Automated Malware Analysis IOC Report for

Details

Name:	00000004.00000003.384715006.0000000004D08000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4D08000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000004.00000003.384736168.0000000004D08000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4D08000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.406739711.0000000003A0B000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3A0B000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000003.422167357.0000000005BE8000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5BE8000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000002.817764421.00000000053D0000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	53D0000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000003.422210167.0000000005BE8000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5BE8000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000002.817386094.0000000003B88000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3B88000
Size:	12288

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000004.00000003.384766774.0000000004D08000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4D08000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.408040726.000000000564B000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	564B000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000004.00000002.818223008.0000000004D08000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4D08000
Size:	12288

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000004.00000003.430237657.0000000004A8D000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4A8D000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000004.00000003.384647855.0000000004D08000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4D08000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000003.468655697.000000000596D000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	596D000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.382659378.0000000003B88000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3B88000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000003.422225107.0000000005BE8000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5BE8000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.429892186.000000000554D000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	554D000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000003.490533092.000000000586F000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	586F000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.451681625.000000000544F000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	544F000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000004.00000003.384814673.0000000004D08000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4D08000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000004.00000003.384800392.0000000004D08000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4D08000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000004.00000003.384675435.0000000004D08000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4D08000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.450433665.000000000380F000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	380F000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000003.422097574.0000000005BE8000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5BE8000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000002.818314973.0000000005BE8000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5BE8000
Size:	8192

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000004.00000003.408375488.0000000004B8B000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4B8B000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000003.422123912.0000000005BE8000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5BE8000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000003.422235927.0000000005BE8000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5BE8000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000003.422193976.0000000005BE8000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5BE8000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.383279330.00000000057C8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	57C8000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000003.446712897.0000000005A6B000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5A6B000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000004.00000003.384784651.0000000004D08000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4D08000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000002.817795842.00000000057C8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	57C8000
Size:	8192

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000003.422146800.0000000005BE8000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5BE8000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000003.422390490.0000000005BE8000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5BE8000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000004.00000003.452057648.000000000498F000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	498F000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.428860531.000000000390D000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	390D000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000004.00000003.384947330.0000000004D08000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4D08000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000003.468265015.00000000036A2000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A2000
Size:	106496

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000002.817937918.0000000005C3C000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5C3C000
Size:	4096

Details

Name:	00000004.00000003.522873717.00000000004AB000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4AB000
Size:	24576

Details

Name:	0000000D.00000002.459897294.00007FF595E3A000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595E3A000
Size:	8192

Details

Name:	00000000.00000002.817424033.0000000003E9D000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3E9D000
Size:	12288

Details

Name:	00000005.00000003.565423201.00000000036F6000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36F6000
Size:	16384

Details

Name:	00000005.00000003.773645876.00000000057F1000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	57F1000
Size:	462848

Details

Name:	00000001.00000003.303583923.000002255D84B000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2255D84B000
Size:	4096

Details

Name:	00000009.00000002.415332339.00007FF514166000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF514166000
Size:	16384

Details

Name:	00000003.00000003.684563006.000000000333F000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	333F000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000002.815034393.0000000000190000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	190000
Size:	16384

Details

Name:	00000003.00000003.566802660.000000000332E000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	332E000
Size:	4096

Details

Name:	00000004.00000002.818354348.000000000501F000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	501F000
Size:	4096

Details

Name:	0000000D.00000003.458560372.000001A42C25C000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42C25C000
Size:	4096

Details

Name:	00000004.00000003.708448173.00000000004A4000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A4000
Size:	24576

Details

Name:	00000005.00000003.777680200.00000000036FE000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36FE000
Size:	28672

Details

Name:	00000004.00000003.430048939.00000000004F6000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F6000
Size:	139264

Details

Name:	00000003.00000002.815826042.0000000002ABB000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2ABB000
Size:	36864

Details

Name:	00000003.00000002.818497557.0000000010005000.00000040.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute and read and write
Base address:	10005000
Size:	40960

Details

Name:	00000001.00000002.304593857.00007FF4F5A0B000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5A0B000
Size:	24576

Details

Name:	00000005.00000003.512042997.00000000036A2000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A2000
Size:	8192

Details

Name:	00000005.00000003.468326543.0000000003687000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3687000
Size:	106496

Details

Name:	00000005.00000003.588950034.0000000005BEB000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5BEB000
Size:	4096

Details

Name:	00000003.00000003.523348910.00000000057CA000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	57CA000
Size:	4096

Details

Name:	00000005.00000003.367030772.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	0000000D.00000002.459709893.00007FF595CD7000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595CD7000
Size:	4096

Details

Name:	00000013.00000003.546121699.000002489475F000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2489475F000
Size:	8192

Details

Name:	00000005.00000003.468242315.00000000036EE000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36EE000
Size:	24576

Details

Name:	00000004.00000002.817756326.0000000004649000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4649000
Size:	57344

Details

Name:	00000003.00000003.733593035.0000000005CC9000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5CC9000
Size:	4096

Details

Name:	00000005.00000002.816299511.00000000035ED000.00000004.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	35ED000
Size:	8192

Details

Name:	00000000.00000003.773699963.0000000001238000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1238000
Size:	90112

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000002.459862096.00007FF595DF7000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595DF7000
Size:	49152

Details

Name:	0000000D.00000002.459242766.000001A42C6D0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A42C6D0000
Size:	12288

Details

Name:	00000004.00000003.546416822.00000000004F6000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F6000
Size:	151552

Details

Name:	0000000D.00000002.459320693.000001A42CB12000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB12000
Size:	4096

Details

Name:	00000004.00000003.568425625.000000000051D000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51D000
Size:	45056

Details

Name:	00000003.00000002.815619493.0000000002A4C000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A4C000
Size:	8192

Details

Name:	00000013.00000002.816798900.00007FF56553E000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56553E000
Size:	4096

Details

Name:	00000000.00000002.817205925.00000000036A0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	36A0000
Size:	4096

Details

Name:	00000005.00000002.815224156.0000000002C75000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C75000
Size:	16384

Details

Name:	00000004.00000003.708667051.0000000000541000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	541000
Size:	16384

Details

Name:	00000004.00000003.353989564.0000000004720000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4720000
Size:	4096

Details

Name:	00000005.00000003.538936651.00000000036F4000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36F4000
Size:	16384

Details

Name:	00000004.00000002.817269099.000000000284B000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	284B000
Size:	12288

Details

Name:	00000003.00000003.588682276.0000000005C47000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C47000
Size:	16384

Details

Name:	00000013.00000002.816178748.00007FF564D4B000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF564D4B000
Size:	4096

Details

Name:	00000004.00000003.497453200.0000000000530000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	530000
Size:	28672

Details

Name:	00000003.00000003.778472565.00000000057CB000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	57CB000
Size:	4096

Details

Name:	00000004.00000002.816984344.00000000027D3000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27D3000
Size:	8192

Details

Name:	00000005.00000003.543856036.0000000005BEA000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5BEA000
Size:	4096

Details

Name:	0000000D.00000002.458864273.000001A42C213000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42C213000
Size:	86016

Details

Name:	00000001.00000000.292264896.00007DF503822000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF503822000
Size:	4096

Details

Name:	00000005.00000003.379856700.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000003.00000003.544882493.000000000332E000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	332E000
Size:	4096

Details

Name:	00000005.00000003.512122189.0000000003672000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3672000
Size:	4096

Details

Name:	00000000.00000002.816761334.0000000001860000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1860000
Size:	323584

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	00000009.00000002.415511610.00007FF514333000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF514333000
Size:	24576

Details

Name:	00000001.00000002.305240213.00007FF4F5BA1000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5BA1000
Size:	32768

Details

Name:	00000003.00000003.566839119.0000000003356000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3356000
Size:	81920

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000000.293164787.000000007F610000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F610000
Size:	4096

Details

Name:	00000013.00000002.816633249.00007FF5654F3000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5654F3000
Size:	8192

Details

Name:	00000001.00000002.305215228.00007FF4F5B27000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5B27000
Size:	8192

Details

Name:	00000005.00000003.706356962.00000000036A2000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A2000
Size:	8192

Details

Name:	00000000.00000002.815189355.0000000000F00000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	F00000
Size:	8192

Details

Name:	00000005.00000003.384515001.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000000.00000003.680086718.0000000001256000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1256000
Size:	4096

Details

Name:	00000004.00000003.771267149.0000000000533000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	533000
Size:	4096

Details

Name:	00000003.00000003.706903553.00000000033C1000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33C1000
Size:	4096

Details

Name:	00000009.00000000.402456975.00007FF5143E1000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5143E1000
Size:	16384

Details

Name:	00000005.00000002.815294519.0000000002C87000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C87000
Size:	12288

Details

Name:	0000000D.00000002.459434087.00007DF5A3B20000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A3B20000
Size:	4096

Details

Name:	00000003.00000003.707061268.0000000003390000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3390000
Size:	135168

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000002.817624662.0000000004F51000.00000020.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	4F51000
Size:	45056

Details

Name:	00000004.00000003.430111874.0000000000489000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	489000
Size:	57344

Details

Name:	00000004.00000002.818374644.0000000005020000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5020000
Size:	4096

Details

Name:	00000003.00000003.544850865.00000000033B8000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B8000
Size:	28672

Details

Name:	00000003.00000003.588729912.000000000332E000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	332E000
Size:	4096

Details

Name:	00000004.00000003.617787706.0000000004911000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4911000
Size:	475136

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000003.662579977.0000000000535000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	535000
Size:	28672

Details

Name:	0000000D.00000003.458540012.000001A42C264000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42C264000
Size:	4096

Details

Name:	0000000E.00000002.446093884.00007DF547532000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF547532000
Size:	4096

Details

Name:	00000004.00000002.818236367.0000000004D0D000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4D0D000
Size:	12288

Details

Name:	00000004.00000000.293560288.000000007FDF0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FDF0000
Size:	12288

Details

Name:	00000000.00000003.796363482.000000000125D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	125D000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000013.00000002.816536116.00007FF5654E6000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5654E6000
Size:	4096

Details

Name:	00000003.00000003.706546735.0000000005C7D000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C7D000
Size:	4096

Details

Name:	00000003.00000003.684317596.000000000333A000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	333A000
Size:	86016

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000002.817612780.0000000004F50000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	4F50000
Size:	4096

Details

Name:	00000005.00000003.632841767.00000000036A5000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A5000
Size:	94208

Details

Name:	00000005.00000003.635647068.00000000036FA000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36FA000
Size:	16384

Details

Name:	00000000.00000003.588376289.000000000124F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	124F000
Size:	8192

