	00000017.00000002.464762414.000000007F380000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F380000
Size:	4096

Details

Name:	00000001.00000002.533745822.0000004ABC5FE000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4ABC5FE000
Size:	8192

Details

Name:	00000000.00000002.537575674.000000000B4B3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	B4B3000
Size:	4096

Details

Name:	00000000.00000003.516948852.00000000122EC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	122EC000
Size:	16384

Details

Name:	00000000.00000003.350023269.0000000013159000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13159000
Size:	4096

Details

Name:	00000000.00000003.260300983.0000000012F25000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12F25000
Size:	36864

Details

Name:	00000000.00000003.413552557.0000000015DDC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DDC000
Size:	49152

Details

Name:	0000001A.00000002.539819156.00007FF539778000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539778000
Size:	4096

Details

Name:	00000006.00000002.534729831.000001E968875000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E968875000
Size:	28672

Details

Name:	00000000.00000003.415454412.0000000016026000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16026000
Size:	4096

Details

Name:	00000000.00000003.411504485.000000000F617000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F617000
Size:	36864

Details

Name:	00000013.00000002.443245470.00007FF52B36B000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B36B000
Size:	8192

Details

Name:	00000000.00000003.461089088.0000000015D2F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D2F000
Size:	4096

Details

Name:	00000000.00000003.386427013.000000001624B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1624B000
Size:	4096

Details

Name:	00000017.00000002.463961797.0000000000329000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	329000
Size:	8192

Details

Name:	00000000.00000003.411642725.000000000F52C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F52C000
Size:	40960

Details

Name:	00000000.00000002.547832660.0000000017E37000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17E37000
Size:	4096

Details

Name:	00000000.00000002.543704081.00000000130BA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	130BA000
Size:	28672

Details

Name:	0000001A.00000002.536920204.000002170A650000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170A650000
Size:	8192

Details

Name:	00000017.00000000.457963411.0000000000400000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	400000
Size:	4096

Details

Name:	00000000.00000002.537544100.000000000B4A5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	B4A5000
Size:	4096

Details

Name:	00000001.00000002.535581738.000001FE6D490000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE6D490000
Size:	40960

Details

Name:	00000000.00000003.418700550.0000000018E70000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E70000
Size:	4096

Details

Name:	0000000A.00000003.295857671.0000023EBC6D1000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	23EBC6D1000
Size:	8192

Details

Name:	00000007.00000003.305826695.00000292D7A57000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A57000
Size:	12288

Details

Name:	00000000.00000002.533757708.000000000079F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	79F000
Size:	12288

Details

Name:	00000000.00000003.396899057.00000000131DE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	131DE000
Size:	20480

Details

Name:	0000001A.00000002.534058581.00000059FB4FF000.00000004.00000010.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	59FB4FF000
Size:	4096

Details

Name:	00000005.00000002.534442668.000001841386E000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1841386E000
Size:	106496

Details

Name:	00000007.00000000.283833368.00007DF5EED30000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EED30000
Size:	4096

Details

Name:	00000000.00000003.414475315.0000000013025000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13025000
Size:	81920

Details

Name:	0000000F.00000002.378543312.000001B379C3C000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B379C3C000
Size:	49152

Details

Name:	00000017.00000002.464396836.00000000027C6000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27C6000
Size:	8192

Details

Name:	00000000.00000003.460862074.0000000015D43000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D43000
Size:	4096

Details

Name:	00000000.00000003.263354872.0000000013166000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13166000
Size:	4096

Details

Name:	00000001.00000002.538275325.00007FF5410EF000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5410EF000
Size:	8192

Details

Name:	00000005.00000002.534420685.0000018413867000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18413867000
Size:	24576

Details

Name:	00000000.00000003.351658315.0000000015DEA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DEA000
Size:	4096

Details

Name:	00000000.00000003.419004915.0000000015CBB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CBB000
Size:	4096

Details

Name:	00000000.00000003.412961479.0000000015C66000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C66000
Size:	65536

Details

Name:	00000000.00000003.384132913.000000000F621000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F621000
Size:	278528

Details

Name:	0000000D.00000002.325405855.000000831CF2E000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	831CF2E000
Size:	8192

Details

Name:	00000000.00000002.544870217.0000000015AC7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15AC7000
Size:	16384

Details

Name:	00000000.00000003.417753792.0000000018CFB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18CFB000
Size:	4096

Details

Name:	00000005.00000002.536045210.00007FF526A9C000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF526A9C000
Size:	4096

Details

Name:	00000000.00000002.546557664.0000000017BF5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17BF5000
Size:	4096

Details

Name:	0000001A.00000002.537193820.000002170A694000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170A694000
Size:	4096

Details

Name:	00000000.00000003.417779625.0000000018D04000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D04000
Size:	8192

Details

Name:	00000000.00000002.540286703.000000000DF50000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	DF50000
Size:	65536

Details

Name:	00000000.00000003.351615195.0000000015DD6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DD6000
Size:	8192

Details

Name:	00000009.00000000.286963485.000002A67FC10000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A67FC10000
Size:	102400

Details

Name:	00000000.00000002.545026698.0000000015AE4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15AE4000
Size:	4096

Details

Name:	00000017.00000003.460616848.0000000002DED000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2DED000
Size:	4096

Details

Name:	00000000.00000002.543373563.0000000012E6D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12E6D000
Size:	823296

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.263001617.00000000131D2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	131D2000
Size:	28672

Details

Name:	00000000.00000003.517242862.000000000E5D3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5D3000
Size:	114688

Details

Name:	00000000.00000003.412978375.0000000015C72000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C72000
Size:	16384

Details

Name:	00000000.00000003.412458162.0000000015DB1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DB1000
Size:	4096

Details

Name:	00000000.00000003.419374184.0000000015E5C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E5C000
Size:	4096

Details

Name:	00000000.00000003.417639801.0000000015DF3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DF3000
Size:	20480

Details

Name:	00000005.00000002.533702689.00000184136A0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	184136A0000
Size:	102400

Details

Name:	00000013.00000002.442647981.000001EE7497A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE7497A000
Size:	8192

Details

Name:	00000000.00000002.543102131.0000000011BA0000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	11BA0000
Size:	307200

Details

Name:	00000000.00000003.262737703.0000000015BF1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15BF1000
Size:	4096

Details

Name:	00000000.00000003.418953459.0000000015CA2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CA2000
Size:	8192

Details

Name:	00000000.00000003.415965469.0000000015DFA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DFA000
Size:	61440

Details

Name:	00000000.00000003.414393058.0000000015DFA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DFA000
Size:	61440

Details

Name:	00000013.00000003.426934496.000001EE749B4000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE749B4000
Size:	118784

Details

Name:	00000017.00000002.464108016.00000000005C6000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5C6000
Size:	12288

Details

Name:	00000000.00000003.349567093.000000000F52E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F52E000
Size:	28672

Details

Name:	00000017.00000002.464376565.00000000027A5000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27A5000
Size:	12288

Details

Name:	00000000.00000002.549473188.00000000181D1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	181D1000
Size:	4096

Details

Name:	00000001.00000002.537993219.00007FF540F59000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF540F59000
Size:	4096

Details

Name:	00000013.00000003.423613650.000001EE749D8000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE749D8000
Size:	147456

Details

Name:	00000009.00000002.534839860.000002A67FE58000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A67FE58000
Size:	57344

Details

Name:	0000000F.00000002.378525848.000001B379C29000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B379C29000
Size:	73728

Details

Name:	00000000.00000003.416413805.0000000015DA5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DA5000
Size:	4096

Details

Name:	00000014.00000000.417676272.000001338A5F0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1338A5F0000
Size:	102400

Details

Name:	00000001.00000002.533895207.0000004ABCAFE000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4ABCAFE000
Size:	8192

Details

Name:	00000000.00000003.397135782.00000000130C7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130C7000
Size:	8192

Details

Name:	00000000.00000003.412181188.0000000016023000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16023000
Size:	4096

Details

Name:	00000000.00000003.418644460.0000000018E5D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E5D000
Size:	4096

Details

Name:	00000000.00000002.540373988.000000000DF70000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	DF70000
Size:	65536

Details

Name:	00000000.00000003.418132566.00000000161A7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	161A7000
Size:	4096

Details

Name:	00000000.00000003.459797137.0000000013168000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13168000
Size:	16384

Details

Name:	00000001.00000002.538952643.00007FF5412D5000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5412D5000
Size:	16384

Details

Name:	0000000A.00000002.536109977.00007FF5428A5000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5428A5000
Size:	20480

Details

Name:	0000001A.00000002.540100786.00007FF53990C000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53990C000
Size:	24576

Details

Name:	00000000.00000003.419033629.0000000015CC2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CC2000
Size:	57344

Details

Name:	00000000.00000003.349893881.000000000F698000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F698000
Size:	28672

Details

Name:	00000000.00000003.262807752.0000000015BF6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15BF6000
Size:	4096

Details

Name:	00000000.00000002.545996582.0000000016256000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	16256000
Size:	4096

Details

Name:	00000000.00000002.544322152.0000000015470000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	15470000
Size:	114688

Details

Name:	00000000.00000003.396597775.0000000013081000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13081000
Size:	12288

Details

Name:	00000000.00000003.383781939.00000000131E6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	131E6000
Size:	139264

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.461241507.0000000015D46000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D46000
Size:	28672

Details

Name:	00000006.00000002.535771335.00007FF5ED6D0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED6D0000
Size:	8192

Details

Name:	00000000.00000003.350078298.0000000013166000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13166000
Size:	4096

Details

Name:	00000000.00000002.548297017.0000000017ED1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17ED1000
Size:	4096

Details

Name:	00000014.00000002.433019966.00007FF50A108000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50A108000
Size:	16384

Details

Name:	00000017.00000002.463949026.00000000001F0000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F0000
Size:	16384

Details

Name:	00000000.00000003.415824923.0000000015DAA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DAA000
Size:	4096

Details

Name:	0000000D.00000002.326910606.00007FF51BD84000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51BD84000
Size:	8192

Details

Name:	00000000.00000002.549843011.0000000018394000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18394000
Size:	8192

Details

Name:	0000001A.00000002.538250220.000002170B27B000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170B27B000
Size:	102400

Details

Name:	00000001.00000002.539046696.00007FF5412FB000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5412FB000
Size:	8192

Details

Name:	00000000.00000003.396788361.000000001315B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1315B000
Size:	4096

Details

Name:	00000000.00000003.351333920.0000000015DEA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DEA000
Size:	4096

Details

Name:	00000000.00000002.540869085.000000000E539000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E539000
Size:	16384

Details

Name:	00000000.00000002.547449070.0000000017D93000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17D93000
Size:	4096

Details

Name:	00000001.00000002.539591085.00007FF5413D6000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5413D6000
Size:	20480

Details

Name:	00000000.00000002.548425702.0000000017EFB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17EFB000
Size:	4096

Details

Name:	00000000.00000002.550882976.0000000018ABC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18ABC000
Size:	4096

Details

Name:	00000000.00000003.413570753.0000000015DEA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DEA000
Size:	32768

Details

Name:	00000006.00000002.536798534.00007FF5ED7E3000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED7E3000
Size:	16384

Details

Name:	00000001.00000002.538049541.00007FF540F86000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF540F86000
Size:	8192

Details

Name:	00000000.00000003.397244319.000000001315D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1315D000
Size:	24576

Details

Name:	00000000.00000002.545756515.0000000015E0C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15E0C000
Size:	81920

Details

Name:	00000005.00000000.280844430.00007DF528210000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF528210000
Size:	4096

Details

Name:	0000001A.00000002.537516482.000002170A7E4000.00000004.00000040.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2170A7E4000
Size:	12288

Details

Name:	0000000D.00000000.309835427.00007DF51D240000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51D240000
Size:	4096

Details

Name:	00000000.00000003.418906104.0000000015C8F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C8F000
Size:	4096

Details

Name:	00000000.00000003.414051656.0000000018BF3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18BF3000
Size:	4096

Details

Name:	00000000.00000003.349702531.000000000F5F0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5F0000
Size:	4096

Details

Name:	00000000.00000003.412404276.0000000015D8A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D8A000
Size:	4096

Details

Name:	00000000.00000002.549456465.00000000181BD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	181BD000
Size:	4096

Details

Name:	00000013.00000002.443255001.00007FF52B36F000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B36F000
Size:	16384

Details

Name:	00000000.00000003.418317551.0000000018DC8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18DC8000
Size:	4096

Details

Name:	00000000.00000003.418112323.0000000018E86000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E86000
Size:	20480

Details

Name:	0000001A.00000002.540341631.00007FF539AF0000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539AF0000
Size:	12288

Details

Name:	00000009.00000002.535876889.00007FF58FF48000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58FF48000
Size:	16384

Details

Name:	00000000.00000003.396305715.0000000015D46000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D46000
Size:	28672

Details

Name:	00000000.00000002.546347985.0000000016ECC000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	16ECC000
Size:	8192

Details

Name:	0000000F.00000002.378959707.00007FF55D391000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55D391000
Size:	4096

Details

Name:	00000000.00000003.262914224.0000000013150000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13150000
Size:	8192

Details

Name:	0000001A.00000002.540819691.00007FF539C08000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539C08000
Size:	16384

Details

Name:	00000000.00000003.383211388.0000000015E16000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E16000
Size:	4096

Details

Name:	0000000B.00000000.297092344.00007DF577050000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF577050000
Size:	12288

Details

Name:	00000013.00000003.441603460.000001EE7404B000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE7404B000
Size:	16384

Details

Name:	00000000.00000002.551547707.0000000018BB2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18BB2000
Size:	4096

Details

Name:	00000000.00000003.459398228.00000000131D8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	131D8000
Size:	53248

Details

Name:	00000000.00000003.413086614.0000000015D8A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D8A000
Size:	4096

Details

Name:	0000000A.00000002.533989304.0000023EBC4E0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	23EBC4E0000
Size:	4096

Details

Name:	00000009.00000002.533727461.000002A600000000.00000004.00000040.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2A600000000
Size:	4096

Details

Name:	00000000.00000003.396819980.000000001316D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1316D000
Size:	4096

Details

Name:	00000006.00000002.536508419.00007FF5ED759000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED759000
Size:	8192

Details

Name:	00000013.00000002.442871955.00007FF52AF6C000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52AF6C000
Size:	32768

Details

Name:	00000000.00000003.418620292.0000000018E42000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E42000
Size:	4096

Details

Name:	00000000.00000002.548811837.0000000017F73000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17F73000
Size:	4096

Details

Name:	00000000.00000003.416279428.000000001601C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1601C000
Size:	4096

Details

Name:	00000000.00000002.535422838.0000000000B51000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	B51000
Size:	8192

Details

Name:	00000014.00000002.433032766.00007FF50A110000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50A110000
Size:	12288

Details

Name:	00000000.00000003.419290606.0000000018E5D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E5D000
Size:	4096

Details

Name:	00000014.00000002.430951379.000001338A720000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1338A720000
Size:	8192

Details

Name:	00000000.00000002.544008799.00000000131D8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	131D8000
Size:	53248

Details

Name:	00000000.00000002.542863501.00000000119AE000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	119AE000
Size:	4096

Details

Name:	00000013.00000002.442290497.000001EE740E3000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE740E3000
Size:	8192

Details

Name:	00000000.00000003.413181343.0000000015DB6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DB6000
Size:	4096

Details

Name:	00000000.00000003.417058807.0000000015E4D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E4D000
Size:	8192

Details

Name:	00000000.00000003.416828704.0000000018E66000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E66000
Size:	8192

Details

Name:	00000005.00000002.534863753.0000018413D80000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	18413D80000
Size:	4096

Details

Name:	00000000.00000003.416331996.0000000016034000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16034000
Size:	4096

Details

Name:	00000000.00000002.546195556.0000000016EA1000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	16EA1000
Size:	16384

Details

Name:	00000000.00000003.415433299.0000000016021000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16021000
Size:	4096

Details

Name:	00000000.00000003.351565669.0000000015D7C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D7C000
Size:	4096

Details

Name:	00000001.00000002.537124035.000001FE72A00000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE72A00000
Size:	4096

Details

Name:	00000000.00000003.413849301.0000000013025000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13025000
Size:	81920

Details

Name:	00000017.00000000.458022108.000000007F372000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F372000
Size:	4096

Details

Name:	00000000.00000003.349296923.0000000015BA5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15BA5000
Size:	4096

Details

Name:	00000000.00000003.517089949.000000001238C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1238C000
Size:	16384

Details

Name:	0000000A.00000002.535935307.00007FF542866000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF542866000
Size:	4096

Details

Name:	00000000.00000003.412064871.0000000016037000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16037000
Size:	4096

Details

Name:	00000000.00000002.537778485.000000000C55D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C55D000
Size:	32768

Details

Name:	00000000.00000003.262829911.0000000015C0F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C0F000
Size:	4096

Details

Name:	00000001.00000002.539396543.00007FF541345000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541345000
Size:	20480

Details

Name:	00000005.00000002.536080166.00007FF526B12000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF526B12000
Size:	12288

Details

Name:	0000001A.00000002.533457847.00000059FA7AF000.00000004.00000010.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	59FA7AF000
Size:	4096

Details

Name:	00000000.00000002.547478205.0000000017DAB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17DAB000
Size:	4096

Details

Name:	0000000A.00000002.535012931.0000023EBD400000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	23EBD400000
Size:	4096

Details

Name:	00000005.00000000.280839765.00007DF528202000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF528202000
Size:	4096

Details

Name:	00000000.00000003.416494099.0000000015DC7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DC7000
Size:	4096

Details

Name:	00000000.00000003.417011930.0000000015E35000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E35000
Size:	4096

Details

Name:	00000000.00000003.414098756.0000000018C06000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18C06000
Size:	8192

Details

Name:	00000000.00000003.263291244.0000000015AAB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15AAB000
Size:	53248

Details

Name:	00000000.00000003.260785868.000000000E5DC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5DC000
Size:	20480

Details

Name:	00000000.00000003.386417923.0000000016249000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16249000
Size:	4096

Details

Name:	00000000.00000003.459103205.00000000130A2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130A2000
Size:	16384

Details

Name:	00000000.00000002.542158023.000000000F5E9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F5E9000
Size:	24576

Details

Name:	00000000.00000003.459287224.0000000013166000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13166000
Size:	4096

Details

Name:	00000000.00000002.544699284.0000000015A17000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15A17000
Size:	417792

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000001.00000002.538660154.00007FF5411BD000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5411BD000
Size:	4096

Details

Name:	0000001A.00000002.537343625.000002170A6E4000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170A6E4000
Size:	4096

Details

Name:	0000001A.00000002.538346011.000002170B380000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170B380000
Size:	4096

Details

Name:	00000000.00000003.262825297.0000000015C0A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C0A000
Size:	4096

Details

Name:	00000000.00000002.540653136.000000000E2BC000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	E2BC000
Size:	16384

Details

Name:	00000013.00000002.443268171.00007FF52B375000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B375000
Size:	8192

Details

Name:	00000017.00000002.463976849.0000000000339000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	339000
Size:	4096

Details

Name:	00000000.00000003.262852044.0000000015C67000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C67000
Size:	16384

Details

Name:	00000001.00000002.538451200.00007FF54118B000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54118B000
Size:	8192

Details

Name:	00000000.00000003.262728987.0000000015AF8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15AF8000
Size:	4096

Details

Name:	00000001.00000003.268508296.000001FE72CF7000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE72CF7000
Size:	4096

Details

Name:	00000000.00000003.416260024.0000000016017000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16017000
Size:	4096

Details

Name:	00000000.00000002.549827394.0000000018380000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18380000
Size:	8192

Details

Name:	0000000A.00000002.533909498.0000023EBC4D0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	23EBC4D0000
Size:	12288

Details

Name:	00000000.00000003.383601357.0000000013115000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13115000
Size:	237568

Details

Name:	00000000.00000003.460827152.0000000015D31000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D31000
Size:	12288

Details

Name:	00000000.00000003.350602087.0000000015ABA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15ABA000
Size:	12288

Details

Name:	00000000.00000003.417954462.0000000018E5D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E5D000
Size:	4096

Details

Name:	00000000.00000003.396289594.0000000015D2D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D2D000
Size:	36864

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000F.00000002.379077180.00007FF55D68F000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55D68F000
Size:	16384

Details

Name:	00000000.00000003.396504480.0000000012FCB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12FCB000
Size:	454656

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.261960411.000000000E5E9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5E9000
Size:	12288

Details

Name:	00000000.00000003.417805383.0000000018D55000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D55000
Size:	4096

Details

Name:	00000000.00000002.551984041.0000000067E10000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	67E10000
Size:	24576

Details

Name:	0000000A.00000002.535386550.00007FF5420E8000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5420E8000
Size:	8192

Details

Name:	00000000.00000002.548975241.0000000017F9F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17F9F000
Size:	4096

Details

Name:	00000006.00000002.534950632.000001E969002000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E969002000
Size:	4096

Details

Name:	00000000.00000002.542898641.0000000011A83000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	11A83000
Size:	8192

Details

Name:	00000000.00000002.534157220.0000000000A80000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A80000
Size:	8192

Details

Name:	00000001.00000003.269116516.000001FE6DD59000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE6DD59000
Size:	4096

Details

Name:	00000009.00000002.534996179.00007DF48F350000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF48F350000
Size:	20480

Details

Name:	00000000.00000003.263429090.00000000131E6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	131E6000
Size:	139264

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000014.00000002.430626025.00000015BC5FE000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	15BC5FE000
Size:	8192

Details

Name:	0000000F.00000002.379194808.00007FF55D6FC000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55D6FC000
Size:	36864

Details

Name:	0000000D.00000002.326323019.0000026002F13000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	26002F13000
Size:	12288

Details

Name:	00000000.00000002.546807694.0000000017C1F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C1F000
Size:	4096

Details

Name:	00000014.00000002.432347320.000001338A79D000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1338A79D000
Size:	4096

Details

Name:	00000013.00000002.443146927.00007FF52B311000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B311000
Size:	4096

Details

Name:	00000000.00000003.349412498.0000000015DE5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DE5000
Size:	4096

Details

Name:	00000007.00000000.283837140.00007DF5EED32000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EED32000
Size:	4096

Details

Name:	00000009.00000002.536224532.00007FF58FFB1000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58FFB1000
Size:	16384

Details

Name:	00000000.00000003.260842130.000000000E5E1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5E1000
Size:	45056

Details

Name:	00000000.00000003.461000594.0000000015CE7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CE7000
Size:	86016

Details

Name:	00000000.00000003.459388003.00000000131CE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	131CE000
Size:	28672

Details

Name:	00000000.00000003.459927658.00000000131E6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	131E6000
Size:	139264

Details

Name:	00000009.00000002.534492373.000002A67FC60000.00000004.00000020.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2A67FC60000
Size:	8192

Details

Name:	00000000.00000003.263208823.0000000015C67000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C67000
Size:	16384

Details

Name:	00000013.00000002.442466033.000001EE74580000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1EE74580000
Size:	4096

Details

Name:	00000000.00000003.396567119.0000000013059000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13059000
Size:	4096

Details

Name:	00000000.00000003.459543975.00000000130C7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130C7000
Size:	8192

Details

Name:	00000013.00000000.416414636.00007DF52C8C0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF52C8C0000
Size:	4096

Details

Name:	00000017.00000003.463543067.0000000002DEB000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2DEB000
Size:	8192

Details

Name:	00000000.00000003.460051247.0000000015E04000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E04000
Size:	114688

Details

Name:	00000001.00000003.269109938.000001FE6DD59000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE6DD59000
Size:	4096

Details

Name:	00000000.00000003.417702666.0000000018CE2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18CE2000
Size:	4096

Details

Name:	00000000.00000002.536537896.0000000000F90000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	F90000
Size:	8192

Details

Name:	00000000.00000002.547933848.0000000017E5F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17E5F000
Size:	12288

Details

Name:	00000000.00000003.459531980.00000000130C3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130C3000
Size:	12288

Details

Name:	00000000.00000003.263198076.0000000015C5F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C5F000
Size:	4096

Details

Name:	00000000.00000003.397155349.00000000130DA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130DA000
Size:	16384

Details

Name:	0000001A.00000002.536749645.0000020F0A290000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20F0A290000
Size:	4096

Details

Name:	0000000F.00000002.379343919.00007FF55D783000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55D783000
Size:	16384

Details

Name:	00000009.00000002.535169738.00007DF5914A0000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5914A0000
Size:	12288

Details

Name:	00000000.00000002.552201025.00000000FF662000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF662000
Size:	4096

Details

Name:	00000000.00000003.459028504.0000000018E8A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E8A000
Size:	4096

Details

Name:	00000000.00000002.533430176.0000000000660000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	660000
Size:	102400

Details

Name:	00000000.00000003.517076831.0000000012387000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12387000
Size:	16384

Details

Name:	00000000.00000003.349461736.0000000015E02000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E02000
Size:	8192

Details

Name:	0000001A.00000002.540287396.00007FF539AE2000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539AE2000
Size:	16384

Details

Name:	00000000.00000002.551051249.0000000018AD8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18AD8000
Size:	4096

Details

Name:	00000000.00000002.544023705.00000000131E6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	131E6000
Size:	139264

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.397630783.000000000F6A0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F6A0000
Size:	389120

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.550896978.0000000018ABE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18ABE000
Size:	4096

Details

Name:	00000000.00000002.547398717.0000000017D5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17D5B000
Size:	4096

Details

Name:	00000000.00000002.547773603.0000000017E2B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17E2B000
Size:	20480

Details

Name:	0000001A.00000002.539752672.00007FF53973B000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53973B000
Size:	4096

Details

Name:	0000001A.00000003.469008575.0000020F08951000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20F08951000
Size:	110592

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	0000001A.00000002.538969265.000002170B680000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170B680000
Size:	4096

Details

Name:	00000000.00000003.383400051.000000001305B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1305B000
Size:	4096

Details

Name:	00000013.00000002.442685004.000001EE74E00000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74E00000
Size:	8192

Details

Name:	00000000.00000003.416241782.000000001600D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1600D000
Size:	4096

Details

Name:	0000001A.00000002.539590782.00007FF5393D5000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5393D5000
Size:	69632

Details

Name:	00000000.00000003.459317985.0000000013171000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13171000
Size:	12288

Details

Name:	00000005.00000002.536611761.00007FF526CC5000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF526CC5000
Size:	8192

Details

Name:	00000000.00000002.543795144.0000000013113000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	13113000
Size:	4096

Details

Name:	00000000.00000003.383864499.000000001321C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1321C000
Size:	143360

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.549531209.0000000018218000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18218000
Size:	8192

Details

Name:	0000000F.00000002.378697021.000001B379ED0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B379ED0000
Size:	4096

Details

Name:	00000000.00000003.259966014.0000000015260000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15260000
Size:	20480

Details

Name:	00000000.00000003.416767354.0000000018E05000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E05000
Size:	4096

Details

Name:	00000007.00000002.306276591.00007FF5ED0B3000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED0B3000
Size:	4096

Details

Name:	00000000.00000003.411947108.0000000015F90000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15F90000
Size:	4096

Details

Name:	00000000.00000002.551264327.0000000018AF4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18AF4000
Size:	4096

Details

Name:	00000000.00000002.540031386.000000000D89E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	D89E000
Size:	8192

Details

Name:	00000000.00000003.262773632.0000000015C64000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C64000
Size:	4096

Details

Name:	00000000.00000002.547029996.0000000017C7D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C7D000
Size:	4096

Details

Name:	00000000.00000002.547205004.0000000017CF5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17CF5000
Size:	4096

Details

Name:	00000000.00000003.411432942.0000000015E24000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E24000
Size:	4096

Details

Name:	00000000.00000003.415230556.0000000015FCB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15FCB000
Size:	16384

Details

Name:	00000000.00000003.383633572.0000000013151000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13151000
Size:	28672

Details

Name:	00000000.00000003.417511169.0000000018E5D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E5D000
Size:	4096

Details

Name:	00000000.00000002.544843771.0000000015AC5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15AC5000
Size:	4096

Details

Name:	00000000.00000002.548528137.0000000017F17000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17F17000
Size:	4096

Details

Name:	00000000.00000003.418995560.0000000015CB6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CB6000
Size:	4096

Details

Name:	00000017.00000000.458336214.0000000000150000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	150000
Size:	102400

Details

Name:	00000001.00000002.539342212.00007FF541331000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541331000
Size:	49152

Details

Name:	00000001.00000002.539152790.00007FF541308000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541308000
Size:	16384

Details

Name:	0000000B.00000002.309494315.000002A575873000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A575873000
Size:	28672

Details

Name:	00000000.00000003.350647878.0000000015ACE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15ACE000
Size:	4096

Details

Name:	00000000.00000002.543163005.0000000011BF3000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	11BF3000
Size:	172032

Details

Name:	00000000.00000003.412495848.0000000015DCC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DCC000
Size:	61440

Details

Name:	00000000.00000003.418379329.0000000018E62000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E62000
Size:	4096

Details

Name:	00000013.00000002.443373297.00007FF52B3CC000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B3CC000
Size:	20480

Details

Name:	0000000D.00000002.326566914.00007FF51BA78000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51BA78000
Size:	4096

Details

Name:	00000000.00000002.547409552.0000000017D6B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17D6B000
Size:	4096

Details

Name:	00000001.00000002.538593254.00007FF5411A5000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5411A5000
Size:	4096

Details

Name:	00000000.00000002.535868984.0000000000B77000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	B77000
Size:	12288

Details

Name:	00000007.00000002.306150266.00000292D7A7B000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A7B000
Size:	4096

Details

Name:	00000006.00000002.536726860.00007FF5ED7C6000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED7C6000
Size:	8192

Details

Name:	0000001A.00000002.539795563.00007FF53976E000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53976E000
Size:	28672

Details

Name:	00000000.00000002.543805190.0000000013115000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	13115000
Size:	274432

Details

Name:	00000000.00000003.412390258.0000000015D80000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D80000
Size:	4096

Details

Name:	00000013.00000002.442440759.000001EE74400000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1EE74400000
Size:	12288

Details

Name:	00000001.00000002.535845451.000001FE6D4FA000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE6D4FA000
Size:	28672

Details

Name:	00000000.00000002.533872628.00000000007C0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7C0000
Size:	16384

Details

Name:	00000000.00000003.384795213.0000000000BB0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	BB0000
Size:	65536

Details

Name:	00000013.00000002.443068591.00007FF52B251000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B251000
Size:	4096

Details

Name:	00000009.00000002.535811687.00007FF58FF41000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58FF41000
Size:	8192

Details

Name:	00000006.00000002.534349351.000001E9687E0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E9687E0000
Size:	16384

Details

Name:	00000000.00000002.543015336.0000000011B23000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	11B23000
Size:	172032

Details

Name:	0000000F.00000002.378851046.00007DF55EBF0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55EBF0000
Size:	12288

Details

Name:	00000000.00000003.351664077.0000000015DEF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DEF000
Size:	4096

Details

Name:	00000000.00000003.414770309.000000000F5E9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5E9000
Size:	24576

Details

Name:	00000007.00000002.305990206.000000991B57E000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	991B57E000
Size:	8192

Details

Name:	00000000.00000003.418386846.0000000018E66000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E66000
Size:	8192

Details

Name:	00000000.00000002.541212766.000000000E5D3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E5D3000
Size:	114688

Details

Name:	00000014.00000002.430555392.00000015BC47F000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	15BC47F000
Size:	4096

Details

Name:	00000000.00000003.417003591.0000000015E30000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E30000
Size:	4096

Details

Name:	00000000.00000003.414087357.0000000018C01000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18C01000
Size:	8192

Details

Name:	00000017.00000000.458686714.0000000000150000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	150000
Size:	102400

Details

Name:	00000000.00000003.384178018.000000000F669000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F669000
Size:	8192

Details

Name:	00000000.00000003.263323801.0000000013159000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13159000
Size:	4096

Details

Name:	00000017.00000003.461051698.0000000000597000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	597000
Size:	24576

Details

Name:	0000000B.00000002.309857062.00007FF575ADC000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF575ADC000
Size:	8192

Details

Name:	00000000.00000003.397059653.000000001305B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1305B000
Size:	4096

Details

Name:	00000000.00000002.545947717.0000000016227000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	16227000
Size:	73728

Details

Name:	0000000B.00000002.310060801.00007FF575B52000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF575B52000
Size:	12288

Details

Name:	00000000.00000003.412463847.0000000015DB6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DB6000
Size:	4096

Details

Name:	00000000.00000002.551484497.0000000018B2E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18B2E000
Size:	4096

Details

Name:	0000000D.00000002.325413648.000000831CFAE000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	831CFAE000
Size:	8192

Details

Name:	00000006.00000002.533779988.0000008674A7D000.00000004.00000010.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8674A7D000
Size:	12288

Details

Name:	00000001.00000002.538294218.00007FF5410FE000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5410FE000
Size:	8192

Details

Name:	00000000.00000002.546790037.0000000017C1D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C1D000
Size:	4096

Details

Name:	00000000.00000003.416589377.0000000018CF1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18CF1000
Size:	4096

Details

Name:	00000007.00000002.306300259.00007FF5ED642000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED642000
Size:	12288

Details

Name:	00000000.00000002.542629897.0000000011162000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	11162000
Size:	65536

Details

Name:	00000017.00000002.464023863.0000000000530000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	530000
Size:	4096

Details

Name:	00000000.00000003.458869318.0000000015CD1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CD1000
Size:	4096

Details

Name:	00000017.00000002.464163216.00000000007E0000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7E0000
Size:	4096

Details

Name:	00000000.00000002.547329965.0000000017D43000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17D43000
Size:	4096

Details

Name:	00000000.00000003.412470696.0000000015DBB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DBB000
Size:	4096

Details

Name:	0000000F.00000002.379177847.00007FF55D6F2000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55D6F2000
Size:	12288

Details

Name:	00000000.00000003.416932482.0000000015E0D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E0D000
Size:	77824

Details

Name:	00000000.00000003.258507640.000000000E59C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E59C000
Size:	16384

Details

Name:	00000000.00000003.418972197.0000000015CAC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CAC000
Size:	4096

Details

Name:	00000000.00000003.417862957.0000000018D6D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D6D000
Size:	4096

Details

Name:	00000007.00000000.283817018.00000292D7850000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	292D7850000
Size:	102400

Details

Name:	0000000B.00000002.309825382.00007FF5759D1000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5759D1000
Size:	4096

Details

Name:	00000000.00000003.459506793.00000000130A8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130A8000
Size:	4096

Details

Name:	00000014.00000002.432396312.000001338A79F000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1338A79F000
Size:	69632

Details

Name:	00000000.00000003.412209381.0000000016037000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16037000
Size:	4096

Details

Name:	00000000.00000003.416343071.0000000016039000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16039000
Size:	4096

Details

Name:	00000014.00000000.417761170.00007DF50B652000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50B652000
Size:	4096

Details

Name:	0000001A.00000002.539447508.00007FF5393AB000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5393AB000
Size:	28672

Details

Name:	00000000.00000003.266372165.00000000118F0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	118F0000
Size:	65536

Details

Name:	00000000.00000003.266999401.0000000011A80000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11A80000
Size:	28672

Details

Name:	00000000.00000003.323813575.000000000E5B5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5B5000
Size:	36864

Details

Name:	00000000.00000002.548239746.0000000017EB3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17EB3000
Size:	77824

Details

Name:	00000000.00000002.543735916.00000000130D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	130D0000
Size:	20480

Details

Name:	00000000.00000003.516889568.00000000122B5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	122B5000
Size:	73728

Details

Name:	00000000.00000002.542718488.00000000117CE000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	117CE000
Size:	8192

Details

Name:	00000000.00000002.543348721.0000000012E5E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12E5E000
Size:	4096

Details

Name:	00000000.00000002.548588017.0000000017F25000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17F25000
Size:	4096

Details

Name:	00000000.00000003.262904028.0000000015AAB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15AAB000
Size:	53248

Details

Name:	0000001A.00000002.533687796.00000059FACFE000.00000004.00000010.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	59FACFE000
Size:	8192

Details

Name:	00000000.00000003.261336835.000000001321E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1321E000
Size:	135168

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000001.00000002.534223815.000001FE6D270000.00000004.00000020.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1FE6D270000
Size:	12288

Details

Name:	00000000.00000003.460536369.0000000013175000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13175000
Size:	335872

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000017.00000003.461088284.00000000005A9000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5A9000
Size:	16384

Details

Name:	0000000F.00000002.379168809.00007FF55D6EC000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55D6EC000
Size:	20480

Details

Name:	00000000.00000003.411349167.0000000015D46000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D46000
Size:	28672

Details

Name:	00000000.00000002.542531359.000000000F700000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F700000
Size:	4096

Details

Name:	0000001A.00000002.536572795.0000020F0A184000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20F0A184000
Size:	73728

Details

Name:	00000000.00000003.413152178.0000000015DA7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DA7000
Size:	4096

Details

Name:	00000006.00000003.283106242.000001E968865000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1E968865000
Size:	57344

Details

Name:	00000001.00000003.261245129.000001FE72A30000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE72A30000
Size:	4096

Details

Name:	00000001.00000003.269102786.000001FE6DD18000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE6DD18000
Size:	4096

Details

Name:	00000000.00000002.543540101.0000000012F99000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12F99000
Size:	573440

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000001.00000003.270778504.000001FE72CF6000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE72CF6000
Size:	12288

Details

Name:	00000000.00000003.462650612.0000000015B9C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15B9C000
Size:	8192

Details

Name:	00000000.00000002.540908061.000000000E549000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E549000
Size:	40960

Details

Name:	00000001.00000002.538751632.00007FF541265000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541265000
Size:	12288

Details

Name:	0000000A.00000002.536001743.00007FF542870000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF542870000
Size:	12288

Details

Name:	00000000.00000002.535971129.0000000000B86000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	B86000
Size:	40960

Details

Name:	00000000.00000003.418018846.0000000018E75000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E75000
Size:	4096

Details

Name:	00000000.00000002.547255637.0000000017D1D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17D1D000
Size:	4096

Details

Name:	00000000.00000003.259332577.000000000E5D5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5D5000
Size:	4096

Details

Name:	00000005.00000002.534394330.0000018413865000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18413865000
Size:	4096

Details

Name:	00000000.00000003.412368970.0000000015D71000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D71000
Size:	8192

Details

Name:	00000000.00000003.397345748.0000000013164000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13164000
Size:	4096

Details

Name:	00000000.00000002.549915336.0000000018419000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18419000
Size:	4096

Details

Name:	0000000D.00000002.326381651.0000026003602000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	26003602000
Size:	4096

Details

Name:	00000000.00000003.261210131.00000000159D1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	159D1000
Size:	24576

Details

Name:	00000001.00000003.270795707.000001FE72D02000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE72D02000
Size:	4096

Details

Name:	00000017.00000002.464795961.000000007F390000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F390000
Size:	12288

Details

Name:	00000000.00000003.417436727.0000000018DC8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18DC8000
Size:	4096

Details

Name:	00000000.00000003.351525406.0000000015D72000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D72000
Size:	4096

Details

Name:	00000013.00000002.443297974.00007FF52B384000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B384000
Size:	28672

Details

Name:	00000000.00000003.261078177.0000000013239000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13239000
Size:	4096

Details

Name:	00000013.00000003.427202207.000001EE74992000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74992000
Size:	425984

Details

Name:	00000000.00000002.551417480.0000000018B26000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18B26000
Size:	4096

Details

Name:	00000013.00000002.441973398.000001EE73EC0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1EE73EC0000
Size:	12288

Details

Name:	00000000.00000003.397359586.0000000013168000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13168000
Size:	16384

Details

Name:	00000000.00000002.547068953.0000000017CC9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17CC9000
Size:	4096

Details

Name:	00000000.00000002.544408367.00000000156E7000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	156E7000
Size:	32768

Details

Name:	0000000B.00000002.309257364.000002A575740000.00000004.00000040.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2A575740000
Size:	4096

Details

Name:	00000000.00000003.418856902.0000000018E75000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E75000
Size:	4096

Details

Name:	00000006.00000002.536689519.00007FF5ED774000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED774000
Size:	8192

Details

Name:	00000014.00000002.432916722.00007DF50B660000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50B660000
Size:	12288

Details

Name:	00000000.00000002.543332512.0000000012E57000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12E57000
Size:	20480

Details

Name:	00000000.00000002.546821469.0000000017C21000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C21000
Size:	4096

Details

Name:	00000000.00000002.552165751.00000000FF650000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF650000
Size:	4096

Details

Name:	00000001.00000003.259805616.000001FE72910000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE72910000
Size:	4096

Details

Name:	00000000.00000003.459120308.00000000130BA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130BA000
Size:	28672

Details

Name:	00000000.00000003.417891078.0000000018E05000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E05000
Size:	4096

Details

Name:	00000000.00000003.351219431.0000000015D72000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D72000
Size:	4096

Details

Name:	0000000B.00000002.309615062.000002A575913000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A575913000
Size:	12288

Details

Name:	0000000D.00000002.326768409.00007FF51BD10000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51BD10000
Size:	12288

Details

Name:	00000001.00000002.535770284.000001FE6D4B0000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE6D4B0000
Size:	32768

Details

Name:	00000000.00000003.417212038.0000000015CB6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CB6000
Size:	4096

Details

Name:	00000000.00000003.416017252.0000000015D43000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D43000
Size:	4096

Details

Name:	00000000.00000003.413611821.0000000015DFA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DFA000
Size:	40960

Details

Name:	00000000.00000003.412770694.0000000015DCC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DCC000
Size:	61440

Details

Name:	00000000.00000003.463256033.00000000131E6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	131E6000
Size:	139264

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000009.00000002.536185159.00007FF58FFAC000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58FFAC000
Size:	12288

Details

Name:	00000005.00000002.533894786.00000184136C0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	184136C0000
Size:	12288

Details

Name:	00000000.00000003.419331469.0000000018E70000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E70000
Size:	4096

Details

Name:	0000001A.00000002.538705158.000002170B64E000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170B64E000
Size:	90112

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.416205730.0000000015FFE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15FFE000
Size:	8192

Details

Name:	0000000B.00000002.309331689.000002A5757D0000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A5757D0000
Size:	4096

Details

Name:	00000013.00000003.430385916.000001EE74990000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74990000
Size:	397312

Details

Name:	00000001.00000003.261231087.000001FE72A30000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE72A30000
Size:	4096

Details

Name:	00000000.00000002.545981756.000000001623E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1623E000
Size:	4096

Details

Name:	00000013.00000003.423365646.000001EE749A1000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE749A1000
Size:	32768

Details

Name:	0000000A.00000002.536223892.00007FF5428C2000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5428C2000
Size:	12288

Details

Name:	0000000A.00000000.295081340.0000023EBC4B0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	23EBC4B0000
Size:	102400

Details

Name:	00000000.00000003.351019942.000000000F5F7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5F7000
Size:	4096

Details

Name:	00000000.00000003.415915427.0000000015DD9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DD9000
Size:	4096

Details

Name:	00000000.00000003.462711537.000000000F686000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F686000
Size:	102400

Details

Name:	00000000.00000002.549723031.00000000182E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	182E0000
Size:	8192

Details

Name:	00000014.00000002.430662775.000001338A5F0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1338A5F0000
Size:	102400

Details

Name:	00000000.00000002.547913314.0000000017E5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17E5B000
Size:	4096

Details

Name:	00000000.00000003.412655389.0000000015D85000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D85000
Size:	4096

Details

Name:	0000001A.00000002.540189116.00007FF5399DD000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5399DD000
Size:	20480

Details

Name:	00000000.00000003.413455087.0000000016037000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16037000
Size:	4096

Details

Name:	00000000.00000003.412056507.0000000016032000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16032000
Size:	4096

Details

Name:	00000000.00000002.547491448.0000000017DBB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17DBB000
Size:	4096

Details

Name:	00000009.00000002.536335243.00007FF590016000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF590016000
Size:	20480

Details

Name:	00000000.00000002.544778039.0000000015AB9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15AB9000
Size:	16384

Details

Name:	0000001A.00000002.538442008.000002170B3FA000.00000004.00000040.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2170B3FA000
Size:	20480

Details

Name:	00000000.00000003.419279020.0000000018E58000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E58000
Size:	4096