Details

Name:	00000005.00000003.512005629.0000000005FAB000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5FAB000
Size:	32768

Details

Name:	00000003.00000003.709189109.00000000033C1000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33C1000
Size:	4096

Details

Name:	00000003.00000002.817847039.000000000599B000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	599B000
Size:	20480

Details

Name:	00000013.00000002.816507531.00007FF56544C000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56544C000
Size:	16384

Details

Name:	00000007.00000002.384317290.00007DF48F890000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF48F890000
Size:	20480

Details

Name:	00000004.00000003.406569834.00000000004B1000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B1000
Size:	278528

Details

Name:	0000000D.00000002.459525947.00007FF59554B000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59554B000
Size:	16384

Details

Name:	00000009.00000002.415001561.000002205DB00000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2205DB00000
Size:	4096

Details

Name:	00000003.00000002.816085477.00000000030F0000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	30F0000
Size:	16384

Details

Name:	00000004.00000003.451769231.00000000004A4000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A4000
Size:	24576

Details

Name:	00000005.00000003.512155876.0000000003676000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3676000
Size:	24576

Details

Name:	00000003.00000003.588744955.000000000333A000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	333A000
Size:	86016

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000003.376876217.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	0000000D.00000002.459841960.00007FF595DE3000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595DE3000
Size:	12288

Details

Name:	0000000D.00000003.439831886.000001A42CB97000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB97000
Size:	65536

Details

Name:	00000003.00000003.706937837.00000000033CE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33CE000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000002.817205789.0000000003390000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	3390000
Size:	155648

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.588344311.00000000011E3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11E3000
Size:	8192

Details

Name:	00000003.00000002.815056089.0000000002905000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2905000
Size:	20480

Details

Name:	00000005.00000003.543661027.0000000005FA9000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5FA9000
Size:	32768

Details

Name:	00000004.00000003.546601327.00000000004A4000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A4000
Size:	24576

Details

Name:	00000004.00000003.662565976.000000000052C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	52C000
Size:	24576

Details

Name:	00000003.00000003.591577516.000000000332E000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	332E000
Size:	4096

Details

Name:	00000005.00000003.635697716.00000000036F5000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36F5000
Size:	20480

Details

Name:	00000003.00000002.815571062.0000000002A2D000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A2D000
Size:	32768

Details

Name:	00000005.00000002.816019678.0000000003425000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	3425000
Size:	16384

Details

Name:	0000000D.00000002.459063283.000001A42C2BC000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42C2BC000
Size:	24576

Details

Name:	00000001.00000002.304437681.000002255D886000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2255D886000
Size:	32768

Details

Name:	00000003.00000003.406583246.0000000003332000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3332000
Size:	28672

Details

Name:	0000000D.00000003.438616416.000001A42CBD8000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CBD8000
Size:	147456

Details

Name:	00000004.00000003.497567954.000000000049F000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	49F000
Size:	8192

Details

Name:	00000004.00000003.799788538.0000000000535000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	535000
Size:	53248

Details

Name:	00000003.00000003.639454608.0000000003350000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3350000
Size:	4096

Details

Name:	00000003.00000002.816537145.00000000032CE000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	32CE000
Size:	8192

Details

Name:	00000013.00000002.816026036.00007DF573240000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF573240000
Size:	4096

Details

Name:	00000009.00000002.415116140.000002205DC74000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2205DC74000
Size:	28672

Details

Name:	0000000D.00000002.459743863.00007FF595D6F000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595D6F000
Size:	4096

Details

Name:	00000005.00000003.660630008.00000000057F1000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	57F1000
Size:	73728

Details

Name:	0000000D.00000002.458849101.000001A42C200000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42C200000
Size:	73728

Details

Name:	00000003.00000003.475136980.0000000005C21000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C21000
Size:	851968

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000002.815253651.0000000002C7B000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C7B000
Size:	12288

Details

Name:	00000004.00000002.816971331.00000000027CF000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27CF000
Size:	8192

Details

Name:	0000000D.00000003.433789840.000001A42C9E0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42C9E0000
Size:	4096

Details

Name:	00000004.00000003.771175654.00000000004A4000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A4000
Size:	24576

Details

Name:	00000000.00000003.704487906.00000000042A6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	42A6000
Size:	401408

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000003.706383313.00000000036A5000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A5000
Size:	94208

Details

Name:	0000000E.00000002.446003139.00000241317F5000.00000004.00000040.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	241317F5000
Size:	8192

Details

Name:	00000003.00000003.588864465.0000000003390000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3390000
Size:	163840

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000003.543460480.00000000057F1000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	57F1000
Size:	471040

Details

Name:	00000005.00000003.799458438.0000000003676000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3676000
Size:	24576

Details

Name:	00000013.00000002.815218427.00000248945E0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	248945E0000
Size:	4096

Details

Name:	00000009.00000002.415161710.000002205DD08000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2205DD08000
Size:	24576

Details

Name:	00000004.00000003.429959613.0000000000524000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	524000
Size:	16384

Details

Name:	00000001.00000002.305065971.00007FF4F5AE7000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5AE7000
Size:	49152

Details

Name:	00000005.00000003.777435490.0000000006032000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6032000
Size:	73728

Details

Name:	00000009.00000003.414679518.000002205DC4F000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2205DC4F000
Size:	8192

Details

Name:	00000004.00000003.590376403.000000000053E000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	53E000
Size:	32768

Details

Name:	00000004.00000002.816536087.0000000000750000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	750000
Size:	36864

Details

Name:	00000005.00000003.683583375.0000000005BEB000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5BEB000
Size:	4096

Details

Name:	00000003.00000003.639345009.00000000033C3000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33C3000
Size:	16384

Details

Name:	00000004.00000002.816824543.00000000026F7000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26F7000
Size:	4096

Details

Name:	00000005.00000003.657210050.0000000003681000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3681000
Size:	131072

Details

Name:	00000004.00000003.473602812.00000000004A0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A0000
Size:	4096

Details

Name:	0000000E.00000002.446170588.00007FF5397D6000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5397D6000
Size:	16384

Details

Name:	0000000E.00000002.445868655.000000E6DB6FF000.00000004.00000010.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	E6DB6FF000
Size:	4096

Details

Name:	00000005.00000003.490379404.00000000036C7000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36C7000
Size:	126976

Details

Name:	00000004.00000002.817109666.000000000280A000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	280A000
Size:	12288

Details

Name:	00000003.00000003.521508983.00000000033C5000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33C5000
Size:	4096

Details

Name:	00000003.00000003.566875838.0000000003390000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3390000
Size:	163840

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000009.00000002.415458485.00007FF5142F3000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5142F3000
Size:	28672

Details

Name:	00000003.00000002.817337605.00000000033CE000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	33CE000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000002.818822977.000000007FCD0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FCD0000
Size:	20480

Details

Name:	00000013.00000002.815857356.0000024894EC0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24894EC0000
Size:	4096

Details

Name:	00000005.00000003.370210559.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	0000000D.00000002.459578532.00007FF595A94000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595A94000
Size:	8192

Details

Name:	00000003.00000003.706925092.00000000033C3000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33C3000
Size:	16384

Details

Name:	00000005.00000003.370483494.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000003.00000003.544857071.00000000033C3000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33C3000
Size:	4096

Details

Name:	00000009.00000002.415430068.00007FF5142D7000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5142D7000
Size:	4096

Details

Name:	00000003.00000003.591504585.00000000033BA000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33BA000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.451499231.0000000003390000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3390000
Size:	131072

Details

Name:	00000003.00000002.817305637.00000000033BD000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	33BD000
Size:	8192

Details

Name:	00000004.00000003.593605128.00000000004A4000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A4000
Size:	24576

Details

Name:	0000000D.00000000.431950376.00007FF595EC1000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595EC1000
Size:	16384

Details

Name:	00000005.00000003.370613688.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	0000000D.00000002.459877649.00007FF595E13000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595E13000
Size:	24576

Details

Name:	00000003.00000003.354137363.0000000004EB0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4EB0000
Size:	4096

Details

Name:	00000004.00000003.497613378.0000000000489000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	489000
Size:	57344

Details

Name:	00000004.00000003.384861335.0000000005121000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5121000
Size:	73728

Details

Name:	00000013.00000000.545505462.00007DF573252000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF573252000
Size:	4096

Details

Name:	00000005.00000003.728610840.0000000005BEB000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5BEB000
Size:	4096

Details

Name:	00000004.00000003.475580729.0000000005130000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5130000
Size:	913408

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000003.593614325.00000000004AB000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4AB000
Size:	24576

Details

Name:	00000005.00000003.364920633.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000004.00000003.771257092.0000000000530000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	530000
Size:	8192

Details

Name:	00000004.00000003.706642291.00000000004AB000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4AB000
Size:	24576

Details

Name:	00000003.00000003.800052906.00000000057CA000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	57CA000
Size:	4096

Details

Name:	00000000.00000003.382731466.0000000003B8B000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3B8B000
Size:	4096

Details

Name:	00000000.00000003.588249396.0000000001201000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1201000
Size:	315392

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000013.00000002.816265660.00007FF564E5D000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF564E5D000
Size:	4096

Details

Name:	00000005.00000002.818251523.00000000057B8000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	57B8000
Size:	4096

Details

Name:	00000004.00000003.662846766.00000000004F6000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F6000
Size:	143360

Details

Name:	00000013.00000002.817023583.00007FF5655DA000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5655DA000
Size:	4096

Details

Name:	0000000D.00000003.436891444.000001A42CB7E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB7E000
Size:	61440

Details

Name:	00000003.00000003.733666182.00000000057CA000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	57CA000
Size:	4096

Details

Name:	0000000E.00000002.446208748.00007FF539813000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539813000
Size:	24576

Details

Name:	00000009.00000002.415517444.00007FF51433E000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51433E000
Size:	4096

Details

Name:	0000000E.00000002.446089345.00007DF547530000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF547530000
Size:	4096

Details

Name:	00000003.00000003.684708382.00000000033C1000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33C1000
Size:	4096

Details

Name:	00000004.00000003.770817515.0000000005121000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5121000
Size:	40960

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000007.00000002.384262171.000001FC1F708000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FC1F708000
Size:	24576

Details

Name:	0000000D.00000002.459773102.00007FF595DA3000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595DA3000
Size:	16384

Details

Name:	00000000.00000003.773888377.0000000001254000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1254000
Size:	4096

Details

Name:	00000007.00000002.384695278.00007FF583C69000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF583C69000
Size:	8192

Details

Name:	00000004.00000002.818549229.0000000005220000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5220000
Size:	12288