Details

Name:	00000000.00000003.411832309.0000000015DEA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DEA000
Size:	32768

Details

Name:	00000000.00000003.323760163.000000000E5BE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5BE000
Size:	81920

Details

Name:	0000001A.00000002.541222694.00007FFF9D5E1000.00000020.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	7FFF9D5E1000
Size:	86016

Details

Name:	00000000.00000003.397352195.0000000013166000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13166000
Size:	4096

Details

Name:	00000000.00000002.548197607.0000000017EAD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17EAD000
Size:	4096

Details

Name:	00000000.00000002.546724458.0000000017C17000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C17000
Size:	4096

Details

Name:	00000000.00000002.537678779.000000000C4B1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C4B1000
Size:	4096

Details

Name:	00000013.00000003.422247182.000001EE7496B000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE7496B000
Size:	16384

Details

Name:	00000000.00000003.459806653.000000001316D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1316D000
Size:	4096

Details

Name:	0000000B.00000002.309243527.000002A575730000.00000004.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2A575730000
Size:	4096

Details

Name:	00000013.00000002.442430085.000001EE74200000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1EE74200000
Size:	4096

Details

Name:	00000000.00000003.459057741.000000001305B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1305B000
Size:	4096

Details

Name:	00000000.00000002.542846502.00000000119A3000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	119A3000
Size:	8192

Details

Name:	00000005.00000002.536312578.00007FF526C43000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF526C43000
Size:	8192

Details

Name:	00000000.00000003.517112240.0000000012396000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12396000
Size:	4096

Details

Name:	00000000.00000003.416700577.0000000018D64000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D64000
Size:	4096

Details

Name:	0000000B.00000002.309535477.000002A575902000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A575902000
Size:	16384

Details

Name:	0000001A.00000003.466889683.000002170B750000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2170B750000
Size:	4096

Details

Name:	0000000A.00000003.359792462.0000023EBC6EE000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	23EBC6EE000
Size:	4096

Details

Name:	00000000.00000002.542980548.0000000011AD1000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	11AD1000
Size:	303104

Details

Name:	00000014.00000002.432796714.000001338AC00000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1338AC00000
Size:	4096

Details

Name:	00000013.00000003.423350103.000001EE74990000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74990000
Size:	53248

Details

Name:	00000000.00000002.536748223.0000000001017000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1017000
Size:	32768

Details

Name:	00000014.00000002.432696045.000001338AA80000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1338AA80000
Size:	73728

Details

Name:	00000000.00000003.411687348.000000000F58E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F58E000
Size:	36864

Details

Name:	00000013.00000003.424567208.000001EE74990000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74990000
Size:	53248

Details

Name:	00000000.00000003.383921422.000000000F602000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F602000
Size:	4096

Details

Name:	00000000.00000002.543983008.00000000131C8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	131C8000
Size:	20480

Details

Name:	00000017.00000003.463650695.0000000000A2A000.00000004.00000040.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	A2A000
Size:	20480

Details

Name:	00000000.00000002.546392272.0000000016F00000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	16F00000
Size:	16384

Details

Name:	0000000F.00000002.378818415.00007DF55EBE0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55EBE0000
Size:	4096

Details

Name:	00000000.00000002.545715923.0000000015DEA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15DEA000
Size:	90112

Details

Name:	00000000.00000003.350655593.0000000015AD2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15AD2000
Size:	16384

Details

Name:	00000000.00000003.416445125.0000000015DB3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DB3000
Size:	4096

Details

Name:	00000013.00000002.443002184.00007FF52B1C2000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B1C2000
Size:	12288

Details

Name:	00000013.00000002.442758679.00007DF52C8D0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF52C8D0000
Size:	12288

Details

Name:	00000000.00000003.350679968.0000000015ADC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15ADC000
Size:	8192

Details

Name:	0000000A.00000002.534222600.0000023EBC660000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	23EBC660000
Size:	4096

Details

Name:	00000000.00000003.412624416.0000000015D71000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D71000
Size:	8192

Details

Name:	00000000.00000003.517151839.0000000016247000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16247000
Size:	8192

Details

Name:	00000000.00000002.548109871.0000000017E9B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17E9B000
Size:	12288

Details

Name:	00000000.00000003.414008741.0000000015F13000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15F13000
Size:	12288

Details

Name:	00000000.00000003.417248489.0000000015CD1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CD1000
Size:	4096

Details

Name:	00000000.00000002.551443316.0000000018B2A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18B2A000
Size:	4096

Details

Name:	00000000.00000002.551332679.0000000018B0A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18B0A000
Size:	4096

Details

Name:	00000000.00000003.262945436.0000000013175000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13175000
Size:	290816

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.417115987.0000000015C6E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C6E000
Size:	32768

Details

Name:	00000000.00000002.537395192.00000000043A0000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	43A0000
Size:	4096

Details

Name:	00000014.00000002.430617937.00000015BC57F000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	15BC57F000
Size:	4096

Details

Name:	00000000.00000002.549324118.00000000180F5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	180F5000
Size:	4096

Details

Name:	00000000.00000003.417358904.0000000018D50000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D50000
Size:	4096

Details

Name:	00000001.00000002.536302882.000001FE6DC00000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE6DC00000
Size:	4096

Details

Name:	00000000.00000003.349438778.0000000015DF4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DF4000
Size:	4096

Details

Name:	0000001A.00000002.539381809.00007DF53B160000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF53B160000
Size:	12288

Details

Name:	00000000.00000002.544387126.00000000156E0000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	156E0000
Size:	8192

Details

Name:	00000000.00000003.417686504.0000000018CD8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18CD8000
Size:	8192

Details

Name:	00000009.00000002.534064455.000002A600490000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A600490000
Size:	4096

Details

Name:	00000014.00000002.432809382.000001338C020000.00000004.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1338C020000
Size:	4096

Details

Name:	00000000.00000003.350644175.0000000015ACC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15ACC000
Size:	4096

Details

Name:	00000000.00000002.548880520.0000000017F8F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17F8F000
Size:	4096

Details

Name:	0000000B.00000002.309508085.000002A57587B000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A57587B000
Size:	4096

Details

Name:	00000000.00000003.412892038.0000000015DDC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DDC000
Size:	49152

Details

Name:	00000000.00000002.546267528.0000000016EB4000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	16EB4000
Size:	16384

Details

Name:	00000017.00000002.464282459.000000000269E000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	269E000
Size:	8192

Details

Name:	00000013.00000002.443421264.00007FF52B3E6000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B3E6000
Size:	20480

Details

Name:	0000000F.00000002.378413266.0000000C7B47F000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	C7B47F000
Size:	4096

Details

Name:	00000000.00000003.417131310.0000000015C8A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C8A000
Size:	4096

Details

Name:	00000014.00000003.430233613.000001338A79D000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1338A79D000
Size:	4096

Details

Name:	0000001A.00000002.540239461.00007FF5399EF000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5399EF000
Size:	8192

Details

Name:	00000013.00000003.430639411.000001EE74E63000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74E63000
Size:	397312

Details

Name:	00000000.00000003.419406207.00000000160F0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	160F0000
Size:	4096

Details

Name:	00000000.00000003.419315769.0000000018E66000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E66000
Size:	8192

Details

Name:	00000007.00000002.306420898.00007FF5ED8E3000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED8E3000
Size:	16384

Details

Name:	0000001A.00000002.540270022.00007FF539A52000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539A52000
Size:	12288

Details

Name:	0000000D.00000002.325484146.0000026002C30000.00000004.00000040.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	26002C30000
Size:	4096

Details

Name:	00000000.00000003.350095491.000000001316D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1316D000
Size:	4096

Details

Name:	00000006.00000002.534555350.000001E968840000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E968840000
Size:	102400

Details

Name:	00000005.00000002.533675301.0000018413690000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	18413690000
Size:	4096

Details

Name:	00000000.00000003.458876611.0000000015CE7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CE7000
Size:	86016

Details

Name:	0000001A.00000002.540165804.00007FF5399BF000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5399BF000
Size:	12288

Details

Name:	0000001A.00000002.534661626.0000020F0891D000.00000004.00000020.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	20F0891D000
Size:	4096

Details

Name:	00000006.00000002.534820411.000001E968AD0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E968AD0000
Size:	4096

Details

Name:	00000000.00000003.260138452.0000000012F44000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12F44000
Size:	32768

Details

Name:	00000017.00000003.463572367.0000000000A27000.00000004.00000040.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	A27000
Size:	32768

Details

Name:	00000001.00000003.259527274.000001FE728F4000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE728F4000
Size:	4096

Details

Name:	00000000.00000003.462860175.0000000015E00000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E00000
Size:	131072

Details

Name:	00000000.00000002.550083743.00000000185D1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	185D1000
Size:	4096

Details

Name:	0000001A.00000002.534157824.0000020F08730000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	20F08730000
Size:	102400

Details

Name:	0000001A.00000002.537122808.000002170A680000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170A680000
Size:	8192

Details

Name:	00000000.00000002.540950971.000000000E563000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E563000
Size:	4096

Details

Name:	00000000.00000003.383656780.000000001315D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1315D000
Size:	24576

Details

Name:	00000000.00000003.415208149.0000000015FA2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15FA2000
Size:	4096

Details

Name:	00000017.00000002.464224542.00000000024A4000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24A4000
Size:	24576

Details

Name:	00000001.00000002.538007737.00007FF540F5B000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF540F5B000
Size:	4096

Details

Name:	00000013.00000002.443075523.00007FF52B275000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B275000
Size:	8192

Details

Name:	00000000.00000003.397113316.00000000130A8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130A8000
Size:	4096

Details

Name:	00000000.00000003.383494144.00000000130C3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130C3000
Size:	12288

Details

Name:	00000009.00000002.533560438.000000BC0BB7D000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	BC0BB7D000
Size:	12288

Details

Name:	00000001.00000002.539577779.00007FF541384000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541384000
Size:	8192

Details

Name:	0000000D.00000002.326211206.0000026002E53000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	26002E53000
Size:	8192

Details

Name:	00000000.00000002.551616280.0000000018BC0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18BC0000
Size:	4096

Details

Name:	00000000.00000002.547353418.0000000017D49000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17D49000
Size:	4096

Details

Name:	00000017.00000000.458407980.000000007F380000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F380000
Size:	4096

Details

Name:	00000000.00000003.459478979.0000000013090000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13090000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.396892301.00000000131D8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	131D8000
Size:	12288

Details

Name:	00000000.00000003.417870253.0000000018D72000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D72000
Size:	4096

Details

Name:	00000000.00000002.551303808.0000000018B06000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18B06000
Size:	4096

Details

Name:	00000000.00000002.544440714.0000000015710000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15710000
Size:	4096

Details

Name:	00000000.00000003.415277975.0000000015FFE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15FFE000
Size:	8192

Details

Name:	00000017.00000003.461125252.00000000005C5000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C5000
Size:	16384

Details

Name:	00000014.00000002.432419992.000001338A7B1000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1338A7B1000
Size:	4096

Details

Name:	00000006.00000002.536107798.00007FF5ED719000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED719000
Size:	24576

Details

Name:	00000000.00000003.417466076.0000000018E42000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E42000
Size:	4096

Details

Name:	00000000.00000003.396669654.00000000130D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130D0000
Size:	20480

Details

Name:	00000000.00000003.414926107.0000000015C10000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C10000
Size:	4096

Details

Name:	0000000A.00000002.533599953.0000008CD2679000.00000004.00000010.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8CD2679000
Size:	28672

Details

Name:	00000000.00000003.412632212.0000000015D76000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D76000
Size:	4096

Details

Name:	0000001A.00000002.537387490.000002170A6F8000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170A6F8000
Size:	4096

Details

Name:	00000000.00000003.418651758.0000000018E62000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E62000
Size:	4096

Details

Name:	00000000.00000002.544994964.0000000015ADC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15ADC000
Size:	8192

Details

Name:	0000000B.00000002.309687307.00007DF577030000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF577030000
Size:	4096

Details

Name:	00000000.00000003.262923801.0000000013159000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13159000
Size:	4096

Details

Name:	00000007.00000003.305850870.00000292D7A32000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A32000
Size:	24576

Details

Name:	00000006.00000000.282505635.00007DF5EEC50000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EEC50000
Size:	12288

Details

Name:	00000000.00000003.258537035.000000000E59C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E59C000
Size:	16384

Details

Name:	0000000D.00000002.325476110.0000026002C20000.00000004.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	26002C20000
Size:	4096

Details

Name:	0000000A.00000002.535964566.00007FF542868000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF542868000
Size:	16384

Details

Name:	00000000.00000003.411400740.0000000015FCB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15FCB000
Size:	16384

Details

Name:	00000005.00000002.535906801.00007FF52697D000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52697D000
Size:	8192

Details

Name:	00000000.00000002.552189212.00000000FF660000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF660000
Size:	4096

Details

Name:	00000000.00000003.415621627.0000000015D60000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D60000
Size:	4096

Details

Name:	0000000F.00000002.378627658.000001B379C8D000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B379C8D000
Size:	16384

Details

Name:	00000001.00000002.536748317.000001FE6E400000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FE6E400000
Size:	65536

Details

Name:	0000001A.00000002.538400330.000002170B3F7000.00000004.00000040.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2170B3F7000
Size:	4096

Details

Name:	00000001.00000002.537919094.00007FF540BC4000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF540BC4000
Size:	8192

Details

Name:	00000000.00000002.552154062.00000000FF550000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF550000
Size:	20480

Details

Name:	00000000.00000003.383134217.0000000015DE0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DE0000
Size:	4096

Details

Name:	00000000.00000003.262816900.0000000015C00000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C00000
Size:	4096

Details

Name:	00000017.00000000.457621877.0000000000150000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	150000
Size:	102400

Details

Name:	00000000.00000002.548226255.0000000017EB1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17EB1000
Size:	4096

Details

Name:	0000000F.00000002.379011599.00007FF55D555000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55D555000
Size:	8192

Details

Name:	00000000.00000002.533981484.000000000089E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	89E000
Size:	12288

Details

Name:	00000000.00000002.548723098.0000000017F51000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17F51000
Size:	4096

Details

Name:	00000000.00000003.386471115.000000000E589000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E589000
Size:	65536

Details

Name:	0000000D.00000003.325237236.0000026002E51000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	26002E51000
Size:	16384

Details

Name:	00000000.00000003.417616850.0000000015DDB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DDB000
Size:	53248

Details

Name:	00000000.00000003.259436493.000000000E5D2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5D2000
Size:	4096

Details

Name:	00000014.00000003.430321397.000001338A7B0000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1338A7B0000
Size:	8192

Details

Name:	0000001A.00000002.537177214.000002170A690000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170A690000
Size:	4096

Details

Name:	00000000.00000003.417023103.0000000015E3A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E3A000
Size:	4096

Details

Name:	00000000.00000003.397327018.0000000013159000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13159000
Size:	4096

Details

Name:	00000000.00000002.540766476.000000000E500000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E500000
Size:	24576

Details

Name:	00000000.00000002.542341113.000000000F621000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F621000
Size:	278528

Details

Name:	0000001A.00000002.539954114.00007FF5398DA000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5398DA000
Size:	28672

Details

Name:	00000005.00000002.534554722.00000184138BA000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	184138BA000
Size:	16384

Details

Name:	00000000.00000002.545646281.0000000015D46000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15D46000
Size:	28672

Details

Name:	00000001.00000002.537395507.000001FE72C4A000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE72C4A000
Size:	94208

Details

Name:	00000000.00000003.459733786.000000001315B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1315B000
Size:	4096

Details

Name:	0000000D.00000002.326861065.00007FF51BD45000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51BD45000
Size:	20480

Details

Name:	00000000.00000000.254429624.0000000000660000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	660000
Size:	102400

Details

Name:	00000000.00000003.418414264.0000000018E70000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E70000
Size:	4096

Details

Name:	00000001.00000002.536062244.000001FE6D980000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FE6D980000
Size:	4096

Details

Name:	00000000.00000002.544627773.0000000015970000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15970000
Size:	8192

Details

Name:	00000000.00000003.416908626.0000000015CE7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CE7000
Size:	69632

Details

Name:	00000000.00000002.548564574.0000000017F21000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17F21000
Size:	4096

Details

Name:	0000000B.00000002.310109944.00007FF575BC6000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF575BC6000
Size:	8192

Details

Name:	00000000.00000003.411182696.0000000015DDC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DDC000
Size:	49152

Details

Name:	00000000.00000003.463006763.0000000015AAB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15AAB000
Size:	53248

Details

Name:	00000000.00000003.263108181.0000000015C0A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C0A000
Size:	4096

Details

Name:	0000000B.00000000.297059483.00007DF577032000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF577032000
Size:	4096

Details

Name:	00000000.00000003.517064531.0000000012382000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12382000
Size:	16384

Details

Name:	0000000D.00000002.325458378.000000831D5FF000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	831D5FF000
Size:	4096

Details

Name:	00000000.00000003.349340176.0000000015D6D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D6D000
Size:	8192

Details

Name:	00000000.00000002.548599113.0000000017F27000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17F27000
Size:	12288

Details

Name:	00000000.00000002.537878425.000000000C5E8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C5E8000
Size:	851968

Details

Name:	0000000B.00000002.310005025.00007FF575B35000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF575B35000
Size:	20480

Details

Name:	00000000.00000003.415956142.0000000015DF3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DF3000
Size:	20480

Details

Name:	00000001.00000002.537318741.000001FE72C2A000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE72C2A000
Size:	61440

Details

Name:	00000017.00000002.464423111.0000000002824000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2824000
Size:	4096

Details

Name:	00000000.00000002.548311682.0000000017ED3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17ED3000
Size:	4096

Details

Name:	00000000.00000003.350671840.0000000015AD9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15AD9000
Size:	4096

Details

Name:	00000000.00000002.542573948.000000000F7B0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F7B0000
Size:	4096

Details

Name:	0000000B.00000002.309888729.00007FF575AF5000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF575AF5000
Size:	8192

Details

Name:	0000000B.00000002.309985493.00007FF575B21000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF575B21000
Size:	49152

Details

Name:	00000005.00000002.535704846.00007DF528212000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF528212000
Size:	4096

Details

Name:	00000000.00000002.549336073.0000000018109000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18109000
Size:	4096

Details

Name:	0000001A.00000002.535135191.0000020F089DE000.00000004.00000040.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	20F089DE000
Size:	4096

Details

Name:	00000000.00000003.412590888.0000000015D35000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D35000
Size:	4096

Details

Name:	00000001.00000002.538305327.00007FF541101000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541101000
Size:	16384

Details

Name:	00000000.00000002.538151636.000000000C6D3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C6D3000
Size:	8192

Details

Name:	0000000F.00000002.378618710.000001B379C88000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B379C88000
Size:	16384

Details

Name:	00000000.00000003.415650661.0000000015D6A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D6A000
Size:	4096

Details

Name:	00000001.00000002.537658327.000001FE72CDD000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE72CDD000
Size:	4096

Details

Name:	0000000D.00000000.309844497.00007DF51D250000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51D250000
Size:	4096

Details

Name:	00000000.00000003.416922054.0000000015E04000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E04000
Size:	20480

Details

Name:	00000000.00000003.396631435.00000000130A8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130A8000
Size:	4096

Details

Name:	0000001A.00000002.537213742.000002170A69C000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170A69C000
Size:	4096

Details

Name:	0000001A.00000002.540700352.00007FF539BD5000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539BD5000
Size:	8192

Details

Name:	00000007.00000003.305842033.00000292D7A44000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A44000
Size:	4096

Details

Name:	00000000.00000003.414063889.0000000018BF8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18BF8000
Size:	4096

Details

Name:	00000007.00000003.305804811.00000292D7A5C000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A5C000
Size:	12288

Details

Name:	0000000A.00000003.295842092.0000023EBC6D3000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	23EBC6D3000
Size:	4096

Details

Name:	00000013.00000003.422210898.000001EE7496F000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE7496F000
Size:	4096

Details

Name:	0000000D.00000002.326411201.00007DF51D242000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51D242000
Size:	4096

Details

Name:	0000000A.00000002.535876586.00007FF542858000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF542858000
Size:	4096

Details

Name:	00000014.00000000.417772358.00007DF50B660000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF50B660000
Size:	12288

Details

Name:	00000000.00000003.397379967.0000000013171000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13171000
Size:	12288

Details

Name:	00000000.00000003.412784942.0000000015DDC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DDC000
Size:	49152

Details

Name:	0000000A.00000002.535843140.00007FF5427CC000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5427CC000
Size:	4096

Details

Name:	0000001A.00000002.534554271.0000020F088F8000.00000004.00000020.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	20F088F8000
Size:	131072

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.399156405.0000000015C5A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C5A000
Size:	81920

Details

Name:	00000000.00000003.383564584.00000000130F1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130F1000
Size:	110592

Details

Name:	00000000.00000002.549257214.000000001807D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1807D000
Size:	4096

Details

Name:	00000013.00000002.442939741.00007FF52B039000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B039000
Size:	4096

Details

Name:	00000000.00000003.399100662.0000000015BCF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15BCF000
Size:	4096

Details

Name:	00000000.00000003.383407482.0000000013068000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13068000
Size:	86016

Details

Name:	00000000.00000003.460343213.000000001315B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1315B000
Size:	4096

Details

Name:	00000000.00000003.383704592.0000000013171000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13171000
Size:	12288

Details

Name:	00000014.00000002.432330701.000001338A797000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1338A797000
Size:	20480

Details

Name:	00000013.00000003.422220114.000001EE74975000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74975000
Size:	16384

Details

Name:	00000000.00000003.261072851.0000000013233000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13233000
Size:	12288

Details

Name:	00000017.00000002.464714923.000000007F270000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F270000
Size:	20480

Details

Name:	00000000.00000003.460216042.00000000130D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130D0000
Size:	20480

Details

Name:	00000000.00000002.548180146.0000000017EAB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17EAB000
Size:	4096

Details

Name:	0000001A.00000002.534915742.0000020F08980000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20F08980000
Size:	12288

Details

Name:	00000000.00000002.540634476.000000000E260000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E260000
Size:	4096

Details

Name:	00000013.00000002.441805191.0000009B2E977000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	9B2E977000
Size:	36864

Details

Name:	00000000.00000002.549789073.0000000018344000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18344000
Size:	8192

Details

Name:	00000009.00000002.533538833.000000BC0BA7E000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	BC0BA7E000
Size:	8192

Details

Name:	00000013.00000002.442308634.000001EE740E6000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE740E6000
Size:	77824

Details

Name:	00000000.00000003.349456645.0000000015DFE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DFE000
Size:	4096

Details

Name:	00000000.00000003.462426559.0000000015D29000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D29000
Size:	20480

Details

Name:	00000017.00000003.463593459.0000000000800000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	800000
Size:	4096

Details

Name:	00000000.00000002.540113842.000000000D9DE000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	D9DE000
Size:	8192

Details

Name:	0000000B.00000002.309835584.00007FF575A20000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF575A20000
Size:	24576

Details

Name:	00000013.00000003.421948890.000001EE749A1000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE749A1000
Size:	49152

Details

Name:	00000000.00000002.544595386.0000000015910000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15910000
Size:	4096

Details

Name:	0000001A.00000002.538952593.000002170B67A000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170B67A000
Size:	4096

Details

Name:	00000000.00000003.383219499.0000000015E19000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E19000
Size:	20480

Details

Name:	00000000.00000003.350365794.000000001309B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1309B000
Size:	8192

Details

Name:	00000000.00000003.416103794.0000000015CF8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CF8000
Size:	77824

Details

Name:	00000000.00000003.411289991.0000000015D0F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D0F000
Size:	151552

Details

Name:	0000000F.00000002.378439784.000001B379BA0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B379BA0000
Size:	102400

Details

Name:	00000017.00000000.458378213.000000000286B000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	286B000
Size:	16384

Details

Name:	0000000B.00000002.309794705.00007FF575989000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF575989000
Size:	8192

Details

Name:	0000000D.00000002.326829573.00007FF51BD29000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51BD29000
Size:	24576

Details

Name:	0000000A.00000002.535031847.0000023EBD410000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	23EBD410000
Size:	4096

Details

Name:	00000000.00000002.535626564.0000000000B5B000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	B5B000
Size:	8192

Details

Name:	00000013.00000003.425768789.000001EE749A1000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE749A1000
Size:	32768

Details

Name:	0000000A.00000002.534879059.0000023EBCE90000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	23EBCE90000
Size:	4096

Details

Name:	00000000.00000003.351820396.0000000015DD6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DD6000
Size:	8192

Details

Name:	00000007.00000000.283881343.00007FF5ED8E3000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED8E3000
Size:	16384

Details

Name:	00000000.00000003.349485409.0000000015E07000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E07000
Size:	4096

Details

Name:	00000001.00000002.535231374.000001FE6D457000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE6D457000
Size:	65536

Details

Name:	00000000.00000003.383449849.000000001309E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1309E000
Size:	8192

Details

Name:	00000000.00000003.350311487.0000000013059000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13059000
Size:	4096

Details

Name:	00000000.00000003.414795789.000000000F5F0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5F0000
Size:	4096

Details

Name:	00000013.00000003.428554879.000001EE74990000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74990000
Size:	4096

Details

Name:	00000000.00000003.458997053.0000000018E75000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E75000
Size:	4096

Details

Name:	0000000A.00000000.295151619.00007DF543DB0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF543DB0000
Size:	4096

Details

Name:	00000000.00000002.542299712.000000000F60B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F60B000
Size:	40960

Details

Name:	00000000.00000002.537379840.000000000439D000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	439D000
Size:	12288

Details

Name:	00000000.00000002.548506818.0000000017F03000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17F03000
Size:	77824

Details

Name:	00000001.00000002.538251012.00007FF5410E4000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5410E4000
Size:	4096

Details

Name:	00000000.00000003.411986585.000000001600B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1600B000
Size:	4096

Details

Name:	00000000.00000003.414241931.0000000018D04000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D04000
Size:	8192

Details

Name:	00000000.00000003.349525452.0000000015E16000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E16000
Size:	4096

Details

Name:	0000000F.00000002.378560036.000001B379C4B000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B379C4B000
Size:	12288

Details

Name:	0000000D.00000000.309857205.00007DF51D260000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51D260000
Size:	12288

Details

Name:	00000000.00000003.516909058.00000000122DF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	122DF000
Size:	8192

Details

Name:	00000000.00000003.257148104.000000000DEF0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DEF0000
Size:	4096

Details

Name:	00000000.00000003.258592414.000000000E59E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E59E000
Size:	28672

Details

Name:	0000000B.00000000.297135259.00007FF575BE3000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF575BE3000
Size:	16384

Details

Name:	0000001A.00000002.539001852.000002170B684000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170B684000
Size:	4096

Details

Name:	0000001A.00000002.537335462.000002170A6E0000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170A6E0000
Size:	4096

Details

Name:	00000000.00000003.419153817.0000000015E44000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E44000
Size:	4096

Details

Name:	00000000.00000002.551559149.0000000018BB6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18BB6000
Size:	4096

Details

Name:	00000005.00000002.535519415.0000018414100000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18414100000
Size:	4096

Details

Name:	00000000.00000003.461220491.0000000015D43000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D43000
Size:	4096

Details

Name:	0000000A.00000002.535550575.00007FF5420F9000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5420F9000
Size:	12288

Details

Name:	00000000.00000002.542270230.000000000F5FD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F5FD000
Size:	16384

Details

Name:	00000000.00000003.396813988.0000000013168000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13168000
Size:	16384

Details

Name:	00000000.00000003.396315123.0000000015CF8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CF8000
Size:	200704

Details

Name:	00000000.00000003.416069447.0000000015DEA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DEA000
Size:	32768

Details

Name:	00000000.00000002.545839382.00000000161D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	161D0000
Size:	196608

Details

Name:	00000000.00000003.411409277.0000000015C69000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C69000
Size:	53248

Details

Name:	00000006.00000002.536440770.00007FF5ED752000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED752000
Size:	12288

Details

Name:	00000000.00000002.537447306.00000000046BD000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	46BD000
Size:	12288

Details

Name:	00000006.00000002.534427487.000001E968813000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E968813000
Size:	86016

Details

Name:	0000001A.00000000.463415476.00007DF53B152000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF53B152000
Size:	4096

Details

Name:	0000000F.00000000.366816670.00007DF55EBE2000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55EBE2000
Size:	4096

Details

Name:	00000017.00000002.464430333.000000000282C000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	282C000
Size:	20480

Details

Name:	00000000.00000003.349754456.000000000F5FD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5FD000
Size:	16384

Details

Name:	00000000.00000002.546908137.0000000017C2D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C2D000
Size:	4096

Details

Name:	00000000.00000003.396836402.0000000013175000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13175000
Size:	335872

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000013.00000003.419539990.000001EE74710000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74710000
Size:	4096

Details

Name:	0000000A.00000002.534949899.0000023EBD1E6000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	23EBD1E6000
Size:	24576

Details

Name:	0000000B.00000002.309409235.000002A575845000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A575845000
Size:	28672

Details

Name:	0000000A.00000002.533512468.0000008CD24F9000.00000004.00000010.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8CD24F9000
Size:	28672

Details

Name:	00000000.00000003.412555133.0000000015CF8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CF8000
Size:	90112

Details

Name:	00000000.00000003.417349200.0000000018D04000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D04000
Size:	8192

Details

Name:	00000000.00000003.416079818.0000000015DF3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DF3000
Size:	20480

Details

Name:	00000000.00000002.537468380.00000000046C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	46C0000
Size:	4096

Details

Name:	00000017.00000002.464078093.0000000000584000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	584000
Size:	8192

Details

Name:	00000009.00000002.535298555.00007FF58F7E2000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58F7E2000
Size:	8192

Details

Name:	00000000.00000002.549280506.00000000180A5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	180A5000
Size:	4096

Details

Name:	00000001.00000002.537586003.000001FE72CA0000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE72CA0000
Size:	4096

Details

Name:	00000014.00000002.433098816.00007FF50A15C000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50A15C000
Size:	20480

Details

Name:	00000013.00000000.416424131.00007DF52C8C2000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF52C8C2000
Size:	4096

Details

Name:	00000000.00000003.383643735.0000000013159000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13159000
Size:	4096

Details

Name:	00000000.00000003.412639799.0000000015D7B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D7B000
Size:	4096

Details

Name:	00000000.00000003.419301396.0000000018E62000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E62000
Size:	4096

Details

Name:	0000001A.00000002.538633321.000002170B648000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170B648000
Size:	12288

Details

Name:	00000005.00000002.534264076.000001841382A000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1841382A000
Size:	77824

Details

Name:	00000013.00000002.441753370.0000009B2E1EE000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	9B2E1EE000
Size:	8192

Details

Name:	00000006.00000002.536157271.00007FF5ED721000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED721000
Size:	49152

Details

Name:	00000000.00000003.260793680.000000000E5E5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5E5000
Size:	28672

Details

Name:	00000000.00000003.413696055.000000001612E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1612E000
Size:	8192

Details

Name:	00000000.00000003.413113528.0000000015D98000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D98000
Size:	8192

Details

Name:	00000017.00000002.464133909.000000000070E000.00000004.00000010.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	70E000
Size:	8192

Details

Name:	00000000.00000002.536675731.0000000000FD0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FD0000
Size:	4096

Details

Name:	00000013.00000002.442743691.00007DF52C8C2000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF52C8C2000
Size:	4096

Details

Name:	00000007.00000002.306311098.00007FF5ED7F5000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED7F5000
Size:	8192

Details

Name:	00000000.00000003.417067195.0000000015E52000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E52000
Size:	4096

Details

Name:	0000001A.00000002.537325876.000002170A6DC000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170A6DC000
Size:	4096

Details

Name:	00000000.00000002.543694292.00000000130A8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	130A8000
Size:	4096

Details

Name:	00000006.00000002.535196294.00007DF5EEC50000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EEC50000
Size:	12288

Details

Name:	00000000.00000003.397270560.000000001316D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1316D000
Size:	4096

Details

Name:	00000000.00000003.419133565.0000000015E3A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E3A000
Size:	4096

Details

Name:	0000000B.00000002.310103527.00007FF575B74000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF575B74000
Size:	8192

Details

Name:	00000000.00000003.396994727.00000000131DE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	131DE000
Size:	20480

Details

Name:	00000005.00000000.280821117.00000184136A0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	184136A0000
Size:	102400

Details

Name:	00000000.00000003.415897167.0000000015DCA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DCA000
Size:	57344

Details

Name:	00000000.00000003.418767231.0000000018E05000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E05000
Size:	4096

Details

Name:	00000009.00000002.533472686.000000BC0B67B000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	BC0B67B000
Size:	20480

Details

Name:	00000013.00000003.423743746.000001EE74975000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74975000
Size:	16384

Details

Name:	00000000.00000003.415992777.0000000015D2E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D2E000
Size:	24576

Details

Name:	00000009.00000003.294364975.000002A6004C0000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2A6004C0000
Size:	4096

Details

Name:	00000013.00000002.442720351.00007DF52C8B2000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF52C8B2000
Size:	4096

Details

Name:	00000000.00000002.547542804.0000000017DD3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17DD3000
Size:	4096

Details

Name:	00000000.00000002.549130425.0000000017FC9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17FC9000
Size:	4096

Details

Name:	0000000F.00000002.378291702.0000000C7AEFC000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	C7AEFC000
Size:	16384

Details

Name:	00000007.00000002.306290935.00007FF5ED4AD000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED4AD000
Size:	4096

Details

Name:	00000000.00000003.349491943.0000000015E0C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E0C000
Size:	4096

Details

Name:	00000000.00000002.540574066.000000000E252000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	E252000
Size:	28672

Details

Name:	00000000.00000002.535481772.0000000000B54000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	B54000
Size:	16384

Details

Name:	00000017.00000002.464200951.0000000000888000.00000004.00000040.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	888000
Size:	16384

Details

Name:	00000000.00000003.257887878.000000000DFB0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DFB0000
Size:	12288

Details

Name:	00000000.00000002.543748154.00000000130D7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	130D7000
Size:	4096

Details

Name:	00000000.00000003.417271299.0000000018CDD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18CDD000
Size:	4096

Details

Name:	00000007.00000003.305766265.00000292D7A68000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A68000
Size:	16384

Details

Name:	00000000.00000002.546763867.0000000017C1B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C1B000
Size:	4096

Details

Name:	00000006.00000002.535480010.00007FF5ED4D4000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED4D4000
Size:	4096

Details

Name:	00000017.00000002.463909586.0000000000150000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	150000
Size:	102400

Details

Name:	00000006.00000002.535135999.00007DF5EEC42000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EEC42000
Size:	4096

Details

Name:	00000009.00000002.536052992.00007FF58FF9C000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58FF9C000
Size:	20480

Details

Name:	0000000F.00000002.378715659.000001B37A0D0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B37A0D0000
Size:	16384

Details

Name:	0000000A.00000000.295139167.00007DF543DA0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF543DA0000
Size:	4096

Details

Name:	00000000.00000003.418926510.0000000015C99000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C99000
Size:	4096

Details

Name:	00000005.00000002.536879948.00007FF526D05000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF526D05000
Size:	20480

Details

Name:	00000000.00000003.412229850.00000000161AE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	161AE000
Size:	20480

Details

Name:	00000000.00000002.547094388.0000000017CCD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17CCD000
Size:	4096

Details

Name:	00000000.00000003.260067343.000000001309E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1309E000
Size:	8192

Details

Name:	0000001A.00000002.534997143.0000020F089D0000.00000004.00000040.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	20F089D0000
Size:	16384

Details

Name:	00000000.00000003.351034146.000000000F5FB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5FB000
Size:	4096

Details

Name:	00000000.00000002.543841112.0000000013159000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	13159000
Size:	4096

Details

Name:	00000009.00000002.535423100.00007FF58FD4B000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58FD4B000
Size:	8192

Details

Name:	00000000.00000003.412720816.0000000015DAC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DAC000
Size:	4096

Details

Name:	00000000.00000002.540699743.000000000E350000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E350000
Size:	4096

Details

Name:	00000000.00000002.551061924.0000000018ADA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18ADA000
Size:	4096

Details

Name:	00000000.00000003.413285572.0000000015DFA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DFA000
Size:	155648

Details

Name:	00000000.00000003.414359155.0000000015DEA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DEA000
Size:	32768

Details

Name:	00000000.00000002.546074350.0000000016E84000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	16E84000
Size:	16384

Details

Name:	00000000.00000003.258516057.000000000E5A2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5A2000
Size:	8192

Details

Name:	00000000.00000003.411994959.0000000016010000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16010000
Size:	4096

Details

Name:	00000000.00000003.416252375.0000000016012000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16012000
Size:	4096

Details

Name:	00000000.00000003.458966438.0000000018E62000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E62000
Size:	4096

Details

Name:	00000013.00000002.443361432.00007FF52B3B5000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B3B5000
Size:	20480

Details

Name:	00000000.00000003.412670191.0000000015D8F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D8F000
Size:	4096

Details

Name:	00000001.00000002.533840925.0000004ABC87F000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4ABC87F000
Size:	4096

Details

Name:	00000001.00000002.538556709.00007FF5411A0000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5411A0000
Size:	4096

Details

Name:	00000006.00000002.534031085.000001E968760000.00000004.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1E968760000
Size:	4096

Details

Name:	00000006.00000002.533511697.000000867457B000.00000004.00000010.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	867457B000
Size:	20480

Details

Name:	00000000.00000003.350396554.00000000130A8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130A8000
Size:	4096

Details

Name:	00000000.00000002.547104219.0000000017CCF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17CCF000
Size:	4096

Details

Name:	00000000.00000002.543864547.000000001315D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1315D000
Size:	24576

Details

Name:	0000001A.00000000.463363844.0000020F08730000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	20F08730000
Size:	102400

Details

Name:	00000000.00000003.419180202.0000000015E4D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E4D000
Size:	8192

Details

Name:	00000000.00000002.550314246.0000000018730000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18730000
Size:	8192

Details

Name:	0000001A.00000002.534411624.0000020F088B5000.00000004.00000020.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	20F088B5000
Size:	229376

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000F.00000000.366806888.00007DF55EBD2000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55EBD2000
Size:	4096

Details

Name:	0000001A.00000000.463422101.00007DF53B160000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF53B160000
Size:	12288

Details

Name:	00000014.00000002.438795440.00007FF50A1F3000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50A1F3000
Size:	16384

Details

Name:	00000000.00000003.261353142.00000000131FF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	131FF000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.416424147.0000000015DAA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DAA000
Size:	4096

Details

Name:	00000000.00000002.547875827.0000000017E4F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17E4F000
Size:	4096

Details

Name:	00000013.00000003.422231695.000001EE74961000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74961000
Size:	36864

Details

Name:	00000000.00000003.411548163.000000000F669000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F669000
Size:	8192

Details

Name:	00000000.00000002.552086619.00000000FF543000.00000020.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute read
Base address:	FF543000
Size:	8192

Details

Name:	00000000.00000003.260059019.0000000013090000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13090000
Size:	36864

Details

Name:	0000001A.00000002.539341672.00007DF53B150000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF53B150000
Size:	4096

Details

Name:	00000000.00000002.542970033.0000000011AC0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	11AC0000
Size:	4096

Details

Name:	00000005.00000002.535582219.00007DF528200000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF528200000
Size:	4096

Details

Name:	00000000.00000003.397051223.0000000013059000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13059000
Size:	4096

Details

Name:	00000000.00000003.263128161.0000000015C64000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C64000
Size:	4096

Details

Name:	00000013.00000000.416475030.00007FF52B463000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B463000
Size:	16384

Details

Name:	00000000.00000003.413129171.0000000015D9D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D9D000
Size:	8192

Details

Name:	00000000.00000002.548393045.0000000017EF1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17EF1000
Size:	4096

Details

Name:	00000000.00000003.415670604.0000000015D6F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D6F000
Size:	4096

Details

Name:	00000000.00000002.549219608.0000000018041000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18041000
Size:	4096

Details

Name:	00000001.00000002.533820541.0000004ABC7FE000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4ABC7FE000
Size:	8192

Details

Name:	00000000.00000003.418874553.0000000018E7F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E7F000
Size:	28672

Details

Name:	00000000.00000003.417649929.0000000015DFA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DFA000
Size:	40960

Details

Name:	00000017.00000003.463583105.0000000000A29000.00000004.00000040.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	A29000
Size:	24576

Details

Name:	00000000.00000003.417290442.0000000018CE7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18CE7000
Size:	4096

Details

Name:	0000000B.00000002.310137466.00007FF575BE3000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF575BE3000
Size:	16384

Details

Name:	0000001A.00000002.538006888.000002170A9E0000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170A9E0000
Size:	4096

Details

Name:	00000000.00000002.549359487.0000000018131000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18131000
Size:	4096

Details

Name:	00000000.00000003.351225797.0000000015D77000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D77000
Size:	4096

Details

Name:	00000017.00000002.464532231.0000000002858000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2858000
Size:	4096

Details

Name:	00000000.00000003.417668064.0000000018C15000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18C15000
Size:	4096

Details

Name:	00000013.00000002.442128019.000001EE7403C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE7403C000
Size:	61440

Details

Name:	00000005.00000002.535733486.00007DF528220000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF528220000
Size:	12288

Details

Name:	00000005.00000002.534584783.00000184138C1000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	184138C1000
Size:	32768

Details

Name:	00000000.00000002.548650637.0000000017F41000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17F41000
Size:	4096

Details

Name:	00000000.00000002.551165666.0000000018AE8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18AE8000
Size:	4096

Details

Name:	00000000.00000003.412444763.0000000015DA7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DA7000
Size:	4096

Details

Name:	00000000.00000002.539191202.000000000D783000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	D783000
Size:	4096

Details

Name:	00000000.00000003.386588529.000000001623E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1623E000
Size:	4096

Details

Name:	00000000.00000003.257785553.000000000DFC0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DFC0000
Size:	40960

Details

Name:	00000000.00000002.540434125.000000000DFA0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	DFA0000
Size:	8192

Details

Name:	00000000.00000002.549514133.0000000018204000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18204000
Size:	8192

Details

Name:	00000007.00000002.306415831.00007FF5ED8D6000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED8D6000
Size:	12288

Details

Name:	00000000.00000003.397287920.0000000013175000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13175000
Size:	217088

Details

Name:	00000000.00000003.462941152.0000000015A13000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15A13000
Size:	8192

Details

Name:	00000000.00000003.417161593.0000000015C99000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C99000
Size:	4096

Details

Name:	00000000.00000002.547523202.0000000017DC9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17DC9000
Size:	4096

Details

Name:	00000001.00000000.258595652.00007DF542852000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF542852000
Size:	4096

Details

Name:	00000000.00000002.548893581.0000000017F91000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17F91000
Size:	4096

Details

Name:	00000000.00000003.416368555.0000000015D96000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D96000
Size:	4096

Details

Name:	0000001A.00000002.537090600.000002170A678000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170A678000
Size:	4096

Details

Name:	00000009.00000000.287027604.00007DF591482000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF591482000
Size:	4096

Details

Name:	00000000.00000002.551669524.00000000346E0000.00000020.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute read
Base address:	346E0000
Size:	65536

Details

Name:	00000000.00000003.415326716.000000001600D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1600D000
Size:	4096

Details

Name:	00000000.00000002.546843062.0000000017C23000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C23000
Size:	4096

Details

Name:	00000013.00000002.443314531.00007FF52B391000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B391000
Size:	16384

Details

Name:	00000000.00000003.460503099.000000001316F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1316F000
Size:	4096

Details

Name:	00000001.00000002.538148678.00007FF5410B9000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5410B9000
Size:	4096

Details

Name:	00000000.00000003.460330676.0000000013159000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13159000
Size:	4096

Details

Name:	00000000.00000003.417169724.0000000015C9D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C9D000
Size:	8192

Details

Name:	00000000.00000002.538286195.000000000D680000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	D680000
Size:	733184

Details

Name:	00000000.00000003.384879484.0000000000A60000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A60000
Size:	40960

Details

Name:	00000000.00000003.459789313.0000000013166000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13166000
Size:	4096

Details

Name:	00000013.00000003.428468828.000001EE74960000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74960000
Size:	45056