Details

Name:	0000000D.00000002.459809676.00007FF595DD3000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595DD3000
Size:	28672

Details

Name:	00000000.00000003.382527757.0000000001251000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1251000
Size:	118784

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000E.00000002.446100395.00007DF547540000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF547540000
Size:	12288

Details

Name:	00000007.00000000.367839089.00007DF5919D0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5919D0000
Size:	4096

Details

Name:	00000005.00000003.514859229.0000000005FB1000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5FB1000
Size:	937984

Details

Name:	00000000.00000002.815692454.00000000011D8000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	11D8000
Size:	40960

Details

Name:	00000013.00000002.816663081.00007FF5654F6000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5654F6000
Size:	16384

Details

Name:	00000009.00000002.414938017.000000FF5A9DF000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	FF5A9DF000
Size:	4096

Details

Name:	00000000.00000002.817055264.0000000002FFE000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2FFE000
Size:	8192

Details

Name:	00000004.00000003.384829850.000000000052C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	52C000
Size:	16384

Details

Name:	00000004.00000002.818266361.0000000004DDB000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4DDB000
Size:	20480

Details

Name:	00000004.00000002.814838713.00000000000F0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	F0000
Size:	102400

Details

Name:	00000003.00000002.815531839.0000000002A1F000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A1F000
Size:	24576

Details

Name:	0000000D.00000002.459768238.00007FF595D9E000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595D9E000
Size:	4096

Details

Name:	00000005.00000003.389133138.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	0000000D.00000002.459632690.00007FF595C11000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595C11000
Size:	4096

Details

Name:	00000004.00000003.708566003.0000000000536000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	536000
Size:	32768

Details

Name:	00000004.00000003.590414702.0000000000547000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	547000
Size:	4096

Details

Name:	0000000E.00000003.444839135.0000024131681000.00000004.00000001.sdmp
TargetID:	14
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24131681000
Size:	122880

Details

Name:	00000009.00000002.415560242.00007FF5143B2000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5143B2000
Size:	12288

Details

Name:	00000000.00000002.815355410.0000000000FD0000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	FD0000
Size:	16384

Details

Name:	00000004.00000003.662778257.0000000000536000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	536000
Size:	24576

Details

Name:	0000000D.00000003.440519709.000001A42CB7E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB7E000
Size:	8192

Details

Name:	00000003.00000003.733570327.0000000005D21000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D21000
Size:	73728

Details

Name:	00000005.00000003.800955078.0000000005BEA000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5BEA000
Size:	4096

Details

Name:	00000000.00000003.495599425.0000000001265000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1265000
Size:	4096

Details

Name:	0000000D.00000002.459790071.00007FF595DC9000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595DC9000
Size:	8192

Details

Name:	00000003.00000003.521598089.000000000333F000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	333F000
Size:	69632

Details

Name:	00000003.00000003.473209256.0000000003355000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3355000
Size:	86016

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	00000003.00000003.707124959.00000000033BA000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33BA000
Size:	4096

Details

Name:	00000013.00000002.815667404.0000024894810000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24894810000
Size:	16384

Details

Name:	0000000D.00000003.445327146.000001A42D002000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42D002000
Size:	159744

Details

Name:	0000000D.00000003.435639625.000001A42D021000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42D021000
Size:	131072

Details

Name:	00000007.00000002.384097967.000001FC1F600000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FC1F600000
Size:	73728

Details

Name:	00000009.00000002.414932083.000000FF5A95C000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	FF5A95C000
Size:	16384

Details

Name:	00000005.00000003.444010645.0000000003670000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3670000
Size:	12288

Details

Name:	00000004.00000002.818034236.00000000047F0000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	47F0000
Size:	4096

Details

Name:	00000003.00000002.815433538.0000000002A09000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A09000
Size:	32768

Details

Name:	00000003.00000003.707033595.000000000336B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	336B000
Size:	147456

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.706785779.000000000336B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	336B000
Size:	147456

Details

Name:	0000000D.00000002.459130983.000001A42C2DA000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42C2DA000
Size:	32768

Details

Name:	00000007.00000002.383957786.0000003BEAF1B000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3BEAF1B000
Size:	20480

Details

Name:	00000003.00000003.592744386.0000000003390000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3390000
Size:	172032

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000013.00000002.815010828.00000248945A0000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	248945A0000
Size:	4096

Details

Name:	00000007.00000002.384829379.00007FF583CD7000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF583CD7000
Size:	8192

Details

Name:	00000013.00000002.816962939.00007FF5655CA000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5655CA000
Size:	12288

Details

Name:	00000003.00000003.706897118.00000000033BE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33BE000
Size:	4096

Details

Name:	00000005.00000003.422243541.0000000005BEC000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5BEC000
Size:	4096

Details

Name:	00000009.00000002.415356457.00007FF5141AD000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5141AD000
Size:	4096

Details

Name:	00000004.00000003.473573570.0000000000518000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	518000
Size:	12288

Details

Name:	00000001.00000002.304506360.000002255E002000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2255E002000
Size:	4096

Details

Name:	00000000.00000003.473761092.00000000042A1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	42A1000
Size:	610304

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000009.00000003.414695022.000002205DC4B000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2205DC4B000
Size:	4096

Details

Name:	00000003.00000003.521609616.0000000003354000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3354000
Size:	4096

Details

Name:	00000001.00000000.292315630.00007FF4F5BB1000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5BB1000
Size:	16384

Details

Name:	00000005.00000003.516962013.0000000003670000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3670000
Size:	12288

Details

Name:	00000004.00000003.593486788.000000000051C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C000
Size:	49152

Details

Name:	00000000.00000003.495514610.0000000001201000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1201000
Size:	290816

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000003.593518731.000000000052C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	52C000
Size:	24576

Details

Name:	00000005.00000002.816651250.0000000003676000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	3676000
Size:	24576

Details

Name:	00000004.00000003.771275327.0000000000535000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	535000
Size:	53248

Details

Name:	00000004.00000003.799692089.0000000005244000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5244000
Size:	12288

Details

Name:	00000007.00000002.384349747.00007DF5919C2000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5919C2000
Size:	4096

Details

Name:	00000005.00000002.818407056.0000000005CBC000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5CBC000
Size:	16384

Details

Name:	00000005.00000003.705205428.0000000003714000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3714000
Size:	4096

Details

Name:	00000004.00000003.380851036.0000000000680000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	680000
Size:	4096

Details

Name:	00000003.00000003.473185384.000000000333F000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	333F000
Size:	65536

Details

Name:	00000000.00000002.817525343.00000000042A0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	42A0000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000003.771183946.00000000004AB000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4AB000
Size:	24576

Details

Name:	0000000D.00000002.458797288.000001A42C160000.00000004.00000040.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1A42C160000
Size:	4096

Details

Name:	00000004.00000003.406528994.0000000000520000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	520000
Size:	4096

Details

Name:	0000000D.00000003.445534084.000001A42CB8A000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB8A000
Size:	425984

Details

Name:	00000004.00000003.568342429.0000000000532000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	532000
Size:	4096

Details

Name:	00000005.00000002.818629308.0000000005FA8000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5FA8000
Size:	8192

Details

Name:	00000007.00000002.384158467.000001FC1F613000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FC1F613000
Size:	77824

Details

Name:	00000003.00000003.639475987.0000000003353000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3353000
Size:	4096

Details

Name:	00000009.00000002.414974513.000000FF5B1FF000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	FF5B1FF000
Size:	4096

Details

Name:	0000000D.00000003.435632174.000001A42D002000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42D002000
Size:	4096

Details

Name:	00000000.00000000.291479049.000000007F290000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F290000
Size:	12288

Details

Name:	00000005.00000003.706469837.0000000003670000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3670000
Size:	12288

Details

Name:	00000004.00000002.815084926.00000000001A0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	4096

Details

Name:	00000000.00000003.495568757.000000000124F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	124F000
Size:	8192

Details

Name:	00000003.00000003.708997601.0000000005C54000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C54000
Size:	520192

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000003.732907975.0000000004911000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4911000
Size:	466944

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000003.371551973.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000005.00000003.444024263.000000000367D000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	367D000
Size:	16384

Details

Name:	00000003.00000002.814939099.00000000028A7000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28A7000
Size:	4096

Details

Name:	00000005.00000002.815662164.0000000002D38000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D38000
Size:	16384

Details

Name:	00000004.00000003.451785286.00000000004AB000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4AB000
Size:	24576

Details

Name:	00000004.00000003.771058127.0000000000545000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	545000
Size:	12288

Details

Name:	00000004.00000002.817256012.0000000002846000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2846000
Size:	16384

Details

Name:	00000005.00000003.490369475.00000000036BD000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36BD000
Size:	36864

Details

Name:	00000005.00000002.817290164.0000000003AA0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3AA0000
Size:	4096

Details

Name:	00000007.00000002.383983448.0000003BEB47B000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3BEB47B000
Size:	20480

Details

Name:	00000005.00000002.818792825.00000000060A0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	60A0000
Size:	4096

Details

Name:	00000000.00000003.703866892.00000000042A6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	42A6000
Size:	933888

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000003.365657181.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	0000000D.00000002.459446355.00007DF5A3B30000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A3B30000
Size:	4096

Details

Name:	00000003.00000003.566941156.0000000003356000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3356000
Size:	81920

Details

Name:	00000003.00000003.451514140.000000000332E000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	332E000
Size:	4096

Details

Name:	00000001.00000002.304575857.00007FF4F597D000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F597D000
Size:	4096

Details

Name:	00000005.00000003.444016182.0000000003676000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3676000
Size:	24576

Details

Name:	00000013.00000003.559262266.0000024895230000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24895230000
Size:	4096

Details

Name:	00000009.00000002.415044018.000002205DC29000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2205DC29000
Size:	73728

Details

Name:	00000003.00000003.684547048.00000000033C3000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33C3000
Size:	16384

Details

Name:	00000004.00000003.473775209.00000000004F6000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F6000
Size:	139264

Details

Name:	00000004.00000003.497556422.0000000000524000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	524000
Size:	49152

Details

Name:	00000004.00000003.754681121.0000000000530000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	530000
Size:	8192

Details

Name:	00000009.00000002.415487147.00007FF51430E000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51430E000
Size:	28672

Details

Name:	00000005.00000002.815927100.00000000033C0000.00000040.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page execute and read and write
Base address:	33C0000
Size:	45056

Details

Name:	00000001.00000002.304295459.000000A5E837E000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A5E837E000
Size:	8192

Details

Name:	00000000.00000003.428292257.0000000001257000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1257000
Size:	4096

Details

Name:	00000005.00000003.799284808.00000000036FE000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36FE000
Size:	28672