Details

Name:	00000013.00000002.442575890.000001EE7493C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE7493C000
Size:	114688

Details

Name:	00000005.00000000.280888702.00007FF526DB3000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF526DB3000
Size:	16384

Details

Name:	00000000.00000002.550012395.0000000018509000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18509000
Size:	4096

Details

Name:	00000000.00000003.351316068.0000000015DE5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DE5000
Size:	4096

Details

Name:	00000000.00000002.549617608.000000001827C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1827C000
Size:	8192

Details

Name:	00000000.00000003.258582434.000000000E594000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E594000
Size:	4096

Details

Name:	00000000.00000002.550998090.0000000018ACE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18ACE000
Size:	4096

Details

Name:	0000000D.00000000.309890868.00007FF51BDF3000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51BDF3000
Size:	16384

Details

Name:	0000001A.00000002.540618022.00007FF539B9D000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539B9D000
Size:	8192

Details

Name:	00000000.00000003.412077969.000000001612E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1612E000
Size:	8192

Details

Name:	0000000F.00000002.378977440.00007FF55D4E2000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55D4E2000
Size:	12288

Details

Name:	00000000.00000002.541033965.000000000E58F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E58F000
Size:	36864

Details

Name:	00000001.00000002.536970073.000001FE6E440000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FE6E440000
Size:	65536

Details

Name:	00000000.00000003.414951659.0000000015C1A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C1A000
Size:	4096

Details

Name:	00000014.00000002.432822610.00007DF409510000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF409510000
Size:	20480

Details

Name:	00000000.00000003.258547484.000000000E592000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E592000
Size:	40960

Details

Name:	00000000.00000003.350114047.0000000013171000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13171000
Size:	12288

Details

Name:	0000001A.00000002.536844054.0000020F0A2F4000.00000004.00000040.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	20F0A2F4000
Size:	4096

Details

Name:	00000000.00000002.547216559.0000000017D0B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17D0B000
Size:	4096

Details

Name:	00000007.00000002.306198000.00000292D8202000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	292D8202000
Size:	4096

Details

Name:	00000013.00000002.441865942.0000009B2EC7A000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	9B2EC7A000
Size:	24576

Details

Name:	00000000.00000002.543479968.0000000012F44000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12F44000
Size:	245760

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.458911411.0000000015D31000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D31000
Size:	12288

Details

Name:	00000000.00000003.411781122.000000000F5F2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5F2000
Size:	8192

Details

Name:	00000006.00000002.536749294.00007FF5ED7D5000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED7D5000
Size:	16384

Details

Name:	00000000.00000002.536419967.0000000000F30000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	F30000
Size:	8192

Details

Name:	00000000.00000002.546021636.00000000164D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	164D0000
Size:	4096

Details

Name:	0000001A.00000002.534821002.0000020F08952000.00000004.00000020.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	20F08952000
Size:	114688

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	00000000.00000003.351007671.0000000015A17000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15A17000
Size:	4096

Details

Name:	00000006.00000002.535712898.00007FF5ED6B4000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED6B4000
Size:	4096

Details

Name:	00000001.00000002.537741906.000001FE72D00000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE72D00000
Size:	4096

Details

Name:	00000000.00000003.413070411.0000000015D80000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D80000
Size:	4096

Details

Name:	0000000B.00000002.309850692.00007FF575A5C000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF575A5C000
Size:	12288

Details

Name:	00000000.00000003.417909050.0000000018E42000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E42000
Size:	4096

Details

Name:	00000000.00000002.552143191.00000000FF54E000.00000020.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute read
Base address:	FF54E000
Size:	4096

Details

Name:	0000000F.00000002.378576015.000001B379C53000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B379C53000
Size:	114688

Details

Name:	00000007.00000003.305759047.00000292D7A6E000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A6E000
Size:	20480

Details

Name:	00000000.00000003.459310162.000000001316F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1316F000
Size:	4096

Details

Name:	00000013.00000003.428507765.000001EE74966000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74966000
Size:	53248

Details

Name:	00000000.00000003.262981898.00000000131BE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	131BE000
Size:	36864

Details

Name:	00000000.00000002.549408397.0000000018181000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18181000
Size:	4096

Details

Name:	00000000.00000002.549582043.0000000018254000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18254000
Size:	8192

Details

Name:	00000009.00000002.535518330.00007FF58FD92000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58FD92000
Size:	12288

Details

Name:	00000000.00000003.460156816.00000000130A2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130A2000
Size:	16384

Details

Name:	00000000.00000002.547790284.0000000017E31000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17E31000
Size:	4096

Details

Name:	00000017.00000000.458366247.0000000000400000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	400000
Size:	4096

Details

Name:	00000000.00000003.396479688.0000000015E1C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E1C000
Size:	16384

Details

Name:	00000000.00000002.542025374.000000000F59E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F59E000
Size:	69632

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	0000000A.00000002.535248911.00007DF543DC0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF543DC0000
Size:	12288

Details

Name:	00000006.00000002.534892783.000001E968E60000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E968E60000
Size:	12288

Details

Name:	00000000.00000003.396770804.0000000013151000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13151000
Size:	28672

Details

Name:	00000017.00000002.463893613.0000000000140000.00000004.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	140000
Size:	4096

Details

Name:	00000017.00000000.458751518.000000007F380000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F380000
Size:	4096

Details

Name:	00000000.00000003.460809956.0000000015D2E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D2E000
Size:	8192

Details

Name:	0000000F.00000002.378967615.00007FF55D408000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55D408000
Size:	4096

Details

Name:	00000000.00000003.417403004.0000000018D68000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D68000
Size:	8192

Details

Name:	00000006.00000002.533573733.000000867467C000.00000004.00000010.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	867467C000
Size:	16384

Details

Name:	00000000.00000003.349794917.000000000F621000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F621000
Size:	278528

Details

Name:	00000000.00000003.414971409.0000000015C1F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C1F000
Size:	4096

Details

Name:	00000017.00000000.458029596.000000007F380000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F380000
Size:	4096

Details

Name:	0000000D.00000002.326739618.00007FF51BD05000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51BD05000
Size:	8192

Details

Name:	00000001.00000002.533686570.0000004ABC4FB000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4ABC4FB000
Size:	20480

Details

Name:	0000001A.00000002.538905892.000002170B676000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170B676000
Size:	4096

Details

Name:	0000001A.00000002.539061954.000002170B6A6000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170B6A6000
Size:	69632

Details

Name:	00000006.00000002.533658406.000000867477F000.00000004.00000010.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	867477F000
Size:	4096

Details

Name:	00000014.00000002.430861475.000001338A610000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1338A610000
Size:	12288

Details

Name:	00000000.00000003.259442263.000000000E5D5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5D5000
Size:	4096

Details

Name:	00000013.00000003.427060563.000001EE74992000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74992000
Size:	319488

Details

Name:	00000001.00000002.536007876.000001FE6D600000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FE6D600000
Size:	4096

Details

Name:	00000007.00000003.305809484.00000292D7A5B000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A5B000
Size:	4096

Details

Name:	00000000.00000003.397105715.00000000130A2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130A2000
Size:	16384

Details

Name:	00000000.00000003.412003339.0000000016014000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16014000
Size:	8192

Details

Name:	00000000.00000003.351497155.0000000015D69000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D69000
Size:	4096

Details

Name:	00000000.00000002.547125427.0000000017CD7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17CD7000
Size:	4096

Details

Name:	0000000D.00000000.309840668.00007DF51D242000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51D242000
Size:	4096

Details

Name:	00000005.00000002.536354717.00007FF526C95000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF526C95000
Size:	8192

Details

Name:	00000000.00000003.415484813.000000001602A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1602A000
Size:	8192

Details

Name:	00000000.00000003.260102639.00000000130ED000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130ED000
Size:	28672

Details

Name:	00000000.00000003.459903216.00000000131CE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	131CE000
Size:	28672

Details

Name:	00000017.00000002.464456005.0000000002834000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2834000
Size:	12288

Details

Name:	00000000.00000002.549595710.0000000018268000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18268000
Size:	8192

Details

Name:	00000000.00000002.547642091.0000000017DFF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17DFF000
Size:	4096

Details

Name:	00000000.00000002.544455903.0000000015712000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15712000
Size:	12288

Details

Name:	00000000.00000003.349776273.000000000F60B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F60B000
Size:	40960

Details

Name:	0000000D.00000002.326811746.00007FF51BD21000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51BD21000
Size:	16384

Details

Name:	00000013.00000003.420961062.000001EE749B2000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE749B2000
Size:	126976

Details

Name:	0000000F.00000002.379130339.00007FF55D6B9000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55D6B9000
Size:	24576

Details

Name:	00000000.00000003.411773210.000000000F5F0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5F0000
Size:	4096

Details

Name:	00000009.00000002.535136081.00007DF591492000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF591492000
Size:	4096

Details

Name:	0000000F.00000000.366785505.000001B379BA0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B379BA0000
Size:	102400

Details

Name:	00000005.00000002.533642222.0000018413680000.00000004.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	18413680000
Size:	4096

Details

Name:	0000000F.00000002.379068644.00007FF55D68B000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55D68B000
Size:	8192

Details

Name:	00000000.00000003.383155541.0000000015DEF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DEF000
Size:	4096

Details

Name:	00000000.00000002.542223273.000000000F5F7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F5F7000
Size:	4096

Details

Name:	00000000.00000002.551292588.0000000018B04000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18B04000
Size:	4096

Details

Name:	00000000.00000002.545590707.0000000015D31000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15D31000
Size:	12288

Details

Name:	00000000.00000003.412570186.0000000015D0F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D0F000
Size:	151552

Details

Name:	00000000.00000003.412272731.0000000015CC2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CC2000
Size:	94208

Details

Name:	00000000.00000002.548954756.0000000017F9D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17F9D000
Size:	4096

Details

Name:	00000013.00000003.422267320.000001EE74963000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74963000
Size:	28672

Details

Name:	00000007.00000002.306400496.00007FF5ED869000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED869000
Size:	8192

Details

Name:	00000000.00000003.411627372.0000000013025000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13025000
Size:	81920

Details

Name:	00000000.00000003.412452243.0000000015DAC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DAC000
Size:	4096

Details

Name:	00000000.00000003.386657906.0000000000A70000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A70000
Size:	45056

Details

Name:	00000000.00000003.383197264.0000000015E0C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E0C000
Size:	4096

Details

Name:	00000000.00000002.540715378.000000000E360000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	E360000
Size:	8192

Details

Name:	00000000.00000002.551580052.0000000018BBA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18BBA000
Size:	4096

Details

Name:	00000000.00000002.543641112.0000000013050000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	13050000
Size:	12288

Details

Name:	00000007.00000002.306084971.00000292D7A2F000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A2F000
Size:	8192

Details

Name:	00000013.00000003.425808685.000001EE74990000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74990000
Size:	61440

Details

Name:	00000000.00000002.544980347.0000000015AD9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15AD9000
Size:	4096

Details

Name:	00000006.00000002.535519113.00007FF5ED542000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED542000
Size:	12288

Details

Name:	00000000.00000003.417498479.0000000018E58000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E58000
Size:	4096

Details

Name:	00000006.00000002.535669106.00007FF5ED673000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED673000
Size:	8192

Details

Name:	00000013.00000003.421048154.000001EE74E02000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74E02000
Size:	131072

Details

Name:	00000000.00000003.383847022.0000000013023000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13023000
Size:	81920

Details

Name:	0000001A.00000002.540305272.00007FF539AE8000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539AE8000
Size:	8192

Details

Name:	00000000.00000003.416968416.0000000015E21000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E21000
Size:	8192

Details

Name:	0000000A.00000002.536022232.00007FF542874000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF542874000
Size:	28672

Details

Name:	00000000.00000003.463232050.00000000131CE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	131CE000
Size:	28672

Details

Name:	0000000F.00000002.378316018.0000000C7AFFB000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	C7AFFB000
Size:	20480

Details

Name:	00000000.00000002.550545488.000000001891C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1891C000
Size:	8192

Details

Name:	00000017.00000000.457679247.000000007F380000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F380000
Size:	4096

Details

Name:	00000000.00000003.397368625.000000001316D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1316D000
Size:	4096

Details

Name:	0000000A.00000002.535336992.00007FF5420B5000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5420B5000
Size:	16384

Details

Name:	00000005.00000002.536185624.00007FF526BCA000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF526BCA000
Size:	28672

Details

Name:	00000000.00000003.412288220.0000000015CDA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CDA000
Size:	28672

Details

Name:	00000000.00000003.396659723.00000000130C7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130C7000
Size:	8192

Details

Name:	0000000A.00000002.536407872.00007FF542936000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF542936000
Size:	8192

Details

Name:	00000000.00000002.552131929.00000000FF54C000.00000020.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute read
Base address:	FF54C000
Size:	4096

Details

Name:	00000000.00000003.396648500.00000000130C3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130C3000
Size:	12288

Details

Name:	00000000.00000003.260117515.00000000130E8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130E8000
Size:	12288

Details

Name:	00000017.00000002.464274380.000000000269A000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	269A000
Size:	12288

Details

Name:	00000000.00000003.383170183.0000000015DF9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DF9000
Size:	4096

Details

Name:	00000000.00000003.413384416.0000000016019000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16019000
Size:	8192

Details

Name:	0000000D.00000002.326416789.00007DF51D250000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51D250000
Size:	4096

Details

Name:	00000013.00000003.430843216.000001EE7496A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE7496A000
Size:	45056

Details

Name:	0000000D.00000002.326624244.00007FF51BBC5000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51BBC5000
Size:	8192

Details

Name:	00000000.00000002.551279688.0000000018AF6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18AF6000
Size:	4096

Details

Name:	0000000B.00000002.309449388.000002A575856000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A575856000
Size:	90112

Details

Name:	0000000B.00000002.309781405.00007FF575868000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF575868000
Size:	4096

Details

Name:	00000000.00000002.544311850.0000000015400000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15400000
Size:	4096

Details

Name:	00000000.00000002.536468352.0000000000F40000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	F40000
Size:	8192

Details

Name:	00000000.00000003.414913540.0000000015C0B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C0B000
Size:	4096

Details

Name:	0000000D.00000002.326677920.00007FF51BC6C000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51BC6C000
Size:	12288

Details

Name:	00000013.00000002.442177452.000001EE74071000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74071000
Size:	94208

Details

Name:	00000013.00000002.443156199.00007FF52B313000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B313000
Size:	24576

Details

Name:	00000006.00000002.535094753.00007DF5EEC40000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EEC40000
Size:	4096

Details

Name:	00000000.00000003.349361548.0000000015D81000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D81000
Size:	4096

Details

Name:	00000000.00000003.261954318.000000000E5EC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5EC000
Size:	12288

Details

Name:	00000000.00000003.412029954.0000000016023000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16023000
Size:	4096

Details

Name:	00000000.00000003.411328196.0000000015D27000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D27000
Size:	53248

Details

Name:	00000000.00000003.414663810.000000000F5C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5C0000
Size:	28672

Details

Name:	00000007.00000002.306192255.00000292D7F80000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	292D7F80000
Size:	4096

Details

Name:	00000001.00000002.538315736.00007FF541109000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF541109000
Size:	4096

Details

Name:	00000000.00000002.547653113.0000000017E01000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17E01000
Size:	4096

Details

Name:	00000001.00000002.533512601.0000004ABC0F7000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4ABC0F7000
Size:	36864

Details

Name:	0000000B.00000002.309894476.00007FF575AF8000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF575AF8000
Size:	16384

Details

Name:	00000017.00000002.464350392.0000000002790000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2790000
Size:	12288

Details

Name:	00000000.00000003.413173662.0000000015DB1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DB1000
Size:	4096

Details

Name:	00000000.00000003.412346010.0000000015D43000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D43000
Size:	4096

Details

Name:	0000000A.00000002.534983914.0000023EBD3F0000.00000002.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	23EBD3F0000
Size:	4096

Details

Name:	00000000.00000003.415563805.0000000015D52000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D52000
Size:	4096

Details

Name:	00000000.00000003.417337445.0000000018CFF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18CFF000
Size:	8192

Details

Name:	00000000.00000003.415119911.0000000015C46000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C46000
Size:	4096

Details

Name:	00000000.00000002.550343386.0000000018780000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18780000
Size:	8192

Details

Name:	0000001A.00000002.537457546.000002170A760000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2170A760000
Size:	8192

Details

Name:	00000000.00000003.418914416.0000000015C94000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C94000
Size:	4096

Details

Name:	0000001A.00000002.537071989.000002170A674000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170A674000
Size:	4096

Details

Name:	0000001A.00000002.539705906.00007FF5395BE000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5395BE000
Size:	4096

Details

Name:	00000000.00000003.417261980.0000000018CD8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18CD8000
Size:	8192

Details

Name:	0000000D.00000002.326446928.00007DF51D260000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51D260000
Size:	12288

Details

Name:	0000001A.00000002.538388626.000002170B3F4000.00000004.00000040.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2170B3F4000
Size:	4096

Details

Name:	0000001A.00000002.534031655.00000059FB3FD000.00000004.00000010.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	59FB3FD000
Size:	12288

Details

Name:	00000000.00000003.396429856.0000000015C42000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C42000
Size:	40960

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000001A.00000003.469082226.0000020F0896D000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20F0896D000
Size:	4096

Details

Name:	00000009.00000002.535598972.00007FF58FEF4000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58FEF4000
Size:	4096

Details

Name:	00000001.00000002.539673307.00007FF5413F3000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5413F3000
Size:	16384

Details

Name:	00000000.00000003.418777165.0000000018E42000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E42000
Size:	4096

Details

Name:	00000009.00000002.535327165.00007FF58F7FB000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58F7FB000
Size:	4096

Details

Name:	00000000.00000002.548167983.0000000017EA9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17EA9000
Size:	4096

Details

Name:	00000007.00000002.305972448.000000991AF1E000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	991AF1E000
Size:	8192

Details

Name:	00000000.00000003.459132643.00000000130C3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130C3000
Size:	12288

Details

Name:	00000000.00000002.533605169.0000000000792000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	792000
Size:	4096

Details

Name:	00000000.00000002.542254884.000000000F5FB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F5FB000
Size:	4096

Details

Name:	00000000.00000003.413807125.00000000161AE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	161AE000
Size:	20480

Details

Name:	00000000.00000003.418577290.0000000018D72000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D72000
Size:	4096

Details

Name:	00000009.00000002.536282700.00007FF58FFB6000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58FFB6000
Size:	20480

Details

Name:	00000000.00000003.351345274.0000000015DEF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DEF000
Size:	4096

Details

Name:	00000013.00000002.443043763.00007FF52B22F000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B22F000
Size:	8192

Details

Name:	0000001A.00000002.539163513.000002170D790000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2170D790000
Size:	65536

Details

Name:	00000000.00000003.397310195.0000000013145000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13145000
Size:	40960

Details

Name:	0000000A.00000003.297067648.0000023EBD460000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	23EBD460000
Size:	20480

Details

Name:	00000000.00000003.351599928.0000000015D86000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D86000
Size:	4096

Details

Name:	00000013.00000003.426104807.000001EE74997000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74997000
Size:	16384

Details

Name:	00000000.00000002.548414932.0000000017EF9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17EF9000
Size:	4096

Details

Name:	00000000.00000003.415712263.0000000015D7E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D7E000
Size:	4096

Details

Name:	0000000B.00000002.309664151.000002A576002000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A576002000
Size:	4096

Details

Name:	00000000.00000002.551402019.0000000018B24000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18B24000
Size:	4096

Details

Name:	00000000.00000002.550228139.00000000186B8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	186B8000
Size:	8192

Details

Name:	00000000.00000002.544087794.000000001327E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	1327E000
Size:	8192

Details

Name:	00000007.00000002.306103586.00000292D7A42000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A42000
Size:	8192

Details

Name:	00000009.00000002.534156857.000002A67FBF0000.00000004.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2A67FBF0000
Size:	4096

Details

Name:	00000000.00000003.386511933.000000000E5B5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5B5000
Size:	36864

Details

Name:	0000000F.00000002.379185934.00007FF55D6F9000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55D6F9000
Size:	8192

Details

Name:	0000000B.00000002.309513509.000002A575888000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A575888000
Size:	36864

Details

Name:	0000001A.00000002.540354870.00007FF539AF4000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539AF4000
Size:	4096

Details

Name:	00000000.00000003.258791117.000000000E598000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E598000
Size:	4096

Details

Name:	0000001A.00000002.537532929.000002170A810000.00000004.00000040.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2170A810000
Size:	4096

Details

Name:	00000000.00000003.415686982.0000000015D79000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D79000
Size:	4096

Details

Name:	00000000.00000003.458951676.0000000018E58000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E58000
Size:	4096

Details

Name:	00000001.00000002.537817333.00007DF542850000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF542850000
Size:	4096

Details

Name:	00000000.00000002.546882379.0000000017C29000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C29000
Size:	4096

Details

Name:	00000009.00000002.534600447.000002A67FE13000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A67FE13000
Size:	65536

Details

Name:	00000017.00000003.463635670.0000000000A23000.00000004.00000040.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	A23000
Size:	8192

Details

Name:	0000000D.00000003.325200754.0000026002E77000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	26002E77000
Size:	36864

Details

Name:	0000000D.00000002.326241896.0000026002E70000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	26002E70000
Size:	28672

Details

Name:	00000000.00000003.460959525.0000000013234000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13234000
Size:	45056

Details

Name:	00000000.00000002.539036513.000000000D740000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	D740000
Size:	4096

Details

Name:	00000000.00000003.416728351.0000000018D6D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D6D000
Size:	4096

Details

Name:	00000000.00000003.416846752.0000000018E70000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E70000
Size:	4096

Details

Name:	00000013.00000003.431100163.000001EE7497C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE7497C000
Size:	4096

Details

Name:	0000001A.00000002.539721302.00007FF5395C0000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5395C0000
Size:	4096

Details

Name:	00000000.00000002.549748906.0000000018308000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18308000
Size:	8192

Details

Name:	00000000.00000003.460089637.0000000015C5C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C5C000
Size:	106496

Details

Name:	00000000.00000003.261218647.0000000015A10000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15A10000
Size:	61440

Details

Name:	00000017.00000002.463969812.000000000032D000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	32D000
Size:	4096

Details

Name:	00000000.00000003.412108799.0000000015FCB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15FCB000
Size:	16384

Details

Name:	0000000B.00000002.309222933.000000BC031FF000.00000004.00000010.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	BC031FF000
Size:	4096

Details

Name:	00000013.00000003.426070747.000001EE74978000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74978000
Size:	24576

Details

Name:	0000001A.00000002.534223678.0000020F08750000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	20F08750000
Size:	12288

Details

Name:	00000000.00000003.460072816.000000000F66F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F66F000
Size:	32768

Details

Name:	00000000.00000003.259347974.000000000E5D5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5D5000
Size:	4096

Details

Name:	00000000.00000002.536920215.0000000002DA0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DA0000
Size:	344064

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	0000000B.00000002.309324751.000002A5757B0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A5757B0000
Size:	16384

Details

Name:	00000000.00000002.543091124.0000000011B8F000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	11B8F000
Size:	4096

Details

Name:	00000000.00000002.545043970.0000000015AE6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15AE6000
Size:	4096

Details

Name:	00000000.00000003.414512357.000000000F537000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F537000
Size:	344064

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.261257878.0000000015A65000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15A65000
Size:	81920

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.396229469.0000000015CDF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CDF000
Size:	8192

Details

Name:	00000000.00000002.550139762.0000000018640000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18640000
Size:	8192

Details

Name:	00000000.00000002.549678882.00000000182A4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	182A4000
Size:	8192

Details

Name:	00000000.00000003.412701302.0000000015DA2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DA2000
Size:	4096

Details

Name:	00000000.00000003.349497498.0000000015E11000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E11000
Size:	4096

Details

Name:	00000000.00000002.551570011.0000000018BB8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18BB8000
Size:	4096

Details

Name:	00000013.00000000.416434833.00007DF52C8D0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF52C8D0000
Size:	12288

Details

Name:	00000000.00000003.383691141.000000001316D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1316D000
Size:	4096

Details

Name:	00000007.00000003.305779660.00000292D7A64000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A64000
Size:	16384

Details

Name:	00000000.00000002.550954926.0000000018AC6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18AC6000
Size:	4096

Details

Name:	00000000.00000003.415873448.0000000015DBD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DBD000
Size:	4096

Details

Name:	00000000.00000002.552071048.00000000FF541000.00000020.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute read
Base address:	FF541000
Size:	4096

Details

Name:	0000001A.00000002.534278798.0000020F08880000.00000004.00000020.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	20F08880000
Size:	32768

Details

Name:	0000000B.00000002.309939893.00007FF575B11000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF575B11000
Size:	16384

Details

Name:	00000000.00000003.418068771.0000000015CD4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CD4000
Size:	36864

Details

Name:	00000000.00000003.417932982.0000000018E58000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E58000
Size:	4096

Details

Name:	00000000.00000003.350414139.00000000130C3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130C3000
Size:	12288

Details

Name:	00000000.00000002.540886835.000000000E53F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E53F000
Size:	32768

Details

Name:	0000001A.00000002.537543634.000002170A820000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2170A820000
Size:	733184

Details

Name:	00000000.00000002.535768948.0000000000B6C000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	B6C000
Size:	28672

Details

Name:	00000007.00000002.305966743.000000991AE9B000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	991AE9B000
Size:	20480

Details

Name:	0000001A.00000002.537146439.000002170A688000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170A688000
Size:	4096

Details

Name:	00000001.00000000.258591974.00007DF542850000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF542850000
Size:	4096

Details

Name:	00000013.00000002.442421076.000001EE74116000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74116000
Size:	4096

Details

Name:	00000001.00000000.258587741.00007DF542842000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF542842000
Size:	4096

Details

Name:	00000013.00000002.442095735.000001EE74029000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74029000
Size:	73728

Details

Name:	0000000F.00000002.378949971.00007FF55D28C000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55D28C000
Size:	32768

Details

Name:	00000017.00000002.464565298.000000000286B000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	286B000
Size:	16384

Details

Name:	00000005.00000002.536396320.00007FF526CA0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF526CA0000
Size:	8192

Details

Name:	00000007.00000002.306121984.00000292D7A5E000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A5E000
Size:	4096

Details

Name:	00000000.00000002.546220407.0000000016EA6000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	16EA6000
Size:	12288

Details

Name:	0000000F.00000002.379037532.00007FF55D5C0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55D5C0000
Size:	24576

Details

Name:	00000000.00000003.264629026.00000000154A0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	154A0000
Size:	40960

Details

Name:	00000005.00000000.280856018.00007DF528220000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF528220000
Size:	12288

Details

Name:	00000000.00000002.547234650.0000000017D19000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17D19000
Size:	4096

Details

Name:	00000000.00000003.459826211.0000000013171000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13171000
Size:	12288

Details

Name:	00000000.00000003.413271812.0000000015DF3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DF3000
Size:	20480

Details

Name:	00000001.00000003.259809505.000001FE72914000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE72914000
Size:	4096

Details

Name:	00000006.00000002.535357697.00007FF5ED039000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED039000
Size:	16384

Details

Name:	0000001A.00000000.463471751.00007FF539CF3000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539CF3000
Size:	16384

Details

Name:	0000000D.00000002.326115965.0000026002E00000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	26002E00000
Size:	73728

Details

Name:	0000001A.00000003.469039817.0000020F08971000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20F08971000
Size:	57344

Details

Name:	00000000.00000003.396346725.0000000015D2D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D2D000
Size:	36864

Details

Name:	00000000.00000003.260770230.000000000E5E1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5E1000
Size:	45056

Details

Name:	00000001.00000002.538776815.00007FF54126C000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54126C000
Size:	12288

Details

Name:	00000000.00000003.463172068.0000000013171000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13171000
Size:	12288

Details

Name:	0000000F.00000003.378124714.000001B379C48000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B379C48000
Size:	24576

Details

Name:	00000000.00000003.396757479.0000000013145000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13145000
Size:	40960

Details

Name:	00000000.00000003.460438829.0000000013168000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13168000
Size:	16384

Details

Name:	00000000.00000002.549073851.0000000017FC1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17FC1000
Size:	4096

Details

Name:	00000009.00000000.287040065.00007DF591492000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF591492000
Size:	4096

Details

Name:	00000007.00000003.305800491.00000292D7A5F000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A5F000
Size:	4096

Details

Name:	00000013.00000002.443451258.00007FF52B446000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B446000
Size:	8192

Details

Name:	00000000.00000003.411851181.0000000015DFA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DFA000
Size:	155648

Details

Name:	00000007.00000002.306368704.00007FF5ED84C000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED84C000
Size:	20480

Details

Name:	0000001A.00000002.541014407.00007FF539C76000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539C76000
Size:	20480

Details

Name:	0000000F.00000002.379121699.00007FF55D6B1000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55D6B1000
Size:	16384

Details

Name:	00000000.00000003.418275192.0000000018D68000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D68000
Size:	8192

Details

Name:	00000000.00000002.542662401.000000001158D000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	1158D000
Size:	12288

Details

Name:	00000013.00000002.441918504.000001EE73E80000.00000004.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1EE73E80000
Size:	4096

Details

Name:	00000000.00000003.517100111.0000000012394000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12394000
Size:	4096

Details

Name:	00000000.00000002.550386006.00000000187D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	187D0000
Size:	8192

Details

Name:	00000000.00000002.550213971.00000000186A4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	186A4000
Size:	8192

Details

Name:	00000000.00000003.349682935.000000000F5E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5E0000
Size:	8192

Details

Name:	00000000.00000002.537727196.000000000C4C3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C4C3000
Size:	24576

Details

Name:	00000000.00000003.417557304.0000000018E75000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E75000
Size:	4096

Details

Name:	00000005.00000002.536528224.00007FF526CBC000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF526CBC000
Size:	4096

Details

Name:	00000000.00000003.418201568.0000000018D5F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D5F000
Size:	4096

Details

Name:	00000000.00000002.547152621.0000000017CE3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17CE3000
Size:	4096

Details

Name:	00000000.00000003.458902077.0000000015D29000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D29000
Size:	28672

Details

Name:	0000000A.00000002.535747711.00007FF54276A000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54276A000
Size:	4096

Details

Name:	00000000.00000003.416737046.0000000018D72000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D72000
Size:	4096

Details

Name:	00000000.00000003.416861687.0000000018E75000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E75000
Size:	4096

Details

Name:	00000000.00000002.540732769.000000000E364000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	E364000
Size:	8192

Details

Name:	00000000.00000003.459263772.000000001315B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1315B000
Size:	4096

Details

Name:	00000017.00000002.464336770.000000000278D000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	278D000
Size:	4096

Details

Name:	00000000.00000003.418636943.0000000018E58000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E58000
Size:	4096

Details

Name:	00000000.00000003.350976433.00000000159EA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	159EA000
Size:	159744

Details

Name:	00000000.00000003.463077914.000000001314F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1314F000
Size:	36864

Details

Name:	0000000D.00000002.326633230.00007FF51BBE1000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51BBE1000
Size:	4096

Details

Name:	00000000.00000003.412662519.0000000015D8A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D8A000
Size:	4096

Details

Name:	00000000.00000003.397498487.000000000F60B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F60B000
Size:	40960

Details

Name:	00000000.00000002.543877094.0000000013164000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	13164000
Size:	4096

Details

Name:	00000000.00000003.411873034.0000000015E24000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E24000
Size:	4096

Details

Name:	0000000F.00000002.378372352.0000000C7B27F000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	C7B27F000
Size:	4096

Details

Name:	0000000F.00000002.378279681.0000000C7ABCE000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	C7ABCE000
Size:	8192

Details

Name:	00000000.00000003.417540400.0000000018E6B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E6B000
Size:	4096

Details

Name:	0000000F.00000002.378425972.000001B379B90000.00000004.00000040.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1B379B90000
Size:	4096

Details

Name:	00000000.00000003.351205283.0000000015D69000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D69000
Size:	4096

Details

Name:	00000000.00000003.351512021.0000000015D6D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D6D000
Size:	8192

Details

Name:	00000000.00000002.543940616.0000000013175000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	13175000
Size:	335872

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.416556728.0000000018CE2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18CE2000
Size:	4096

Details

Name:	00000000.00000003.411581844.000000000F6A0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F6A0000
Size:	389120

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.537185435.00000000042B0000.00000008.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page write copy
Base address:	42B0000
Size:	266240

Details

Name:	0000000D.00000002.325440101.000000831D4F7000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	831D4F7000
Size:	36864

Details

Name:	00000000.00000003.413204838.0000000015DC4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DC4000
Size:	8192

Details

Name:	00000000.00000002.542124204.000000000F5E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F5E0000
Size:	8192

Details

Name:	00000017.00000002.464266073.0000000002671000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2671000
Size:	8192

Details

Name:	00000007.00000003.305836717.00000292D7A41000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A41000
Size:	16384

Details

Name:	00000000.00000003.349785685.000000000F617000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F617000
Size:	36864

Details

Name:	00000000.00000003.418363698.0000000018E58000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E58000
Size:	4096

Details

Name:	0000001A.00000002.540560536.00007FF539B65000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539B65000
Size:	12288

Details

Name:	00000000.00000002.537523993.00000000046E3000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	46E3000
Size:	20480

Details

Name:	00000000.00000003.350222836.00000000131DE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	131DE000
Size:	20480

Details

Name:	00000000.00000002.547386992.0000000017D51000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17D51000
Size:	4096

Details

Name:	00000014.00000002.431110071.000001338A755000.00000004.00000040.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1338A755000
Size:	8192

Details

Name:	00000009.00000002.533809082.000002A600210000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A600210000
Size:	16384

Details

Name:	00000000.00000003.412477311.0000000015DBF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DBF000
Size:	8192

Details

Name:	00000000.00000003.349713923.000000000F5F2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5F2000
Size:	16384

Details

Name:	00000001.00000002.537826900.00007DF542852000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF542852000
Size:	4096

Details

Name:	00000000.00000003.417032349.0000000015E3F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E3F000
Size:	4096

Details

Name:	0000000A.00000002.536094477.00007FF542881000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF542881000
Size:	4096

Details

Name:	00000000.00000003.396808447.0000000013166000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13166000
Size:	4096

Details

Name:	00000000.00000003.411554497.000000000F66C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F66C000
Size:	208896

Details

Name:	00000000.00000002.549927069.0000000018441000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18441000
Size:	4096

Details

Name:	00000000.00000003.413483742.00000000161AE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	161AE000
Size:	20480

Details

Name:	00000013.00000002.443187148.00007FF52B33C000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B33C000
Size:	8192

Details

Name:	00000000.00000002.546930010.0000000017C32000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C32000
Size:	4096

Details

Name:	00000000.00000002.540411978.000000000DF90000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	DF90000
Size:	16384

Details

Name:	00000000.00000003.396906783.00000000131E6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	131E6000
Size:	139264

Details

Name:	00000000.00000003.417051734.0000000015E49000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E49000
Size:	4096

Details

Name:	00000000.00000003.413034623.0000000015D6C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D6C000
Size:	8192

Details

Name:	00000005.00000002.533473671.000000668FFFF000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	668FFFF000
Size:	4096

Details

Name:	00000013.00000003.422309869.000001EE74990000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74990000
Size:	4096

Details

Name:	00000017.00000002.464385082.00000000027B8000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27B8000
Size:	36864

Details

Name:	00000000.00000003.462604948.0000000015D46000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D46000
Size:	28672

Details

Name:	00000000.00000002.545338306.0000000015B0B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15B0B000
Size:	106496

Details

Name:	00000009.00000002.535747423.00007FF58FF3B000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58FF3B000
Size:	8192

Details

Name:	00000014.00000002.433050350.00007FF50A114000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50A114000
Size:	28672

Details

Name:	00000000.00000003.383536104.00000000130E5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130E5000
Size:	40960

Details

Name:	00000000.00000002.543512860.0000000012F82000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12F82000
Size:	40960

Details

Name:	00000000.00000003.417532228.0000000018E66000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E66000
Size:	8192

Details

Name:	00000007.00000002.306142950.00000292D7A74000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A74000
Size:	4096

Details

Name:	0000000D.00000002.326333973.0000026003000000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26003000000
Size:	4096

Details

Name:	00000000.00000002.551995868.0000000067E16000.00000008.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page write copy
Base address:	67E16000
Size:	4096

Details

Name:	00000000.00000003.418005975.0000000018E70000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E70000
Size:	4096

Details

Name:	00000001.00000002.539416645.00007FF54135B000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54135B000
Size:	24576

Details

Name:	00000007.00000002.306094638.00000292D7A3A000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A3A000
Size:	8192

Details

Name:	00000000.00000003.258470128.000000000E5A1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5A1000
Size:	8192

Details

Name:	00000000.00000003.517339825.000000000E58A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E58A000
Size:	4096

Details

Name:	00000000.00000003.323754138.0000000016245000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16245000
Size:	8192

Details

Name:	00000000.00000003.417581977.0000000018E7F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E7F000
Size:	49152

Details

Name:	00000005.00000002.533431309.000000668FD7C000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	668FD7C000
Size:	16384

Details

Name:	00000000.00000002.549696846.00000000182B8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	182B8000
Size:	8192

Details

Name:	0000001A.00000002.537371786.000002170A6EC000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170A6EC000
Size:	4096

Details

Name:	00000000.00000002.546606874.0000000017BFB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17BFB000
Size:	77824

Details

Name:	00000017.00000003.463523531.0000000002DE4000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2DE4000
Size:	4096

Details

Name:	0000000F.00000002.378784870.00007DF45CAA0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF45CAA0000
Size:	20480

Details

Name:	00000006.00000002.534380173.000001E968802000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E968802000
Size:	65536

Details

Name:	00000000.00000003.419101957.0000000015E30000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E30000
Size:	4096

Details

Name:	00000000.00000002.537864864.000000000C580000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C580000
Size:	4096

Details

Name:	00000000.00000003.417367335.0000000018D55000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D55000
Size:	4096

Details

Name:	00000007.00000002.306153338.00000292D7A7F000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A7F000
Size:	16384

Details

Name:	00000000.00000003.411445445.0000000015F90000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15F90000
Size:	4096

Details

Name:	00000014.00000002.431090883.000001338A750000.00000004.00000040.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1338A750000
Size:	12288

Details

Name:	00000006.00000000.282535993.00007FF5ED7E3000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED7E3000
Size:	16384

Details

Name:	00000000.00000003.351140692.000000000F669000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F669000
Size:	8192

Details

Name:	00000000.00000003.459215524.0000000013113000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13113000
Size:	4096

Details

Name:	0000000A.00000002.534585206.0000023EBC780000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	23EBC780000
Size:	12288

Details

Name:	00000000.00000003.260259872.0000000012FCF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12FCF000
Size:	36864

Details

Name:	00000000.00000003.517187645.000000000E59F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E59F000
Size:	57344

Details

Name:	0000000F.00000000.366811985.00007DF55EBE0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55EBE0000
Size:	4096

Details

Name:	00000009.00000002.536396387.00007FF590025000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF590025000
Size:	16384

Details

Name:	00000000.00000002.542045501.000000000F5B1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F5B1000
Size:	53248

Details

Name:	00000005.00000002.533911502.00000184136D0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	184136D0000
Size:	4096

Details

Name:	00000000.00000003.256014333.000000000D751000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	D751000
Size:	36864

Details

Name:	0000000B.00000002.309789045.00007FF575942000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF575942000
Size:	12288

Details

Name:	00000013.00000003.421960724.000001EE74E19000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74E19000
Size:	90112

Details

Name:	0000001A.00000002.533488305.00000059FAAF7000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	59FAAF7000
Size:	36864

Details

Name:	0000001A.00000002.538137546.000002170B230000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170B230000
Size:	114688

Details

Name:	0000000A.00000002.534102331.0000023EBC5F0000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	23EBC5F0000
Size:	4096

Details

Name:	00000000.00000003.323796679.000000000E59F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E59F000
Size:	57344

Details

Name:	00000000.00000003.414458924.00000000161B4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	161B4000
Size:	8192

Details

Name:	00000000.00000003.417719860.0000000018CEC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18CEC000
Size:	4096

Details

Name:	00000005.00000002.536420718.00007FF526CA9000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF526CA9000
Size:	4096

Details

Name:	00000000.00000003.397281905.0000000013171000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13171000
Size:	12288

Details

Name:	00000000.00000003.351015015.000000000F5F4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5F4000
Size:	8192

Details

Name:	00000000.00000003.459627554.0000000013113000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13113000
Size:	4096

Details

Name:	00000000.00000002.541520838.000000000F3BD000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F3BD000
Size:	12288

Details

Name:	00000000.00000003.459280213.0000000013164000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13164000
Size:	4096

Details

Name:	00000000.00000003.416754200.0000000018DC8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18DC8000
Size:	4096

Details

Name:	00000000.00000003.417520040.0000000018E62000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E62000
Size:	4096

Details

Name:	00000000.00000003.350666181.0000000015AD7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15AD7000
Size:	4096

Details

Name:	00000000.00000003.351895036.0000000015DEF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DEF000
Size:	4096

Details

Name:	0000000B.00000002.309804682.00007FF5759AD000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5759AD000
Size:	4096

Details

Name:	00000000.00000003.266357085.0000000011900000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11900000
Size:	12288

Details

Name:	00000000.00000002.546150865.0000000016E97000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	16E97000
Size:	16384

Details

Name:	00000000.00000003.412728096.0000000015DB1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DB1000
Size:	4096

Details

Name:	00000000.00000003.383893369.000000000F5F7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5F7000
Size:	4096

Details

Name:	0000000D.00000002.326882052.00007FF51BD69000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51BD69000
Size:	8192

Details

Name:	0000000F.00000002.378996558.00007FF55D54D000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55D54D000
Size:	4096

Details

Name:	00000009.00000002.533487725.000000BC0B8FE000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	BC0B8FE000
Size:	8192

Details

Name:	00000013.00000002.442056228.000001EE74013000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74013000
Size:	86016

Details

Name:	00000000.00000003.412693627.0000000015D9D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D9D000
Size:	8192

Details

Name:	00000000.00000003.259313489.000000000E5CC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5CC000
Size:	32768

Details

Name:	00000000.00000003.516961648.00000000122F1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	122F1000
Size:	36864

Details

Name:	00000000.00000003.412880254.0000000015DD1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DD1000
Size:	40960

Details

Name:	00000000.00000003.416510668.0000000015DCA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DCA000
Size:	28672

Details

Name:	00000000.00000003.260130519.0000000012F2E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12F2E000
Size:	49152

Details

Name:	00000000.00000002.544816961.0000000015AC3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15AC3000
Size:	4096

Details

Name:	00000000.00000003.412713082.0000000015DA7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DA7000
Size:	4096

Details

Name:	00000000.00000003.323772468.000000000E5D3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5D3000
Size:	114688

Details

Name:	00000000.00000003.396973633.00000000131C8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	131C8000
Size:	20480

Details

Name:	00000007.00000002.306405623.00007FF5ED874000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED874000
Size:	8192

Details

Name:	00000000.00000003.399114391.0000000015C2A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C2A000
Size:	65536

Details

Name:	00000000.00000003.383141976.0000000015DE5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DE5000
Size:	4096

Details

Name:	00000000.00000003.397446925.000000001303B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1303B000
Size:	49152

Details

Name:	00000013.00000003.425755163.000001EE74990000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74990000
Size:	53248

Details

Name:	00000000.00000003.412137594.000000001600B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1600B000
Size:	4096

Details

Name:	00000000.00000003.412741265.0000000015DBB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DBB000
Size:	4096

Details

Name:	00000000.00000003.412098972.0000000015F90000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15F90000
Size:	4096

Details

Name:	00000000.00000002.545480589.0000000015BCE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15BCE000
Size:	4096

Details

Name:	00000001.00000002.533969243.000001FE6D220000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FE6D220000
Size:	102400

Details

Name:	00000000.00000003.386538855.000000000E5D3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5D3000
Size:	114688

Details

Name:	00000000.00000003.413994572.00000000161B4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	161B4000
Size:	8192

Details

Name:	00000000.00000003.417316032.0000000018CF6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18CF6000
Size:	4096

Details

Name:	0000000B.00000002.309396629.000002A57583C000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A57583C000
Size:	32768