Details

Name:	00000005.00000002.815090590.0000000002C66000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C66000
Size:	8192

Details

Name:	00000004.00000003.568442875.000000000052F000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	52F000
Size:	12288

Details

Name:	00000005.00000003.588811100.00000000036F4000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36F4000
Size:	24576

Details

Name:	00000004.00000002.818685415.0000000005292000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5292000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000007.00000002.384743865.00007FF583C80000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF583C80000
Size:	4096

Details

Name:	00000009.00000002.415123688.000002205DC89000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2205DC89000
Size:	36864

Details

Name:	0000000E.00000002.445887000.0000024131510000.00000004.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	24131510000
Size:	4096

Details

Name:	00000005.00000002.814900738.0000000002B65000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B65000
Size:	20480

Details

Name:	00000005.00000003.490191308.00000000036EE000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36EE000
Size:	24576

Details

Name:	00000003.00000002.815273283.00000000029D1000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29D1000
Size:	16384

Details

Name:	00000004.00000003.546537103.000000000052A000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	52A000
Size:	4096

Details

Name:	00000000.00000002.817500463.000000000429D000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	429D000
Size:	12288

Details

Name:	00000003.00000003.593347219.00000000053D1000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	53D1000
Size:	471040

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000007.00000002.384859992.00007FF583D39000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF583D39000
Size:	12288

Details

Name:	0000000E.00000003.445329223.0000024131697000.00000004.00000001.sdmp
TargetID:	14
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24131697000
Size:	32768

Details

Name:	00000000.00000002.817175352.000000000359B000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	359B000
Size:	20480

Details

Name:	00000003.00000003.709298322.00000000033CE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33CE000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.429625185.0000000003332000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3332000
Size:	28672

Details

Name:	00000004.00000003.662436032.000000000051C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C000
Size:	61440

Details

Name:	00000000.00000002.817546727.00000000042AF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	42AF000
Size:	12288

Details

Name:	00000003.00000003.379243790.00000000031B0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	31B0000
Size:	4096

Details

Name:	00000003.00000003.545001222.0000000003390000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3390000
Size:	163840

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000003.422402428.0000000005BEA000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5BEA000
Size:	4096

Details

Name:	00000003.00000003.756827205.00000000057CB000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	57CB000
Size:	4096

Details

Name:	00000000.00000002.815252443.0000000000F20000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F20000
Size:	4096

Details

Name:	00000004.00000002.816456655.0000000000730000.00000040.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	730000
Size:	4096

Details

Name:	0000000E.00000002.445923675.0000024131640000.00000004.00000001.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24131640000
Size:	4096

Details

Name:	00000004.00000003.662530337.0000000000519000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	519000
Size:	8192

Details

Name:	00000004.00000003.430100939.00000000004AB000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4AB000
Size:	24576

Details

Name:	00000003.00000003.707093394.00000000033B2000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B2000
Size:	16384

Details

Name:	00000007.00000002.384307218.000001FC1FE02000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FC1FE02000
Size:	4096

Details

Name:	00000000.00000002.817248368.0000000003780000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3780000
Size:	4096

Details

Name:	00000004.00000003.706382506.0000000005242000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5242000
Size:	28672

Details

Name:	00000005.00000003.751876812.00000000060C1000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	60C1000
Size:	978944

Details

Name:	00000004.00000002.818887261.000000007FDD2000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FDD2000
Size:	4096

Details

Name:	00000003.00000002.815605194.0000000002A3B000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A3B000
Size:	12288

Details

Name:	00000004.00000002.818914699.000000007FDE0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FDE0000
Size:	4096

Details

Name:	00000005.00000003.635323143.0000000005FB1000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5FB1000
Size:	905216

Details

Name:	00000000.00000002.815292914.0000000000FA0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FA0000
Size:	16384

Details

Name:	00000003.00000003.521562867.000000000336B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	336B000
Size:	147456

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.473263831.000000000338E000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	338E000
Size:	4096

Details

Name:	00000004.00000003.546646473.00000000004AB000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4AB000
Size:	24576

Details

Name:	00000000.00000003.588215411.000000000125D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	125D000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.545240458.00000000057CA000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	57CA000
Size:	4096

Details

Name:	00000004.00000003.662817375.00000000004B1000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B1000
Size:	278528

Details

Name:	00000005.00000003.610805126.00000000036ED000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36ED000
Size:	28672

Details

Name:	00000007.00000002.384174665.000001FC1F629000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FC1F629000
Size:	73728

Details

Name:	00000003.00000003.707172483.00000000033C3000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33C3000
Size:	16384

Details

Name:	00000013.00000002.814962437.0000009A097F9000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	9A097F9000
Size:	28672

Details

Name:	0000000E.00000002.445939424.0000024131686000.00000004.00000020.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	24131686000
Size:	69632

Details

Name:	00000009.00000003.414667691.000002205DC52000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2205DC52000
Size:	16384

Details

Name:	00000007.00000002.384391360.00007DF5919E0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5919E0000
Size:	12288

Details

Name:	00000000.00000002.814800745.0000000000A60000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	A60000
Size:	4096

Details

Name:	00000000.00000003.773839016.000000000124F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	124F000
Size:	8192

Details

Name:	0000000D.00000002.459236844.000001A42C4D0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A42C4D0000
Size:	4096

Details

Name:	00000009.00000002.415134593.000002205DD00000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2205DD00000
Size:	4096

Details

Name:	00000004.00000003.568435961.0000000000529000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	529000
Size:	8192

Details

Name:	00000003.00000003.521543514.0000000003354000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3354000
Size:	4096

Details

Name:	00000001.00000002.304448444.000002255D900000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2255D900000
Size:	4096

Details

Name:	00000003.00000003.709254461.0000000003390000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3390000
Size:	155648

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.709114754.000000000333A000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	333A000
Size:	192512

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000002.816784391.00000000026B7000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26B7000
Size:	4096

Details

Name:	0000000D.00000000.431890149.00007DF5A3B20000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A3B20000
Size:	4096

Details

Name:	00000003.00000003.733659624.00000000053E3000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	53E3000
Size:	4096

Details

Name:	0000000D.00000002.459627651.00007FF595C06000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595C06000
Size:	4096

Details

Name:	00000003.00000003.617861255.00000000053E3000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	53E3000
Size:	4096

Details

Name:	00000009.00000002.414958962.000000FF5AEFB000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	FF5AEFB000
Size:	20480

Details

Name:	0000000D.00000003.443101685.000001A42CB71000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB71000
Size:	45056

Details

Name:	00000005.00000003.490135741.0000000005FAB000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5FAB000
Size:	20480

Details

Name:	00000004.00000002.815272695.0000000000304000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	304000
Size:	4096

Details

Name:	00000000.00000000.291461784.000000007F270000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F270000
Size:	4096

Details

Name:	00000004.00000002.815216495.0000000000300000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	300000
Size:	8192

Details

Name:	00000005.00000003.384110360.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	0000000D.00000002.459659359.00007FF595C71000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595C71000
Size:	12288

Details

Name:	00000004.00000003.708390080.0000000005242000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5242000
Size:	331776

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000003.662459811.0000000000535000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	535000
Size:	28672

Details

Name:	00000004.00000003.708641024.000000000052F000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	52F000
Size:	16384

Details

Name:	00000009.00000002.415499037.00007FF514317000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF514317000
Size:	49152

Details

Name:	00000003.00000003.451402379.000000000333F000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	333F000
Size:	65536

Details

Name:	00000004.00000003.706630303.00000000004A4000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A4000
Size:	24576

Details

Name:	0000000D.00000002.459331211.000001A42CB17000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB17000
Size:	221184

Details

Name:	00000005.00000003.538977987.00000000036A2000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A2000
Size:	106496

Details

Name:	00000004.00000003.592927028.0000000005221000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5221000
Size:	466944

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000013.00000002.815254263.00000248946F0000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	248946F0000
Size:	4096

Details

Name:	00000000.00000002.815463523.000000000112D000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	112D000
Size:	12288

Details

Name:	00000004.00000003.754695569.0000000000535000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	535000
Size:	53248

Details

Name:	00000003.00000003.496887714.0000000003351000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3351000
Size:	4096

Details

Name:	00000005.00000002.814851100.0000000002B44000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B44000
Size:	4096

Details

Name:	00000000.00000003.382725787.0000000003B8C000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3B8C000
Size:	4096

Details

Name:	00000013.00000002.816205872.00007FF564DF8000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF564DF8000
Size:	4096

Details

Name:	00000001.00000002.305203630.00007FF4F5AFB000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5AFB000
Size:	12288

Details

Name:	00000005.00000003.365890851.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	0000000D.00000002.459945308.00007FF595EC0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595EC0000
Size:	20480

Details

Name:	00000005.00000003.543768365.00000000036C7000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36C7000
Size:	151552

Details

Name:	00000003.00000003.662691347.00000000057CA000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	57CA000
Size:	4096

Details

Name:	00000005.00000003.660602078.00000000036F9000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36F9000
Size:	98304

Details

Name:	00000004.00000003.708606740.0000000000519000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	519000
Size:	8192

Details

Name:	00000005.00000002.818052295.00000000053B0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	53B0000
Size:	4096

Details

Name:	00000003.00000003.383344027.00000000057CB000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	57CB000
Size:	4096

Details

Name:	00000005.00000003.538945900.0000000003714000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3714000
Size:	4096

Details

Name:	00000005.00000003.706705573.0000000005BEB000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5BEB000
Size:	4096

Details

Name:	00000013.00000003.546105923.000002489475F000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2489475F000
Size:	8192

Details

Name:	00000005.00000003.588828639.0000000003683000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3683000
Size:	16384

Details

Name:	00000013.00000002.815865728.0000024895220000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24895220000
Size:	4096

Details

Name:	00000003.00000003.566956516.000000000336B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	336B000
Size:	147456

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000002.818866245.000000007FDD0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FDD0000
Size:	4096

Details

Name:	00000007.00000000.367834171.00007DF5919C2000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5919C2000
Size:	4096

Details

Name:	00000013.00000002.816139460.00007FF5514F1000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5514F1000
Size:	8192

Details

Name:	00000000.00000003.588361240.0000000001237000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1237000
Size:	94208

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000001.00000002.304521614.00007DF503822000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF503822000
Size:	4096

Details

Name:	00000013.00000003.546190873.000002489475F000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2489475F000
Size:	8192

Details

Name:	00000004.00000002.817066212.00000000027EF000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27EF000
Size:	20480

Details

Name:	00000007.00000002.384193520.000001FC1F653000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FC1F653000
Size:	36864

Details

Name:	0000000E.00000002.445928088.0000024131670000.00000004.00000020.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	24131670000
Size:	69632

Details

Name:	00000005.00000003.379688929.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000004.00000003.733096038.0000000000533000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	533000
Size:	4096

Details

Name:	0000000E.00000000.432892715.00007FF5398C1000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5398C1000
Size:	16384

Details

Name:	00000003.00000002.815253796.00000000029CE000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29CE000
Size:	8192

Details

Name:	00000009.00000000.402400388.000002205DAD0000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2205DAD0000
Size:	102400

Details

Name:	00000003.00000003.639333185.00000000033B6000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B6000
Size:	36864

Details

Name:	00000005.00000002.817973911.000000000538D000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	538D000
Size:	12288

Details

Name:	00000013.00000002.814986818.0000024894590000.00000004.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	24894590000
Size:	4096

Details

Name:	00000005.00000003.365287427.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	0000000D.00000003.443285366.000001A42CB8D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB8D000
Size:	16384

Details

Name:	0000000D.00000002.459927968.00007FF595EAA000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595EAA000
Size:	12288

Details

Name:	00000001.00000002.305212612.00007FF4F5B0E000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5B0E000
Size:	4096

Details

Name:	00000005.00000003.380804802.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	0000000D.00000003.439843972.000001A42CBB8000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CBB8000
Size:	65536

Details

Name:	0000000D.00000002.458715289.0000008915DFB000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8915DFB000
Size:	20480

Details

Name:	00000004.00000003.799769115.000000000051C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C000
Size:	61440

Details

Name:	00000005.00000003.632855598.00000000036BD000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36BD000
Size:	192512

Details

Name:	0000000D.00000003.447343229.000001A42CB8E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB8E000
Size:	397312

Details

Name:	00000003.00000003.592601609.000000000336B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	336B000
Size:	147456

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.588840580.0000000003356000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3356000
Size:	81920

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery
URLs found in memory or binary data	Networking

Details

Name:	00000001.00000002.304191448.000000A5E82FE000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A5E82FE000
Size:	8192

Details

Name:	00000003.00000003.545055003.0000000003350000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3350000
Size:	4096

Details

Name:	0000000E.00000002.446291442.00007FF5398C1000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5398C1000
Size:	16384

Details

Name:	00000004.00000003.522856150.000000000049F000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	49F000
Size:	8192

Details

Name:	00000004.00000003.708616999.000000000051C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C000
Size:	53248

Details

Name:	00000005.00000002.819113680.000000007F3A0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F3A0000
Size:	4096

Details

Name:	00000004.00000002.817681906.0000000004260000.00000040.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	4260000
Size:	45056

Details

Name:	00000003.00000003.405938753.00000000033B6000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B6000
Size:	32768

Details

Name:	0000000D.00000002.459653373.00007FF595C46000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595C46000
Size:	16384

Details

Name:	00000004.00000003.406681167.0000000000502000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	502000
Size:	90112

Details

Name:	00000004.00000002.817277951.000000000285C000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	285C000
Size:	8192

Details

Name:	00000005.00000003.367732777.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000005.00000003.517369724.00000000036BD000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36BD000
Size:	36864

Details

Name:	0000000E.00000003.444867081.00000241316A0000.00000004.00000001.sdmp
TargetID:	14
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	241316A0000
Size:	61440

Details

Name:	00000004.00000003.662539390.000000000051C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C000
Size:	61440

Details

Name:	00000003.00000003.473239739.000000000336B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	336B000
Size:	139264

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000002.817367532.00000000028B4000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28B4000
Size:	8192

Details

Name:	00000004.00000002.817162373.000000000282B000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	282B000
Size:	12288

Details

Name:	00000004.00000003.617880062.0000000005292000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5292000
Size:	4096

Details

Name:	00000005.00000002.817134073.00000000036FB000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	36FB000
Size:	16384

Details

Name:	00000004.00000003.662508349.00000000004A4000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A4000
Size:	24576

Details

Name:	00000003.00000003.684512690.00000000033B2000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B2000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.817378681.0000000003804000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3804000
Size:	4096

Details

Name:	00000005.00000003.386520800.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000004.00000003.429933115.000000000512F000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	512F000
Size:	20480

Details

Name:	00000004.00000002.817122058.0000000002816000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2816000
Size:	8192

Details

Name:	00000005.00000002.815795830.00000000031E0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	31E0000
Size:	8192

Details

Name:	00000004.00000003.771150217.0000000000533000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	533000
Size:	4096

Details

Name:	00000009.00000002.415602598.00007FF5143D1000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5143D1000
Size:	32768

Details

Name:	00000003.00000002.818640164.000000007F610000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F610000
Size:	4096

Details

Name:	0000000D.00000002.458947052.000001A42C267000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42C267000
Size:	8192

Details

Name:	00000005.00000003.746495531.0000000003681000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3681000
Size:	131072

Details

Name:	00000003.00000002.818023247.0000000005CA3000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5CA3000
Size:	135168

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000002.818466952.0000000005E9F000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5E9F000
Size:	4096

Details

Name:	00000005.00000003.371081094.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	0000000D.00000002.459583992.00007FF595A97000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595A97000
Size:	4096

Details

Name:	0000000D.00000002.459902890.00007FF595E3D000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595E3D000
Size:	12288

Details

Name:	0000000E.00000002.446017701.0000024131800000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24131800000
Size:	32768

Details

Name:	0000000D.00000002.459762350.00007FF595D9A000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595D9A000
Size:	8192

Details

Name:	00000003.00000003.639581755.0000000003356000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3356000
Size:	81920

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000002.817086579.0000000002801000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2801000
Size:	4096

Details

Name:	00000000.00000002.815310992.0000000000FB0000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	FB0000
Size:	4096

Details

Name:	00000005.00000003.362549985.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000003.00000003.778482918.00000000057CA000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	57CA000
Size:	4096

Details

Name:	00000003.00000002.818266088.0000000005CC6000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5CC6000
Size:	28672

Details

Name:	00000004.00000003.799761814.0000000000518000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	518000
Size:	12288

Details

Name:	0000000D.00000003.438572228.000001A42CB7E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB7E000
Size:	147456

Details

Name:	00000003.00000002.817575494.0000000004EEC000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4EEC000
Size:	16384

Details

Name:	00000003.00000003.639397558.000000000332D000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	332D000
Size:	8192

Details

Name:	0000000D.00000003.445524258.000001A42CB86000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB86000
Size:	12288

Details

Name:	00000003.00000003.639484831.0000000003356000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3356000
Size:	81920

Details

Name:	00000003.00000003.521614713.0000000003356000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3356000
Size:	81920

Details

Name:	00000001.00000002.304422309.000002255D868000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2255D868000
Size:	8192

Details

Name:	00000005.00000003.363027822.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000007.00000002.384094057.000001FC1F5D0000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FC1F5D0000
Size:	4096

Details

Name:	00000005.00000003.422397384.0000000005BEB000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5BEB000
Size:	4096

Details

Name:	00000004.00000000.293530373.00000000000F0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	F0000
Size:	102400

Details

Name:	00000001.00000003.303578017.000002255D84C000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2255D84C000
Size:	4096

Details

Name:	00000000.00000003.588224637.00000000011E5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11E5000
Size:	110592

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery
URLs found in memory or binary data	Networking

Details

Name:	00000009.00000003.414690618.000002205DC4C000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2205DC4C000
Size:	8192

Details

Name:	00000004.00000003.593392226.0000000000544000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	544000
Size:	16384

Details

Name:	00000003.00000003.383256605.0000000005749000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5749000
Size:	77824

Details

Name:	0000000D.00000003.433703437.000001A42C2A6000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42C2A6000
Size:	20480

Details

Name:	00000005.00000003.543729953.00000000036A4000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A4000
Size:	98304

Details

Name:	00000005.00000003.370144515.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000001.00000002.304666025.00007FF4F5AB9000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5AB9000
Size:	8192

Details

Name:	00000009.00000002.414970788.000000FF5B0FF000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	FF5B0FF000
Size:	4096

Details

Name:	00000005.00000002.817311377.0000000003AB0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3AB0000
Size:	323584

Details

Name:	00000004.00000003.593381536.0000000000541000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	541000
Size:	28672

Details

Name:	00000003.00000003.566983620.0000000003390000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3390000
Size:	163840

Details

Name:	00000005.00000003.362476127.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000005.00000003.387994274.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	0000000D.00000002.458968392.000001A42C26A000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42C26A000
Size:	16384

Details

Name:	00000003.00000003.706984683.0000000003353000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3353000
Size:	4096

Details

Name:	00000009.00000002.415022740.000002205DC13000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2205DC13000
Size:	86016

Details

Name:	00000003.00000002.817857701.0000000005A5E000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5A5E000
Size:	8192

Details

Name:	00000005.00000003.657337271.0000000005BEB000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5BEB000
Size:	4096

Details

Name:	00000013.00000002.816473196.00007FF5653F2000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5653F2000
Size:	8192

Details

Name:	00000003.00000003.566831752.0000000003354000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3354000
Size:	4096

Details

Name:	00000003.00000003.566785167.00000000033C5000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33C5000
Size:	8192

Details

Name:	00000013.00000002.816926229.00007FF5655C4000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5655C4000
Size:	20480

Details

Name:	0000000D.00000002.459000374.000001A42C27D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42C27D000
Size:	8192

Details

Name:	00000003.00000003.473175750.00000000033CE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33CE000
Size:	4096

Details

Name:	00000000.00000002.816607195.00000000014D0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	14D0000
Size:	36864

Details

Name:	00000000.00000003.382585090.0000000001245000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1245000
Size:	8192

Details

Name:	00000003.00000003.709198598.00000000033C3000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33C3000
Size:	16384

Details

Name:	0000000D.00000002.459848016.00007FF595DE7000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595DE7000
Size:	16384

Details

Name:	00000003.00000002.816590240.00000000032DA000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	32DA000
Size:	249856

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000002.815073923.0000000002C5A000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C5A000
Size:	12288

Details

Name:	00000003.00000003.709236169.000000000336B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	336B000
Size:	147456

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000009.00000002.414964364.000000FF5AFF7000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	FF5AFF7000
Size:	36864

Details

Name:	00000003.00000003.451518677.0000000003332000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3332000
Size:	28672

Details

Name:	00000005.00000003.468223760.0000000005FAB000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5FAB000
Size:	20480

Details

Name:	00000004.00000003.590749438.00000000004AB000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4AB000
Size:	24576

Details

Name:	0000000D.00000002.459778935.00007FF595DAE000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595DAE000
Size:	8192