Details

Name:	00000001.00000002.539623166.00007FF5413DC000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5413DC000
Size:	4096

Details

Name:	00000000.00000002.536639193.0000000000FC0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FC0000
Size:	8192

Details

Name:	00000013.00000003.423785802.000001EE74975000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74975000
Size:	16384

Details

Name:	00000000.00000003.263133445.0000000015C67000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C67000
Size:	16384

Details

Name:	00000000.00000002.551501324.0000000018B30000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18B30000
Size:	4096

Details

Name:	00000006.00000002.534307841.000001E9687B0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E9687B0000
Size:	4096

Details

Name:	00000007.00000003.305721486.00000292D7A75000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A75000
Size:	57344

Details

Name:	00000006.00000000.282487986.00007DF5EEC32000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EEC32000
Size:	4096

Details

Name:	00000000.00000003.349632682.000000000F598000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F598000
Size:	20480

Details

Name:	00000000.00000003.414076382.0000000018BFD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18BFD000
Size:	4096

Details

Name:	00000000.00000003.397041233.0000000013047000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13047000
Size:	49152

Details

Name:	00000000.00000003.414733890.000000000F5E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5E0000
Size:	8192

Details

Name:	00000000.00000003.349765233.000000000F602000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F602000
Size:	4096

Details

Name:	0000000A.00000002.534763936.0000023EBC900000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	23EBC900000
Size:	4096

Details

Name:	00000014.00000002.432956408.00007FF5099C7000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5099C7000
Size:	8192

Details

Name:	00000000.00000003.417298965.0000000018CEC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18CEC000
Size:	4096

Details

Name:	00000007.00000003.305709460.00000292D7A73000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A73000
Size:	65536

Details

Name:	00000000.00000002.535835687.0000000000B75000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	B75000
Size:	4096

Details

Name:	00000000.00000003.262756329.0000000015C0A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C0A000
Size:	4096

Details

Name:	00000000.00000002.539553069.000000000D7EE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	D7EE000
Size:	118784

Details

Name:	00000006.00000002.533462905.000000867412C000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	867412C000
Size:	16384

Details

Name:	00000005.00000002.536970411.00007FF526D2C000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF526D2C000
Size:	36864

Details

Name:	00000014.00000002.430653375.000001338A5D0000.00000004.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1338A5D0000
Size:	4096

Details

Name:	00000000.00000003.412317231.0000000015D0F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D0F000
Size:	151552

Details

Name:	0000000F.00000002.379028087.00007FF55D5BA000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55D5BA000
Size:	20480

Details

Name:	0000001A.00000002.541301977.00007FFF9D600000.00000004.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	7FFF9D600000
Size:	8192

Details

Name:	00000013.00000002.442357007.000001EE740FA000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE740FA000
Size:	28672

Details

Name:	00000000.00000003.415016854.0000000015C28000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C28000
Size:	4096

Details

Name:	00000000.00000003.260086400.00000000130C3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130C3000
Size:	12288

Details

Name:	00000000.00000003.412796090.0000000015DEA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DEA000
Size:	32768

Details

Name:	00000000.00000003.386525470.000000000E5C5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5C5000
Size:	53248

Details

Name:	00000000.00000003.413062300.0000000015D7B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D7B000
Size:	4096

Details

Name:	00000000.00000002.543197439.0000000011C1E000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	11C1E000
Size:	12288

Details

Name:	00000000.00000003.459370390.00000000131C8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	131C8000
Size:	20480

Details

Name:	00000000.00000003.349542868.0000000015C5B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C5B000
Size:	77824

Details

Name:	00000013.00000002.443206456.00007FF52B345000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B345000
Size:	16384

Details

Name:	00000000.00000003.418963697.0000000015CA7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CA7000
Size:	4096

Details

Name:	0000000D.00000002.326550415.00007FF51B993000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51B993000
Size:	4096

Details

Name:	00000000.00000003.259452713.000000000E5AC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5AC000
Size:	12288

Details

Name:	00000001.00000000.258553114.000001FE6D220000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FE6D220000
Size:	102400

Details

Name:	00000000.00000002.550585498.000000001896C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1896C000
Size:	8192

Details

Name:	00000000.00000003.408796471.0000000000DF0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	DF0000
Size:	24576

Details

Name:	00000000.00000002.549873088.00000000183BC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	183BC000
Size:	8192

Details

Name:	0000001A.00000003.469073810.0000020F0896B000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20F0896B000
Size:	4096

Details

Name:	00000000.00000002.551626969.0000000018BC2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18BC2000
Size:	4096

Details

Name:	00000017.00000002.464646615.0000000003260000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3260000
Size:	4096

Details

Name:	00000017.00000003.461035618.00000000005C2000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C2000
Size:	28672

Details

Name:	00000000.00000003.412851701.0000000015CDA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CDA000
Size:	28672

Details

Name:	0000001A.00000002.538328725.000002170B295000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170B295000
Size:	16384

Details

Name:	00000000.00000002.544181102.000000001515D000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	1515D000
Size:	12288

Details

Name:	0000000F.00000002.379159239.00007FF55D6D5000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55D6D5000
Size:	20480

Details

Name:	00000000.00000003.413789016.000000001612E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1612E000
Size:	8192

Details

Name:	00000000.00000003.461050925.0000000015D00000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D00000
Size:	45056

Details

Name:	00000000.00000002.546133516.0000000016E93000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	16E93000
Size:	12288

Details

Name:	00000000.00000003.397142359.00000000130D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130D0000
Size:	20480

Details

Name:	00000000.00000003.415551102.00000000161A7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	161A7000
Size:	12288

Details

Name:	00000000.00000003.460928504.0000000013025000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13025000
Size:	81920

Details

Name:	0000001A.00000002.538891135.000002170B674000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170B674000
Size:	4096

Details

Name:	00000000.00000002.541923673.000000000F537000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F537000
Size:	344064

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000002.537104003.00007FF526DB3000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF526DB3000
Size:	16384

Details

Name:	00000000.00000003.349346058.0000000015D72000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D72000
Size:	4096

Details

Name:	00000013.00000002.442595030.000001EE7495D000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE7495D000
Size:	40960

Details

Name:	00000000.00000003.414863786.00000000161B4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	161B4000
Size:	8192

Details

Name:	00000000.00000003.260778536.000000000E5DA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5DA000
Size:	28672

Details

Name:	00000000.00000002.550111453.0000000018618000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18618000
Size:	8192

Details

Name:	00000001.00000002.538171424.00007FF5410BF000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5410BF000
Size:	12288

Details

Name:	00000000.00000003.462555253.0000000015D35000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D35000
Size:	4096

Details

Name:	00000000.00000003.411216647.0000000015E0B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E0B000
Size:	86016

Details

Name:	00000000.00000003.350506924.000000000F6A0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F6A0000
Size:	389120

Details

Name:	00000000.00000003.383507036.00000000130C7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130C7000
Size:	8192

Details

Name:	00000000.00000003.383456899.00000000130A2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130A2000
Size:	16384

Details

Name:	00000000.00000003.349652037.000000000F5B1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5B1000
Size:	53248

Details

Name:	00000000.00000003.266951830.0000000011A80000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11A80000
Size:	40960

Details

Name:	00000000.00000002.546941961.0000000017C34000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C34000
Size:	4096

Details

Name:	00000000.00000002.542287520.000000000F602000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F602000
Size:	4096

Details

Name:	0000000B.00000002.309544568.000002A575908000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A575908000
Size:	24576

Details

Name:	0000000B.00000002.309670249.00007DF474F00000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF474F00000
Size:	20480

Details

Name:	00000000.00000003.261269362.000000000F66F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F66F000
Size:	196608

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000017.00000000.457671387.000000007F372000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F372000
Size:	4096

Details

Name:	00000001.00000002.537975372.00007FF540F48000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF540F48000
Size:	4096

Details

Name:	00000000.00000003.397264050.0000000013168000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13168000
Size:	16384

Details

Name:	0000000D.00000002.326888255.00007FF51BD6C000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51BD6C000
Size:	36864

Details

Name:	00000000.00000003.517229491.000000000E5C5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5C5000
Size:	53248

Details

Name:	00000000.00000003.397090354.0000000013090000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13090000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000A.00000002.534361456.0000023EBC691000.00000004.00000020.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	23EBC691000
Size:	360448

Details

Name:	00000000.00000003.458973563.0000000018E66000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E66000
Size:	8192

Details

Name:	00000000.00000002.549431300.00000000181A9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	181A9000
Size:	4096

Details

Name:	00000000.00000003.413518848.0000000015E04000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E04000
Size:	114688

Details

Name:	00000013.00000003.424661430.000001EE749BD000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE749BD000
Size:	65536

Details

Name:	00000013.00000002.443010742.00007FF52B209000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B209000
Size:	24576

Details

Name:	0000000F.00000002.379086600.00007FF55D695000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55D695000
Size:	8192

Details

Name:	0000000F.00000002.379094834.00007FF55D698000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55D698000
Size:	16384

Details

Name:	0000000A.00000002.533702963.0000023EBC4B0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	23EBC4B0000
Size:	102400

Details

Name:	00000000.00000003.396385527.0000000015C2A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C2A000
Size:	65536

Details

Name:	00000006.00000002.536638461.00007FF5ED766000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED766000
Size:	20480

Details

Name:	00000000.00000003.419024518.0000000015CC0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CC0000
Size:	4096

Details

Name:	00000000.00000003.458857325.0000000015CC2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CC2000
Size:	57344

Details

Name:	00000000.00000002.548090936.0000000017E8B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17E8B000
Size:	61440

Details

Name:	00000000.00000003.397191499.0000000013115000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13115000
Size:	192512

Details

Name:	00000013.00000003.441595586.000001EE7404F000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE7404F000
Size:	12288

Details

Name:	00000000.00000002.545192725.0000000015AF3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15AF3000
Size:	16384

Details

Name:	0000001A.00000002.537983874.000002170A8E0000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170A8E0000
Size:	4096

Details

Name:	00000013.00000002.441930041.000001EE73E90000.00000004.00000040.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1EE73E90000
Size:	4096

Details

Name:	00000017.00000000.458398259.000000007F372000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F372000
Size:	4096

Details

Name:	00000000.00000002.548334303.0000000017ED7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17ED7000
Size:	4096

Details

Name:	00000000.00000003.396376743.0000000015C10000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C10000
Size:	16384

Details

Name:	00000000.00000002.549957217.0000000018491000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18491000
Size:	4096

Details

Name:	00000006.00000002.535377738.00007FF5ED4A9000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED4A9000
Size:	4096

Details

Name:	00000013.00000002.443050418.00007FF52B235000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B235000
Size:	8192

Details

Name:	00000000.00000002.547740096.0000000017E13000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17E13000
Size:	77824

Details

Name:	00000000.00000003.463220762.00000000131C8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	131C8000
Size:	20480

Details

Name:	00000000.00000003.416813076.0000000018E62000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E62000
Size:	4096

Details

Name:	0000001A.00000002.534970024.0000020F089C0000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20F089C0000
Size:	4096

Details

Name:	00000000.00000003.460410432.0000000013166000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13166000
Size:	4096

Details

Name:	00000000.00000003.383803999.0000000013209000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13209000
Size:	221184

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000017.00000002.464733723.000000007F370000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F370000
Size:	4096

Details

Name:	00000000.00000002.545934208.000000001620F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1620F000
Size:	8192

Details

Name:	0000001A.00000002.538537610.000002170B640000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170B640000
Size:	20480

Details

Name:	00000000.00000003.411379926.0000000015E24000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E24000
Size:	4096

Details

Name:	00000000.00000003.397508942.000000000F617000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F617000
Size:	36864

Details

Name:	0000000F.00000002.378383705.0000000C7B37D000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	C7B37D000
Size:	12288

Details

Name:	00000000.00000002.551659443.0000000018E8A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18E8A000
Size:	4096

Details

Name:	00000000.00000003.413892917.0000000015DCC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DCC000
Size:	49152

Details

Name:	00000000.00000003.260425977.00000000152A0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	152A0000
Size:	28672

Details

Name:	00000006.00000002.536052074.00007FF5ED711000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED711000
Size:	16384

Details

Name:	00000000.00000003.412197145.000000001602D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1602D000
Size:	4096

Details

Name:	00000006.00000002.534466665.000001E968829000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E968829000
Size:	81920

Details

Name:	00000000.00000003.323791046.000000000E598000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E598000
Size:	8192

Details

Name:	00000007.00000002.306286292.00007FF5ED483000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED483000
Size:	4096

Details

Name:	00000000.00000003.258804446.000000000E5A4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5A4000
Size:	24576

Details

Name:	00000001.00000002.536382333.000001FE6DD00000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE6DD00000
Size:	4096

Details

Name:	00000000.00000002.542826031.000000001198A000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1198A000
Size:	8192

Details

Name:	00000013.00000003.427119198.000001EE749B9000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE749B9000
Size:	212992

Details

Name:	00000000.00000002.549143458.0000000017FCB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17FCB000
Size:	77824

Details

Name:	00000000.00000002.544129477.0000000014610000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	14610000
Size:	4096

Details

Name:	00000000.00000003.383204431.0000000015E11000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E11000
Size:	4096

Details

Name:	00000001.00000002.538028322.00007FF540F64000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF540F64000
Size:	8192

Details

Name:	00000000.00000003.350831613.0000000015A18000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15A18000
Size:	409600

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000007.00000002.305994681.000000991B67F000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	991B67F000
Size:	4096

Details

Name:	00000000.00000003.396489170.0000000015C6E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C6E000
Size:	12288

Details

Name:	00000000.00000002.550363638.00000000187A8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	187A8000
Size:	8192

Details

Name:	00000000.00000003.417740733.0000000018CF6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18CF6000
Size:	4096

Details

Name:	00000000.00000002.548124222.0000000017E9F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17E9F000
Size:	4096

Details

Name:	0000000F.00000002.378459362.000001B379BC0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B379BC0000
Size:	12288

Details

Name:	00000000.00000002.547312412.0000000017D41000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17D41000
Size:	4096

Details

Name:	00000000.00000003.263346505.0000000013164000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13164000
Size:	4096

Details

Name:	00000000.00000002.552098544.00000000FF546000.00000020.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute read
Base address:	FF546000
Size:	4096

Details

Name:	00000000.00000003.258542246.000000000E5A2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5A2000
Size:	8192

Details

Name:	00000000.00000003.412990148.0000000013025000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13025000
Size:	81920

Details

Name:	00000000.00000003.411496361.000000000F60B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F60B000
Size:	40960

Details

Name:	00000000.00000003.411419818.0000000015E0C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E0C000
Size:	81920

Details

Name:	00000000.00000003.462493016.0000000015D2F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D2F000
Size:	4096

Details

Name:	00000000.00000003.263029066.0000000013209000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13209000
Size:	221184

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000009.00000002.533643143.000000BC0BDFD000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	BC0BDFD000
Size:	12288

Details

Name:	00000000.00000003.460841742.0000000015D35000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D35000
Size:	4096

Details

Name:	00000000.00000003.396619463.00000000130A2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130A2000
Size:	16384

Details

Name:	00000000.00000002.542803975.00000000118D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	118D0000
Size:	4096

Details

Name:	00000000.00000003.416324979.000000001602F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1602F000
Size:	4096

Details

Name:	0000000A.00000002.533447475.0000008CD213B000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8CD213B000
Size:	20480

Details

Name:	00000000.00000002.544638949.00000000159D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	159D0000
Size:	262144

Details

Name:	0000000D.00000002.326365021.0000026003380000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26003380000
Size:	4096

Details

Name:	00000000.00000003.458847094.0000000015700000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	15700000
Size:	4096

Details

Name:	00000000.00000003.260295773.0000000013042000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13042000
Size:	4096

Details

Name:	00000000.00000003.396956030.00000000131AA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	131AA000
Size:	118784

Details

Name:	0000001A.00000002.536941068.000002170A658000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170A658000
Size:	4096

Details

Name:	00000000.00000003.397468166.000000000F5F7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5F7000
Size:	4096

Details

Name:	0000001A.00000002.537034103.000002170A66C000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170A66C000
Size:	4096

Details

Name:	00000000.00000003.263123502.0000000015C5F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C5F000
Size:	4096

Details

Name:	00000017.00000002.464742775.000000007F372000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F372000
Size:	4096

Details

Name:	00000000.00000003.350723256.0000000015AEF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15AEF000
Size:	12288

Details

Name:	00000000.00000002.541453573.000000000F2BD000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F2BD000
Size:	12288

Details

Name:	0000000B.00000002.309631015.000002A575CD0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A575CD0000
Size:	12288

Details

Name:	00000000.00000003.415035733.0000000015C2D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C2D000
Size:	4096

Details

Name:	00000000.00000003.264590104.00000000154A0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	154A0000
Size:	57344

Details

Name:	00000000.00000003.262777336.0000000015C67000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C67000
Size:	16384

Details

Name:	00000000.00000000.254469713.00000000FF670000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF670000
Size:	12288

Details

Name:	00000000.00000003.351763442.0000000015E11000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E11000
Size:	4096

Details

Name:	00000000.00000003.419358442.0000000018E7F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E7F000
Size:	28672

Details

Name:	00000013.00000002.442812505.00007FF52AC12000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52AC12000
Size:	4096

Details

Name:	00000000.00000003.397258637.0000000013166000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13166000
Size:	4096

Details

Name:	0000000B.00000002.309296253.000002A575770000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A575770000
Size:	12288

Details

Name:	00000009.00000002.533939026.000002A6003A0000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A6003A0000
Size:	4096

Details

Name:	00000000.00000003.459517980.00000000130BA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130BA000
Size:	28672

Details

Name:	00000000.00000002.548711368.0000000017F4F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17F4F000
Size:	4096

Details

Name:	00000000.00000002.546062460.0000000016E82000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	16E82000
Size:	4096

Details

Name:	00000000.00000003.396209121.0000000015CB6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CB6000
Size:	24576

Details

Name:	00000000.00000003.417154671.0000000015C94000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C94000
Size:	4096

Details

Name:	0000001A.00000002.535586228.0000020F08D60000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	20F08D60000
Size:	4096

Details

Name:	00000000.00000003.418144758.00000000161A9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	161A9000
Size:	4096

Details

Name:	00000000.00000002.546637954.0000000017C0F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C0F000
Size:	4096

Details

Name:	00000009.00000003.294124073.000002A6004C0000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2A6004C0000
Size:	4096

Details

Name:	00000005.00000002.536901695.00007FF526D1B000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF526D1B000
Size:	24576

Details

Name:	00000000.00000003.417882711.0000000018DC8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18DC8000
Size:	4096

Details

Name:	0000000A.00000002.535109979.00007DF543DA2000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF543DA2000
Size:	4096

Details

Name:	00000000.00000003.418178631.0000000018D55000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D55000
Size:	4096

Details

Name:	0000000F.00000002.379214129.00007FF55D706000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55D706000
Size:	20480

Details

Name:	00000001.00000002.539020655.00007FF5412EB000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5412EB000
Size:	12288

Details

Name:	0000000D.00000002.326747263.00007FF51BD08000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51BD08000
Size:	16384

Details

Name:	00000014.00000002.433122244.00007FF50A169000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50A169000
Size:	4096

Details

Name:	00000013.00000002.442200525.000001EE74089000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74089000
Size:	122880

Details

Name:	0000001A.00000002.541156089.00007FF539CE5000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539CE5000
Size:	16384

Details

Name:	00000000.00000003.415923202.0000000015DDB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DDB000
Size:	53248

Details

Name:	00000000.00000003.263415742.00000000131D2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	131D2000
Size:	28672

Details

Name:	00000000.00000003.411366681.0000000015E0B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E0B000
Size:	86016

Details

Name:	00000000.00000003.414335363.0000000015DDA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DDA000
Size:	57344

Details

Name:	00000000.00000003.261230471.0000000015A31000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15A31000
Size:	208896

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.415754133.0000000015D8C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D8C000
Size:	4096

Details

Name:	00000000.00000003.459577509.00000000130DA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130DA000
Size:	16384

Details

Name:	00000000.00000002.550463614.000000001887C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1887C000
Size:	8192

Details

Name:	00000000.00000002.550328185.0000000018758000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18758000
Size:	8192

Details

Name:	00000017.00000003.460626239.0000000002DEA000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2DEA000
Size:	12288

Details

Name:	00000000.00000002.545614169.0000000015D35000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15D35000
Size:	4096

Details

Name:	00000000.00000003.460871012.0000000015D46000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D46000
Size:	28672

Details

Name:	00000007.00000000.283848222.00007DF5EED50000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EED50000
Size:	12288

Details

Name:	0000000A.00000002.536303788.00007FF5428CC000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5428CC000
Size:	36864

Details

Name:	00000006.00000002.535459315.00007FF5ED4CD000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED4CD000
Size:	20480

Details

Name:	00000000.00000002.550503734.00000000188CC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	188CC000
Size:	8192

Details

Name:	00000001.00000002.536886239.000001FE6E420000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FE6E420000
Size:	65536

Details

Name:	00000000.00000002.541267206.000000000E6EE000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	E6EE000
Size:	8192

Details

Name:	00000000.00000002.544583123.0000000015900000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15900000
Size:	4096

Details

Name:	00000000.00000003.352006409.0000000015E19000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E19000
Size:	20480

Details

Name:	00000000.00000002.548937791.0000000017F9B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17F9B000
Size:	4096

Details

Name:	00000000.00000002.540138211.000000000DADF000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DADF000
Size:	4096

Details

Name:	00000000.00000002.550785852.0000000018A29000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18A29000
Size:	4096

Details

Name:	00000006.00000002.535843556.00007FF5ED6EB000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED6EB000
Size:	4096

Details

Name:	00000000.00000002.547820026.0000000017E35000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17E35000
Size:	4096

Details

Name:	00000000.00000003.260072700.00000000130A2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130A2000
Size:	16384

Details

Name:	00000000.00000002.550766615.0000000018A27000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18A27000
Size:	4096

Details

Name:	00000000.00000002.551040443.0000000018AD6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18AD6000
Size:	4096

Details

Name:	00000000.00000002.547018660.0000000017C60000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17C60000
Size:	4096

Details

Name:	00000007.00000002.306079992.00000292D7A29000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A29000
Size:	16384