Details

Name:	00000001.00000002.304356129.000002255D6E0000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2255D6E0000
Size:	4096

Details

Name:	00000007.00000002.384813104.00007FF583CB3000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF583CB3000
Size:	24576

Details

Name:	00000004.00000002.818591254.0000000005225000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5225000
Size:	28672

Details

Name:	0000000D.00000003.439808274.000001A42CBA7000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CBA7000
Size:	65536

Details

Name:	00000000.00000003.428769064.000000000124B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	124B000
Size:	12288

Details

Name:	00000005.00000003.517144628.000000000367D000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	367D000
Size:	147456

Details

Name:	00000004.00000002.818108868.00000000048A1000.00000020.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	48A1000
Size:	45056

Details

Name:	00000004.00000002.816065935.000000000051C000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	51C000
Size:	94208

Details

Name:	00000004.00000003.771072843.0000000000542000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	542000
Size:	8192

Details

Name:	00000003.00000003.496907120.000000000336B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	336B000
Size:	147456

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000007.00000002.384591098.00007FF583B30000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF583B30000
Size:	4096

Details

Name:	00000005.00000003.728325288.00000000036A5000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A5000
Size:	94208

Details

Name:	00000009.00000002.415110828.000002205DC71000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2205DC71000
Size:	8192

Details

Name:	00000005.00000000.294506786.0000000002D38000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D38000
Size:	16384

Details

Name:	00000003.00000003.429527643.00000000033B7000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B7000
Size:	28672

Details

Name:	00000005.00000003.371415796.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000003.00000002.815707890.0000000002A9B000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A9B000
Size:	12288

Details

Name:	0000000D.00000002.459890981.00007FF595E37000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595E37000
Size:	8192

Details

Name:	00000005.00000002.815648954.0000000002D32000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D32000
Size:	8192

Details

Name:	00000004.00000002.816900766.0000000002715000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2715000
Size:	20480

Details

Name:	00000009.00000002.415424379.00007FF514265000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF514265000
Size:	4096

Details

Name:	00000004.00000003.384888850.0000000000519000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	519000
Size:	8192

Details

Name:	0000000D.00000000.431906541.00007DF5A3B32000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A3B32000
Size:	4096

Details

Name:	00000004.00000002.818399864.00000000050DD000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	50DD000
Size:	12288

Details

Name:	00000004.00000003.501262759.0000000004D0A000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4D0A000
Size:	4096

Details

Name:	00000000.00000003.498798270.0000000003B8C000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3B8C000
Size:	4096

Details

Name:	00000013.00000000.545447236.00000248945B0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	248945B0000
Size:	102400

Details

Name:	00000001.00000002.304676716.00007FF4F5AC3000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5AC3000
Size:	28672

Details

Name:	00000003.00000003.473275467.0000000003390000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3390000
Size:	131072

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000003.497268742.000000000512F000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	512F000
Size:	479232

Details

Name:	00000004.00000003.568457155.00000000004A4000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A4000
Size:	24576

Details

Name:	00000003.00000003.591603690.0000000003332000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3332000
Size:	28672

Details

Name:	00000004.00000003.708659118.000000000053F000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	53F000
Size:	4096

Details

Name:	00000004.00000003.429971148.00000000004B1000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B1000
Size:	278528

Details

Name:	0000000D.00000000.431896074.00007DF5A3B22000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A3B22000
Size:	4096

Details

Name:	00000003.00000003.684213909.0000000005C4F000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C4F000
Size:	32768

Details

Name:	00000009.00000002.415204203.000002205E190000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2205E190000
Size:	4096

Details

Name:	00000009.00000002.415608273.00007FF5143DA000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5143DA000
Size:	4096

Details

Name:	0000000D.00000002.458746442.00000089161FA000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	89161FA000
Size:	24576

Details

Name:	00000005.00000002.818757708.0000000006031000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6031000
Size:	4096

Details

Name:	00000003.00000002.815951660.0000000002D7B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D7B000
Size:	20480

Details

Name:	00000004.00000003.497435925.0000000000537000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	537000
Size:	69632

Details

Name:	00000007.00000002.384027933.000001FC1F460000.00000004.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1FC1F460000
Size:	4096

Details

Name:	00000003.00000003.383351834.00000000057CA000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	57CA000
Size:	4096

Details

Name:	0000000E.00000000.432852008.00007DF547532000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF547532000
Size:	4096

Details

Name:	00000009.00000002.415576541.00007FF5143B9000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5143B9000
Size:	12288

Details

Name:	00000004.00000003.497623868.0000000000498000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	498000
Size:	28672

Details

Name:	00000013.00000002.815730602.0000024894929000.00000004.00000040.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	24894929000
Size:	4096

Details

Name:	00000004.00000003.501123007.00000000004B1000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B1000
Size:	278528

Details

Name:	00000005.00000003.777765602.0000000005BEB000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5BEB000
Size:	8192

Details

Name:	00000003.00000002.817115484.000000000336B000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	336B000
Size:	147456

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000007.00000002.384078288.000001FC1F4D0000.00000004.00000020.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1FC1F4D0000
Size:	8192

Details

Name:	00000009.00000003.414685977.000002205DC4E000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2205DC4E000
Size:	4096

Details

Name:	00000005.00000003.752137056.0000000006032000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6032000
Size:	270336

Details

Name:	00000004.00000003.384881212.000000000052A000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	52A000
Size:	8192

Details

Name:	0000000D.00000002.459181096.000001A42C308000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42C308000
Size:	32768

Details

Name:	00000005.00000003.588792482.0000000003700000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3700000
Size:	20480

Details

Name:	00000004.00000003.546580548.00000000004A0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A0000
Size:	4096

Details

Name:	00000000.00000003.352096949.0000000001130000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1130000
Size:	4096

Details

Name:	00000007.00000002.384823720.00007FF583CBE000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF583CBE000
Size:	4096

Details

Name:	00000000.00000002.816506903.000000000149F000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	149F000
Size:	4096

Details

Name:	00000004.00000003.662345748.0000000005292000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5292000
Size:	4096

Details

Name:	0000000D.00000003.438832799.000001A42CB80000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB80000
Size:	4096

Details

Name:	0000000D.00000003.445372696.000001A42CB8A000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB8A000
Size:	57344

Details

Name:	00000005.00000002.818301280.0000000005863000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5863000
Size:	4096

Details

Name:	00000004.00000003.799754066.0000000000546000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	546000
Size:	8192

Details

Name:	00000003.00000003.591560179.00000000033CE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33CE000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000003.381463721.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	0000000E.00000002.446164766.00007FF5397D3000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5397D3000
Size:	8192

Details

Name:	00000005.00000002.815145192.0000000002C69000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C69000
Size:	32768

Details

Name:	00000005.00000002.815521984.0000000002D04000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D04000
Size:	8192

Details

Name:	00000000.00000003.587950005.00000000042A1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	42A1000
Size:	716800

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.382602155.000000000124D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	124D000
Size:	16384

Details

Name:	00000000.00000002.817727695.000000007F270000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F270000
Size:	4096

Details

Name:	0000000D.00000003.458500500.000001A42C26E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42C26E000
Size:	57344

Details

Name:	00000000.00000003.704681708.00000000011E7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11E7000
Size:	102400

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery
URLs found in memory or binary data	Networking

Details

Name:	00000009.00000002.415597970.00007FF5143CA000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5143CA000
Size:	12288

Details

Name:	00000004.00000003.522883035.0000000000489000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	489000
Size:	57344

Details

Name:	00000013.00000002.816879004.00007FF5655B2000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5655B2000
Size:	12288

Details

Name:	00000001.00000002.304524608.00007DF503830000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF503830000
Size:	12288

Details

Name:	00000005.00000002.816048716.0000000003440000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3440000
Size:	4096

Details

Name:	00000000.00000003.588316978.0000000001256000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1256000
Size:	28672

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000001.00000002.304518467.00007DF503820000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF503820000
Size:	4096

Details

Name:	00000004.00000003.522764091.0000000000528000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	528000
Size:	4096

Details

Name:	00000007.00000002.384896399.00007FF583D5A000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF583D5A000
Size:	4096

Details

Name:	00000004.00000002.814931960.000000000014C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	14C000
Size:	16384

Details

Name:	00000005.00000002.818437521.0000000005D9E000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5D9E000
Size:	8192

Details

Name:	00000005.00000003.490311513.0000000003676000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3676000
Size:	24576

Details

Name:	00000005.00000002.815531926.0000000002D0B000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D0B000
Size:	20480

Details

Name:	00000000.00000003.773930614.0000000001256000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1256000
Size:	4096

Details

Name:	00000003.00000003.591530204.00000000033C3000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33C3000
Size:	4096

Details

Name:	00000003.00000003.499867442.00000000033BA000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33BA000
Size:	20480

Details

Name:	00000005.00000003.377211759.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	0000000D.00000002.459675045.00007FF595C79000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595C79000
Size:	4096

Details

Name:	0000000D.00000003.436914160.000001A42D002000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42D002000
Size:	94208

Details

Name:	00000005.00000002.815678541.0000000002F80000.00000004.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2F80000
Size:	4096

Details

Name:	00000004.00000003.733105345.0000000000535000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	535000
Size:	53248

Details

Name:	00000003.00000003.405986967.00000000033CE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33CE000
Size:	4096

Details

Name:	00000003.00000003.706622617.000000000333A000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	333A000
Size:	86016

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.428668108.0000000001201000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1201000
Size:	286720

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000003.522863930.00000000004A4000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A4000
Size:	24576

Details

Name:	00000005.00000003.373059087.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000000.00000003.351892757.0000000001130000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1130000
Size:	4096

Details

Name:	00000000.00000003.379106552.0000000003710000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3710000
Size:	4096

Details

Name:	00000009.00000002.414977763.000002205DAB0000.00000004.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2205DAB0000
Size:	4096

Details

Name:	00000003.00000002.815991491.0000000002DD0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2DD0000
Size:	8192

Details

Name:	00000001.00000002.304425664.000002255D86B000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2255D86B000
Size:	69632

Details

Name:	0000000D.00000002.459623197.00007FF595C04000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595C04000
Size:	4096

Details

Name:	00000003.00000003.496863902.000000000332D000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	332D000
Size:	8192

Details

Name:	00000001.00000002.304599071.00007FF4F5A1C000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5A1C000
Size:	4096

Details

Name:	00000004.00000003.497533663.000000000051E000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51E000
Size:	16384

Details

Name:	00000004.00000002.817443965.00000000028CB000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28CB000
Size:	36864

Details

Name:	00000003.00000003.684574362.0000000003350000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3350000
Size:	4096

Details

Name:	00000004.00000003.617861145.0000000005242000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5242000
Size:	90112

Details

Name:	00000004.00000003.497594727.00000000004A4000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A4000
Size:	24576

Details

Name:	0000000D.00000002.459325565.000001A42CB14000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB14000
Size:	8192

Details

Name:	00000004.00000002.817509084.00000000028E2000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28E2000
Size:	8192

Details

Name:	00000005.00000003.588804187.0000000003714000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3714000
Size:	4096

Details

Name:	00000013.00000002.815654969.0000024894783000.00000004.00000020.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	24894783000
Size:	4096

Details

Name:	0000000D.00000003.435564765.000001A42CB7D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB7D000
Size:	12288

Details

Name:	00000003.00000003.545059710.0000000003354000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3354000
Size:	4096

Details

Name:	00000003.00000003.566904408.000000000333F000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	333F000
Size:	65536

Details

Name:	00000005.00000002.816001223.0000000003420000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	3420000
Size:	16384

Details

Name:	00000003.00000002.815724023.0000000002A9F000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A9F000
Size:	16384

Details

Name:	00000001.00000002.304775236.00007FF4F5AD3000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5AD3000
Size:	12288

Details

Name:	00000000.00000002.817736913.000000007F272000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F272000
Size:	4096

Details

Name:	00000007.00000002.384713249.00007FF583C6F000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF583C6F000
Size:	12288

Details

Name:	00000003.00000003.545119153.0000000003390000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3390000
Size:	163840

Details

Name:	0000000D.00000002.459300019.000001A42C9F0000.00000004.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1A42C9F0000
Size:	8192

Details

Name:	00000003.00000003.544887085.0000000003332000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3332000
Size:	28672

Details

Name:	00000003.00000003.521532004.000000000333A000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	333A000
Size:	90112

Details

Name:	00000005.00000003.362415456.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000000.00000003.495631147.0000000001256000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1256000
Size:	4096

Details

Name:	00000005.00000003.380900003.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000009.00000003.414646287.000002205DC56000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2205DC56000
Size:	86016

Details

Name:	00000005.00000003.369348455.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	0000000D.00000003.440126046.000001A42CB81000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB81000
Size:	4096

Details

Name:	00000004.00000003.706482955.00000000004F6000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F6000
Size:	143360

Details

Name:	00000004.00000002.818971674.000000007FDF0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FDF0000
Size:	12288

Details

Name:	00000000.00000003.680045878.0000000001262000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1262000
Size:	28672

Details

Name:	00000004.00000003.662449284.000000000052C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	52C000
Size:	24576

Details

Name:	00000000.00000003.495375541.0000000003791000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3791000
Size:	475136

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000003.458527897.000001A42C269000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42C269000
Size:	20480

Details

Name:	00000005.00000002.816361677.0000000003610000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3610000
Size:	4096

Details

Name:	00000003.00000003.617804128.00000000053D1000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	53D1000
Size:	77824

Details

Name:	00000003.00000003.383240679.00000000033B1000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B1000
Size:	12288

Details

Name:	0000000D.00000002.459684632.00007FF595C90000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595C90000
Size:	4096

Details

Name:	00000003.00000003.521519190.000000000332D000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	332D000
Size:	8192

Details

Name:	0000000E.00000002.446157863.00007FF5397CF000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5397CF000
Size:	12288

Details

Name:	00000000.00000002.816474412.000000000149D000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	149D000
Size:	8192

Details

Name:	00000005.00000002.814931069.0000000002C23000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C23000
Size:	8192

Details

Name:	00000004.00000003.568466053.00000000004AB000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4AB000
Size:	24576

Details

Name:	00000003.00000003.617833738.00000000053E3000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	53E3000
Size:	4096

Details

Name:	00000005.00000003.516807219.00000000036F4000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36F4000
Size:	135168

Details

Name:	00000005.00000003.363445789.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000005.00000003.538959697.0000000003681000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3681000
Size:	131072

Details

Name:	00000001.00000002.304513283.00007DF503810000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF503810000
Size:	4096

Details

Name:	00000005.00000003.746518294.00000000036A2000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A2000
Size:	8192

Details

Name:	00000001.00000002.304572612.00007FF4F5961000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5961000
Size:	12288

Details

Name:	00000007.00000002.384018131.0000003BEB7FF000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3BEB7FF000
Size:	4096

Details

Name:	00000004.00000002.815432667.0000000000450000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	450000
Size:	36864

Details

Name:	00000003.00000003.709215558.000000000333F000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	333F000
Size:	172032

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.588324652.00000000011CE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11CE000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.498835742.000000000125F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	125F000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.566767863.00000000033B8000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B8000
Size:	28672

Details

Name:	00000005.00000002.815958973.00000000033D0000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	33D0000
Size:	4096

Details

Name:	00000005.00000003.517422689.00000000036ED000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36ED000
Size:	28672

Details

Name:	00000004.00000002.816851560.00000000026F9000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26F9000
Size:	16384

Details

Name:	00000000.00000002.815531446.0000000001180000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1180000
Size:	40960

Details

Name:	0000000D.00000002.459552004.00007FF59583C000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59583C000
Size:	4096

Details

Name:	0000000D.00000002.459263997.000001A42C940000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A42C940000
Size:	8192

Details

Name:	00000004.00000003.771169280.00000000004A0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A0000
Size:	4096

Details

Name:	0000000E.00000002.446146076.00007FF5395BC000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5395BC000
Size:	4096

Details

Name:	00000005.00000002.815019696.0000000002C51000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C51000
Size:	4096

Details

Name:	00000003.00000003.733585664.0000000005D75000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D75000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000003.418003027.0000000003677000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3677000
Size:	36864

Details

Name:	00000003.00000003.591107464.0000000005C49000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C49000
Size:	757760

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000003.539387997.00000000036BD000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36BD000
Size:	36864

Details

Name:	00000004.00000002.817175918.000000000282F000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	282F000
Size:	24576

Details

Name:	0000000D.00000003.438128975.000001A42CB6F000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB6F000
Size:	36864

Details

Name:	00000001.00000002.304414245.000002255D852000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2255D852000
Size:	69632

Details

Name:	00000005.00000003.799309783.000000000370C000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	370C000
Size:	16384

Details

Name:	0000000D.00000003.435850364.000001A42CB86000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB86000
Size:	16384

Details

Name:	00000000.00000003.379099958.0000000003710000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3710000
Size:	4096

Details

Name:	00000003.00000003.684460359.000000000336B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	336B000
Size:	147456

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000007.00000000.367809783.000001FC1F480000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FC1F480000
Size:	102400

Details

Name:	00000003.00000002.816567984.00000000032D0000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	32D0000
Size:	36864

Details

Name:	00000005.00000003.422294137.00000000036F4000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36F4000
Size:	4096

Details

Name:	00000005.00000003.611279822.0000000005BEB000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5BEB000
Size:	4096

Details

Name:	00000004.00000002.816270151.0000000000546000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	546000
Size:	8192

Details

Name:	00000003.00000003.707160730.00000000033C1000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33C1000
Size:	4096

Details

Name:	0000000E.00000002.446247594.00007FF5398A4000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5398A4000
Size:	20480

Details

Name:	00000003.00000003.706565569.0000000003332000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3332000
Size:	28672

Details

Name:	00000005.00000002.815817206.00000000031E4000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	31E4000
Size:	4096

Details

Name:	00000007.00000002.384851589.00007FF583D32000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF583D32000
Size:	12288

Details

Name:	0000000E.00000002.445985774.00000241317A0000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	241317A0000
Size:	16384

Details

Name:	00000003.00000003.684907703.00000000057CB000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	57CB000
Size:	4096

Details

Name:	00000013.00000002.816984136.00007FF5655D1000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5655D1000
Size:	12288

Details

Name:	00000003.00000003.406509548.0000000003390000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3390000
Size:	131072

Details

Name:	00000005.00000003.539032295.00000000036BD000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36BD000
Size:	36864

Details

Name:	0000000D.00000002.458708881.0000008915CFE000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8915CFE000
Size:	8192

Details

Name:	00000003.00000003.639309500.0000000005C4F000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C4F000
Size:	16384

Details

Name:	00000004.00000003.799874287.000000000053C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	53C000
Size:	24576

Details

Name:	00000003.00000003.684487513.0000000003390000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3390000
Size:	135168

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.817618993.0000000004409000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4409000
Size:	4096

Details

Name:	00000004.00000003.497603394.00000000004AB000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4AB000
Size:	24576

Details

Name:	00000001.00000002.304402747.000002255D83C000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2255D83C000
Size:	53248

Details

Name:	0000000D.00000002.459739183.00007FF595D45000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595D45000
Size:	4096

Details

Name:	00000004.00000003.380803835.00000000004A6000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A6000
Size:	36864

Details

Name:	00000004.00000000.293552219.000000007FDD2000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FDD2000
Size:	4096

Details

Name:	00000009.00000002.415217305.00007DF41FF10000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF41FF10000
Size:	20480

Details

Name:	00000003.00000003.708841445.0000000005D21000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D21000
Size:	999424

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000002.817592588.0000000004F2C000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4F2C000
Size:	16384

Details

Name:	00000013.00000002.816064448.00007DF573252000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF573252000
Size:	4096

Details

Name:	0000000D.00000002.458879839.000001A42C229000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42C229000
Size:	73728

Details

Name:	00000004.00000002.814977850.000000000018B000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18B000
Size:	20480

Details

Name:	0000000D.00000002.459547094.00007FF59582B000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59582B000
Size:	4096

Details

Name:	00000005.00000002.818375336.0000000005C7D000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5C7D000
Size:	12288

Details

Name:	00000005.00000000.294584724.000000007F3B0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F3B0000
Size:	4096

Details

Name:	00000000.00000000.291447026.0000000000A70000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	A70000
Size:	102400

Details

Name:	00000000.00000002.817598961.000000000439E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	439E000
Size:	4096

Details

Name:	00000013.00000002.816496490.00007FF5653F7000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5653F7000
Size:	4096

Details

Name:	00000003.00000002.816307156.0000000003170000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3170000
Size:	20480

Details

Name:	00000003.00000003.709291601.00000000033C3000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33C3000
Size:	16384

Details

Name:	00000004.00000002.815491504.000000000045A000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	45A000
Size:	282624

Details

Name:	00000003.00000003.354380249.0000000004EB0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4EB0000
Size:	4096

Details

Name:	00000004.00000002.815376364.0000000000420000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	420000
Size:	16384

Details

Name:	00000004.00000003.406496200.0000000000547000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	547000
Size:	4096