Details

Name:	0000001A.00000002.537053601.000002170A670000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170A670000
Size:	4096

Details

Name:	00000000.00000002.550749028.0000000018A25000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18A25000
Size:	4096

Details

Name:	00000000.00000003.383957349.000000000F60B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F60B000
Size:	40960

Details

Name:	00000000.00000003.396724553.0000000013115000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13115000
Size:	192512

Details

Name:	00000000.00000003.396883236.00000000131CE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	131CE000
Size:	28672

Details

Name:	00000005.00000002.536767275.00007FF526CE1000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF526CE1000
Size:	16384

Details

Name:	00000000.00000003.411763684.000000000F5E9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5E9000
Size:	24576

Details

Name:	00000017.00000003.461068939.000000000059E000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	59E000
Size:	36864

Details

Name:	00000000.00000003.413344732.000000001600B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1600B000
Size:	4096

Details

Name:	00000000.00000003.458836278.0000000015580000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	15580000
Size:	4096

Details

Name:	00000000.00000003.266407070.0000000011900000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11900000
Size:	8192

Details

Name:	00000000.00000003.414991009.0000000015C23000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C23000
Size:	8192

Details

Name:	00000000.00000002.549269311.0000000018091000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18091000
Size:	4096

Details

Name:	00000000.00000003.458959237.0000000018E5D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E5D000
Size:	4096

Details

Name:	00000000.00000002.547427410.0000000017D6D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17D6D000
Size:	4096

Details

Name:	0000001A.00000002.541248415.00007FFF9D5F6000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFF9D5F6000
Size:	40960

Details

Name:	00000000.00000002.544561606.00000000158A0000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	158A0000
Size:	8192

Details

Name:	0000000F.00000002.378492233.000001B379C02000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B379C02000
Size:	65536

Details

Name:	00000000.00000002.536862665.0000000002C10000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C10000
Size:	73728

Details

Name:	00000013.00000002.441819467.0000009B2E9FE000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	9B2E9FE000
Size:	8192

Details

Name:	00000000.00000003.396357459.0000000015D43000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D43000
Size:	4096

Details

Name:	00000000.00000002.544278274.0000000015270000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15270000
Size:	4096

Details

Name:	0000000D.00000002.326387339.00007DF41B110000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF41B110000
Size:	20480

Details

Name:	00000000.00000002.533413762.0000000000640000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	640000
Size:	4096

Details

Name:	00000000.00000002.542559243.000000000F7A0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F7A0000
Size:	4096

Details

Name:	00000000.00000003.417188032.0000000015CA7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CA7000
Size:	4096

Details

Name:	00000000.00000002.549568119.0000000018240000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18240000
Size:	8192

Details

Name:	00000007.00000002.306280793.00007FF5ED0C5000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED0C5000
Size:	4096

Details

Name:	00000006.00000002.534862559.000001E968E50000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1E968E50000
Size:	4096

Details

Name:	00000000.00000003.350684658.0000000015ADF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15ADF000
Size:	16384

Details

Name:	00000000.00000003.412599191.0000000015D43000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D43000
Size:	4096

Details

Name:	0000001A.00000002.539927466.00007FF5398C8000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5398C8000
Size:	8192

Details

Name:	00000000.00000003.414263758.0000000018D11000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D11000
Size:	20480

Details

Name:	00000000.00000003.351724413.0000000015E07000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E07000
Size:	4096

Details

Name:	00000000.00000003.351000331.0000000015A13000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15A13000
Size:	8192

Details

Name:	00000013.00000002.443394085.00007FF52B3D9000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B3D9000
Size:	8192

Details

Name:	00000000.00000000.254455191.00000000FF652000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF652000
Size:	4096

Details

Name:	00000000.00000002.542480026.000000000F6A0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F6A0000
Size:	389120

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.414022334.0000000018BE4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18BE4000
Size:	4096

Details

Name:	00000000.00000003.350629432.0000000015AC3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15AC3000
Size:	4096

Details

Name:	00000001.00000002.537706139.000001FE72CF2000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE72CF2000
Size:	4096

Details

Name:	00000000.00000002.551465245.0000000018B2C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18B2C000
Size:	4096

Details

Name:	00000013.00000002.442003374.000001EE73EF0000.00000004.00000020.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1EE73EF0000
Size:	12288

Details

Name:	00000000.00000003.517365466.000000000E5A6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5A6000
Size:	24576

Details

Name:	00000000.00000003.383191195.0000000015E07000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E07000
Size:	4096

Details

Name:	00000006.00000002.535627466.00007FF5ED5D1000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED5D1000
Size:	4096

Details

Name:	00000001.00000002.538123550.00007FF54107F000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54107F000
Size:	4096

Details

Name:	0000000F.00000002.378806393.00007DF55EBD2000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55EBD2000
Size:	4096

Details

Name:	0000000A.00000002.533553211.0000008CD257D000.00000004.00000010.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8CD257D000
Size:	12288

Details

Name:	00000013.00000002.442847286.00007FF52AD28000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52AD28000
Size:	8192

Details

Name:	00000007.00000003.284111580.00000292D7A31000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A31000
Size:	45056

Details

Name:	0000001A.00000002.539672663.00007FF53952B000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53952B000
Size:	24576

Details

Name:	00000005.00000002.535935115.00007FF526982000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF526982000
Size:	4096

Details

Name:	00000000.00000002.538225275.000000000D57C000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	D57C000
Size:	16384

Details

Name:	00000000.00000002.542012400.000000000F598000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F598000
Size:	20480

Details

Name:	00000017.00000000.458721262.0000000000400000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	400000
Size:	4096

Details

Name:	00000000.00000003.396782045.0000000013159000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13159000
Size:	4096

Details

Name:	00000017.00000000.457686243.000000007F382000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F382000
Size:	4096

Details

Name:	00000000.00000002.542097769.000000000F5C8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F5C8000
Size:	94208

Details

Name:	00000000.00000003.262801025.0000000015BF1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15BF1000
Size:	4096

Details

Name:	0000000F.00000002.379251660.00007FF55D766000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55D766000
Size:	8192

Details

Name:	00000013.00000002.442253406.000001EE740C4000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE740C4000
Size:	36864

Details

Name:	00000000.00000002.543053526.0000000011B52000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	11B52000
Size:	131072

Details

Name:	00000013.00000003.423497934.000001EE74E02000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74E02000
Size:	73728

Details

Name:	00000000.00000003.349859995.000000000F666000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F666000
Size:	8192

Details

Name:	00000005.00000002.533486691.000000669007C000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	669007C000
Size:	16384

Details

Name:	00000001.00000003.259749860.000001FE72900000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FE72900000
Size:	8192

Details

Name:	00000017.00000000.458036527.000000007F382000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F382000
Size:	4096

Details

Name:	00000000.00000003.262938024.0000000013164000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13164000
Size:	4096

Details

Name:	0000001A.00000003.469215918.000002170B653000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2170B653000
Size:	49152

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	0000000A.00000002.535900690.00007FF542860000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF542860000
Size:	8192

Details

Name:	00000001.00000002.537930323.00007FF540BC7000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF540BC7000
Size:	4096

Details

Name:	00000017.00000000.457954215.00000000001F0000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F0000
Size:	16384

Details

Name:	00000000.00000003.383321801.000000000F6A0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F6A0000
Size:	389120

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000001A.00000002.540221499.00007FF5399E4000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5399E4000
Size:	4096

Details

Name:	00000000.00000002.547672607.0000000017E03000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17E03000
Size:	20480

Details

Name:	00000007.00000000.283841021.00007DF5EED40000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EED40000
Size:	4096

Details

Name:	0000000B.00000000.297053571.00007DF577030000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF577030000
Size:	4096

Details

Name:	00000005.00000002.537064698.00007FF526D9C000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF526D9C000
Size:	4096

Details

Name:	00000000.00000003.463104392.000000001315B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1315B000
Size:	4096

Details

Name:	00000014.00000000.417817766.00007FF50A1F3000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50A1F3000
Size:	16384

Details

Name:	00000001.00000002.537788940.00007DF542840000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF542840000
Size:	4096

Details

Name:	00000000.00000002.541727751.000000000F500000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F500000
Size:	221184

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.411192391.0000000015DEA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DEA000
Size:	32768

Details

Name:	00000000.00000003.350086348.0000000013168000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13168000
Size:	16384

Details

Name:	0000001A.00000003.466864976.000002170B750000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2170B750000
Size:	4096

Details

Name:	00000000.00000003.351406260.0000000015E02000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E02000
Size:	8192

Details

Name:	0000001A.00000002.540897451.00007FF539C31000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539C31000
Size:	49152

Details

Name:	00000000.00000002.542079154.000000000F5C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F5C0000
Size:	28672

Details

Name:	00000013.00000002.443219877.00007FF52B350000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B350000
Size:	8192

Details

Name:	00000014.00000002.430545570.00000015BC19F000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	15BC19F000
Size:	4096

Details

Name:	00000000.00000003.257797341.000000000DFB0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	DFB0000
Size:	65536

Details

Name:	00000000.00000003.414136943.0000000018CDD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18CDD000
Size:	4096

Details

Name:	00000000.00000002.550185626.000000001867C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1867C000
Size:	8192

Details

Name:	0000001A.00000002.538827697.000002170B669000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170B669000
Size:	24576

Details

Name:	00000000.00000003.418888805.0000000015C8A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C8A000
Size:	4096

Details

Name:	0000001A.00000002.536834357.0000020F0A2F0000.00000004.00000040.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	20F0A2F0000
Size:	4096

Details

Name:	0000000A.00000000.295304881.00007FF542953000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF542953000
Size:	16384

Details

Name:	00000005.00000002.536956818.00007FF526D29000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF526D29000
Size:	8192

Details

Name:	00000000.00000002.546327923.0000000016EC7000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	16EC7000
Size:	16384

Details

Name:	0000001A.00000002.541034066.00007FF539C7E000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539C7E000
Size:	16384

Details

Name:	00000006.00000002.534702004.000001E96886E000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1E96886E000
Size:	24576

Details

Name:	00000000.00000003.517055128.000000001237F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1237F000
Size:	4096

Details

Name:	00000001.00000002.533641806.0000004ABC3FE000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4ABC3FE000
Size:	8192

Details

Name:	00000000.00000002.545579176.0000000015D2F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15D2F000
Size:	4096

Details

Name:	00000000.00000002.541171274.000000000E5C5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E5C5000
Size:	53248

Details

Name:	0000000F.00000003.378098220.000001B379C4E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B379C4E000
Size:	135168

Details

Name:	00000000.00000003.412154483.0000000016014000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16014000
Size:	8192

Details

Name:	00000000.00000003.263239024.0000000015A0A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15A0A000
Size:	32768

Details

Name:	00000005.00000002.533968690.00000184137D0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	184137D0000
Size:	16384

Details

Name:	00000013.00000003.427024426.000001EE74E02000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74E02000
Size:	106496

Details

Name:	00000007.00000002.306215958.00007DF5EED40000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5EED40000
Size:	4096

Details

Name:	00000000.00000003.413646116.0000000013025000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13025000
Size:	81920

Details

Name:	0000000B.00000002.309179509.000000BC02D7E000.00000004.00000010.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	BC02D7E000
Size:	8192

Details

Name:	00000005.00000002.535982925.00007FF526A8A000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF526A8A000
Size:	45056

Details

Name:	00000000.00000003.350317412.000000001305B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1305B000
Size:	4096

Details

Name:	0000001A.00000002.540959712.00007FF539C62000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539C62000
Size:	12288

Details

Name:	00000000.00000003.412261374.0000000015E68000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E68000
Size:	4096

Details

Name:	00000000.00000003.460764651.0000000013209000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13209000
Size:	49152

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.541123029.000000000E5B5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E5B5000
Size:	36864

Details

Name:	0000000D.00000002.326791591.00007FF51BD14000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51BD14000
Size:	28672

Details

Name:	00000005.00000002.536639109.00007FF526CC8000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF526CC8000
Size:	16384

Details

Name:	00000000.00000003.413421135.0000000016028000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16028000
Size:	4096

Details

Name:	00000000.00000002.545433952.0000000015B6A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15B6A000
Size:	4096

Details

Name:	00000005.00000000.280849509.00007DF528212000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF528212000
Size:	4096

Details

Name:	00000000.00000002.536335940.0000000000F00000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	F00000
Size:	8192

Details

Name:	00000000.00000003.411898080.0000000015FCB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15FCB000
Size:	16384

Details

Name:	00000013.00000002.442235000.000001EE740B3000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE740B3000
Size:	57344

Details

Name:	00000000.00000003.396246170.0000000015CE5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CE5000
Size:	278528

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000017.00000000.458388969.000000007F370000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F370000
Size:	4096

Details

Name:	00000000.00000003.412816404.0000000015DFA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DFA000
Size:	155648

Details

Name:	00000000.00000003.397319355.0000000013151000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13151000
Size:	28672

Details

Name:	00000009.00000002.535681176.00007FF58FF16000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58FF16000
Size:	4096

Details

Name:	00000000.00000003.411908445.0000000015FFC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15FFC000
Size:	32768

Details

Name:	00000000.00000002.546414945.0000000016F05000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	16F05000
Size:	16384

Details

Name:	0000000F.00000002.378795096.00007DF55EBD0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55EBD0000
Size:	4096

Details

Name:	00000000.00000003.412761740.0000000015DC9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DC9000
Size:	4096

Details

Name:	00000000.00000002.548344054.0000000017ED9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17ED9000
Size:	4096

Details

Name:	00000013.00000002.442995667.00007FF52B195000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B195000
Size:	4096

Details

Name:	00000000.00000003.417829918.0000000018D5F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D5F000
Size:	4096

Details

Name:	00000000.00000003.415292152.0000000016003000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16003000
Size:	8192

Details

Name:	00000000.00000003.460239725.00000000130DA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	130DA000
Size:	16384

Details

Name:	0000000A.00000003.295801644.0000023EBC6D1000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	23EBC6D1000
Size:	8192

Details

Name:	00000000.00000003.459092267.0000000013090000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13090000
Size:	65536

Details

Name:	0000001A.00000002.540139008.00007FF53997A000.00000002.00020000.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53997A000
Size:	8192

Details

Name:	00000000.00000003.417424899.0000000018D72000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D72000
Size:	4096

Details

Name:	00000013.00000002.443100233.00007FF52B29A000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B29A000
Size:	20480

Details

Name:	00000013.00000002.442517158.000001EE74720000.00000004.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1EE74720000
Size:	8192

Details

Name:	00000007.00000002.306374452.00007FF5ED852000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5ED852000
Size:	12288

Details

Name:	00000000.00000000.254465041.00000000FF662000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF662000
Size:	4096

Details

Name:	00000009.00000000.287031834.00007DF591490000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF591490000
Size:	4096

Details

Name:	00000000.00000003.383303029.000000000F692000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F692000
Size:	20480

Details

Name:	00000006.00000002.533910708.0000008674D7F000.00000004.00000010.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8674D7F000
Size:	4096

Details

Name:	0000000D.00000002.326402045.00007DF51D240000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF51D240000
Size:	4096

Details

Name:	00000007.00000002.306131142.00000292D7A65000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A65000
Size:	12288

Details

Name:	00000000.00000003.418549030.0000000018D68000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18D68000
Size:	8192

Details

Name:	00000013.00000003.430212351.000001EE749B2000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE749B2000
Size:	118784

Details

Name:	00000000.00000003.462339771.0000000015D00000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D00000
Size:	45056

Details

Name:	00000000.00000003.411806872.0000000015DCA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DCA000
Size:	69632

Details

Name:	00000000.00000003.462906092.0000000015C6A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C6A000
Size:	49152

Details

Name:	00000005.00000002.533511453.000000669017C000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	669017C000
Size:	16384

Details

Name:	00000000.00000002.533663689.0000000000798000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	798000
Size:	8192

Details

Name:	00000007.00000003.305831832.00000292D7A45000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A45000
Size:	16384

Details

Name:	00000000.00000002.549175931.0000000017FE1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17FE1000
Size:	28672

Details

Name:	00000017.00000000.458355226.00000000001F0000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F0000
Size:	16384

Details

Name:	00000001.00000002.538504898.00007FF54119B000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54119B000
Size:	16384

Details

Name:	0000000D.00000002.325671729.0000026002D70000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26002D70000
Size:	16384

Details

Name:	00000000.00000002.541390954.000000000F17D000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F17D000
Size:	12288

Details

Name:	00000000.00000002.545082547.0000000015AED000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	15AED000
Size:	4096

Details

Name:	00000000.00000002.542319388.000000000F617000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F617000
Size:	36864

Details

Name:	00000001.00000002.538076792.00007FF540FA5000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF540FA5000
Size:	20480

Details

Name:	00000013.00000002.442954749.00007FF52B0E8000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B0E8000
Size:	4096

Details

Name:	00000000.00000003.263394705.00000000131BE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	131BE000
Size:	36864

Details

Name:	00000000.00000003.416995005.0000000015E2B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E2B000
Size:	4096

Details

Name:	00000000.00000003.411820981.0000000015DDC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DDC000
Size:	49152

Details

Name:	00000017.00000003.463704914.000000000055F000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	55F000
Size:	159744

Details

Name:	00000000.00000003.412163590.0000000016019000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	16019000
Size:	8192

Details

Name:	0000001A.00000002.533867509.00000059FB0FD000.00000004.00000010.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	59FB0FD000
Size:	12288

Details

Name:	00000009.00000002.535842708.00007FF58FF45000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58FF45000
Size:	8192

Details

Name:	00000000.00000002.548800515.0000000017F71000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17F71000
Size:	4096

Details

Name:	00000000.00000003.351257059.0000000015D86000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15D86000
Size:	4096

Details

Name:	00000013.00000002.442223573.000001EE740AA000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE740AA000
Size:	32768

Details

Name:	0000000F.00000002.379050607.00007FF55D5FC000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55D5FC000
Size:	12288

Details

Name:	00000000.00000002.548550292.0000000017F1B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17F1B000
Size:	20480

Details

Name:	00000000.00000002.543716015.00000000130C3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	130C3000
Size:	12288

Details

Name:	00000013.00000003.424642920.000001EE749B2000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE749B2000
Size:	32768

Details

Name:	00000000.00000002.548283708.0000000017EC9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17EC9000
Size:	28672

Details

Name:	00000000.00000003.396237465.0000000015CE2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CE2000
Size:	4096

Details

Name:	0000000B.00000003.309005657.000002A57584C000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2A57584C000
Size:	20480

Details

Name:	00000000.00000003.414646426.000000000F5B1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	F5B1000
Size:	53248

Details

Name:	00000000.00000003.459004553.0000000018E7A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E7A000
Size:	4096

Details

Name:	00000017.00000000.458744732.000000007F372000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F372000
Size:	4096

Details

Name:	00000013.00000002.442554736.000001EE7492D000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE7492D000
Size:	4096

Details

Name:	00000000.00000003.419240375.0000000018E05000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E05000
Size:	4096

Details

Name:	00000013.00000002.442922193.00007FF52B00A000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52B00A000
Size:	12288

Details

Name:	00000000.00000003.458804670.00000000152D0000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	152D0000
Size:	4096

Details

Name:	0000000B.00000002.309359917.000002A575813000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A575813000
Size:	90112

Details

Name:	0000001A.00000002.537267505.000002170A6C0000.00000004.00000001.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2170A6C0000
Size:	4096

Details

Name:	00000000.00000003.417550327.0000000018E70000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18E70000
Size:	4096

Details

Name:	00000000.00000002.542652027.0000000011540000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	11540000
Size:	4096

Details

Name:	0000001A.00000002.538373025.000002170B3F2000.00000004.00000040.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2170B3F2000
Size:	4096

Details

Name:	0000000B.00000002.309656336.000002A575E50000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A575E50000
Size:	4096

Details

Name:	00000001.00000002.538106214.00007FF540FE9000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF540FE9000
Size:	16384

Details

Name:	00000000.00000003.396606404.0000000013090000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	13090000
Size:	65536

Details

Name:	00000000.00000003.351372987.0000000015DF9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15DF9000
Size:	4096

Details

Name:	00000005.00000002.536804238.00007FF526CE9000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF526CE9000
Size:	24576

Details

Name:	00000013.00000003.421977494.000001EE74E19000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1EE74E19000
Size:	90112

Details

Name:	00000017.00000002.464250706.0000000002664000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2664000
Size:	8192

Details

Name:	00000017.00000003.460604682.0000000002DE9000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2DE9000
Size:	20480

Details

Name:	00000009.00000002.533593529.000000BC0BBFE000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	BC0BBFE000
Size:	8192

Details

Name:	00000000.00000003.517215120.000000000E5B5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	E5B5000
Size:	40960

Details

Name:	00000017.00000000.458043468.000000007F390000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F390000
Size:	12288

Details

Name:	00000000.00000002.543306954.0000000012E40000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12E40000
Size:	86016

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.412940352.0000000015E04000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15E04000
Size:	114688

Details

Name:	00000000.00000002.547902518.0000000017E59000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17E59000
Size:	4096

Details

Name:	00000000.00000003.264605397.00000000154A0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	154A0000
Size:	40960

Details

Name:	0000000A.00000002.534622655.0000023EBC8E0000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	23EBC8E0000
Size:	65536

Details

Name:	00000007.00000003.305846109.00000292D7A2D000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	292D7A2D000
Size:	16384

Details

Name:	00000000.00000003.463115232.000000001315D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1315D000
Size:	24576

Details

Name:	00000000.00000003.260924047.00000000152B0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	152B0000
Size:	45056

Details

Name:	00000017.00000003.463745384.0000000000587000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	587000
Size:	65536

Details

Name:	00000005.00000002.534710688.0000018413902000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18413902000
Size:	32768

Details

Name:	0000001A.00000002.533625549.00000059FABFE000.00000004.00000010.sdmp
TargetID:	26
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	59FABFE000
Size:	8192

Details

Name:	00000000.00000003.396201321.0000000015CB0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15CB0000
Size:	4096

Details

Name:	00000000.00000003.263104018.0000000015C05000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	15C05000
Size:	4096

Details

Name:	00000000.00000002.536581834.0000000000FA0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FA0000
Size:	8192

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

IOC Report

Files

Processes

URLs

IPs

Registry

Memdumps