Details

Name:	00000005.00000002.818289526.00000000057F0000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	57F0000
Size:	4096

Details

Name:	0000000D.00000003.435867785.000001A42CB71000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB71000
Size:	40960

Details

Name:	00000004.00000003.733039710.0000000000542000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	542000
Size:	24576

Details

Name:	00000009.00000002.415280372.00007FF513A6B000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF513A6B000
Size:	16384

Details

Name:	00000003.00000003.709046052.0000000005D21000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D21000
Size:	348160

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000002.815971408.0000000002D80000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D80000
Size:	8192

Details

Name:	0000000E.00000002.445880124.000000E6DB77F000.00000004.00000010.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	E6DB77F000
Size:	4096

Details

Name:	00000000.00000003.796386649.000000000124F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	124F000
Size:	8192

Details

Name:	00000005.00000003.565343201.0000000003714000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3714000
Size:	4096

Details

Name:	00000009.00000002.415176932.000002205DE00000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2205DE00000
Size:	4096

Details

Name:	00000005.00000002.818729683.0000000005FF3000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5FF3000
Size:	4096

Details

Name:	0000000E.00000002.445899873.0000024131530000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24131530000
Size:	102400

Details

Name:	00000003.00000003.706969707.0000000003350000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3350000
Size:	4096

Details

Name:	00000003.00000003.709096295.000000000332D000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	332D000
Size:	8192

Details

Name:	00000004.00000003.754670790.0000000000542000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	542000
Size:	24576

Details

Name:	00000013.00000002.814932153.0000009A096FE000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	9A096FE000
Size:	8192

Details

Name:	00000005.00000002.815776202.0000000002FF0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2FF0000
Size:	16384

Details

Name:	00000005.00000003.468306993.0000000003672000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3672000
Size:	4096

Details

Name:	00000007.00000002.384719879.00007FF583C73000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF583C73000
Size:	28672

Details

Name:	00000007.00000002.384036990.000001FC1F480000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FC1F480000
Size:	102400

Details

Name:	00000001.00000002.304393118.000002255D82A000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2255D82A000
Size:	69632

Details

Name:	00000005.00000003.422311120.00000000036EF000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36EF000
Size:	4096

Details

Name:	00000005.00000003.635525763.00000000060A1000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	60A1000
Size:	466944

Details

Name:	0000000D.00000002.459732784.00007FF595D41000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595D41000
Size:	12288

Details

Name:	00000005.00000003.539486876.00000000036ED000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36ED000
Size:	28672

Details

Name:	00000000.00000002.815325802.0000000000FC0000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	FC0000
Size:	61440

Details

Name:	00000004.00000003.708649159.0000000000536000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	536000
Size:	32768

Details

Name:	00000005.00000002.815691630.0000000002F90000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2F90000
Size:	102400

Details

Name:	00000013.00000000.545550261.00007FF5514F1000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5514F1000
Size:	8192

Details

Name:	00000005.00000002.816815836.00000000036A2000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	36A2000
Size:	8192

Details

Name:	00000004.00000003.384836348.0000000000531000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	531000
Size:	94208

Details

Name:	00000005.00000002.815971407.00000000033F0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	33F0000
Size:	12288

Details

Name:	00000005.00000003.370551591.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000004.00000003.593587969.000000000049F000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	49F000
Size:	8192

Details

Name:	0000000D.00000002.459027885.000001A42C288000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42C288000
Size:	106496

Details

Name:	00000005.00000003.422276807.0000000005FA1000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5FA1000
Size:	73728

Details

Name:	00000005.00000003.370076797.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000004.00000003.501253623.0000000004D0B000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4D0B000
Size:	8192

Details

Name:	00000000.00000002.817560935.00000000042C3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	42C3000
Size:	4096

Details

Name:	00000000.00000003.495574503.0000000001256000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1256000
Size:	49152

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.709313668.00000000053D1000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	53D1000
Size:	462848

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000007.00000002.384521898.00007FF583847000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF583847000
Size:	32768

Details

Name:	00000004.00000003.754776345.000000000051A000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51A000
Size:	4096

Details

Name:	00000004.00000003.770871579.00000000004FF000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4FF000
Size:	114688

Details

Name:	00000003.00000003.429593159.000000000338E000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	338E000
Size:	4096

Details

Name:	0000000D.00000003.435876554.000001A42CB7E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB7E000
Size:	4096

Details

Name:	00000005.00000003.367189106.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000009.00000002.415250399.00007DF522060000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF522060000
Size:	12288

Details

Name:	00000003.00000003.544986200.000000000336B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	336B000
Size:	147456

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000003.447753553.000001A42CB7D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB7D000
Size:	20480

Details

Name:	00000004.00000003.406703192.00000000004A4000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A4000
Size:	24576

Details

Name:	00000007.00000002.383988953.0000003BEB4FE000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3BEB4FE000
Size:	8192

Details

Name:	00000004.00000003.771141976.000000000052C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	52C000
Size:	24576

Details

Name:	00000004.00000002.817408973.00000000028C1000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28C1000
Size:	32768

Details

Name:	00000005.00000002.819178945.000000007F3C0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F3C0000
Size:	12288

Details

Name:	0000000D.00000003.438988740.000001A42CB86000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB86000
Size:	4096

Details

Name:	0000000D.00000003.441300056.000001A42CB86000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB86000
Size:	61440

Details

Name:	00000003.00000003.617853246.00000000057CA000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	57CA000
Size:	4096

Details

Name:	00000005.00000003.378415888.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000003.00000002.815594989.0000000002A36000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A36000
Size:	16384

Details

Name:	00000003.00000003.592903288.0000000003356000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3356000
Size:	81920

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.639500542.000000000336B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	336B000
Size:	147456

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000002.459714394.00007FF595D15000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595D15000
Size:	20480

Details

Name:	00000004.00000003.799817083.00000000004AB000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4AB000
Size:	24576

Details

Name:	0000000D.00000002.458740247.00000089160FE000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	89160FE000
Size:	8192

Details

Name:	0000000D.00000002.458780978.000000891667E000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	891667E000
Size:	8192

Details

Name:	00000009.00000003.414703057.000002205DC48000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2205DC48000
Size:	8192

Details

Name:	00000003.00000003.709207196.00000000033CE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33CE000
Size:	4096

Details

Name:	00000005.00000003.422316346.00000000036F1000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36F1000
Size:	12288

Details

Name:	00000003.00000003.521482685.0000000005C27000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C27000
Size:	16384

Details

Name:	00000000.00000002.816662275.00000000016D0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	16D0000
Size:	65536

Details

Name:	00000004.00000003.384959254.0000000004D0A000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4D0A000
Size:	4096

Details

Name:	00000003.00000002.817867970.0000000005B5F000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5B5F000
Size:	4096

Details

Name:	00000003.00000002.815356290.00000000029F6000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29F6000
Size:	8192

Details

Name:	00000000.00000002.816337766.0000000001490000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1490000
Size:	4096

Details

Name:	00000005.00000003.632803576.00000000036F4000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36F4000
Size:	24576

Details

Name:	00000004.00000003.497464284.00000000004B1000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B1000
Size:	278528

Details

Name:	00000004.00000002.818140471.00000000048AD000.00000004.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	48AD000
Size:	8192

Details

Name:	0000000D.00000003.447312675.000001A42CB9F000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB9F000
Size:	200704

Details

Name:	00000007.00000002.384582121.00007FF583B11000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF583B11000
Size:	12288

Details

Name:	00000000.00000002.814993365.0000000000BD0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	BD0000
Size:	16384

Details

Name:	00000005.00000002.814909725.0000000002C17000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C17000
Size:	20480

Details

Name:	00000007.00000002.384619782.00007FF583B6F000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF583B6F000
Size:	8192

Details

Name:	0000000D.00000003.440544400.000001A42CB89000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB89000
Size:	32768

Details

Name:	00000001.00000002.305229679.00007FF4F5B89000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5B89000
Size:	12288

Details

Name:	00000005.00000003.657233598.00000000036A5000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A5000
Size:	94208

Details

Name:	00000000.00000003.773759461.0000000001256000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1256000
Size:	4096

Details

Name:	00000007.00000002.384867872.00007FF583D44000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF583D44000
Size:	20480

Details

Name:	00000004.00000003.799723595.0000000005128000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5128000
Size:	12288

Details

Name:	00000005.00000003.512026590.0000000003688000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3688000
Size:	102400

Details

Name:	00000007.00000003.383796088.000001FC1F67B000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FC1F67B000
Size:	36864

Details

Name:	00000003.00000003.706731046.0000000003353000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3353000
Size:	4096

Details

Name:	00000005.00000003.799467282.000000000367D000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	367D000
Size:	16384

Details

Name:	00000003.00000002.817411633.0000000003750000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3750000
Size:	4096

Details

Name:	00000004.00000002.818178099.0000000004910000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4910000
Size:	77824

Details

Name:	0000000D.00000002.459596240.00007FF595B87000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595B87000
Size:	12288

Details

Name:	00000000.00000003.495583774.0000000001265000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1265000
Size:	4096

Details

Name:	00000000.00000002.815074407.0000000000C62000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C62000
Size:	8192

Details

Name:	00000003.00000002.818548506.000000007F500000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F500000
Size:	20480

Details

Name:	00000001.00000003.303591105.000002255D849000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2255D849000
Size:	8192

Details

Name:	00000004.00000003.501240924.0000000004984000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4984000
Size:	4096

Details

Name:	00000003.00000003.639563370.0000000003350000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3350000
Size:	4096

Details

Name:	00000005.00000002.815336812.0000000002C96000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C96000
Size:	16384

Details

Name:	00000005.00000003.381765393.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000009.00000002.415391437.00007FF51423B000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51423B000
Size:	24576

Details

Name:	00000004.00000003.451717228.000000000512F000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	512F000
Size:	20480

Details

Name:	0000000D.00000003.441345026.000001A42CBA8000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CBA8000
Size:	122880

Details

Name:	0000000D.00000002.458791561.000001A42C150000.00000004.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1A42C150000
Size:	4096

Details

Name:	00000003.00000002.817293782.00000000033B8000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	33B8000
Size:	4096

Details

Name:	00000004.00000003.406662849.00000000004F6000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F6000
Size:	45056

Details

Name:	00000000.00000003.704410764.000000000433B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	433B000
Size:	409600

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.406575722.000000000332D000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	332D000
Size:	8192

Details

Name:	00000007.00000002.384074099.000001FC1F4B0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FC1F4B0000
Size:	4096

Details

Name:	00000005.00000003.360993429.00000000033F0000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	33F0000
Size:	4096

Details

Name:	00000003.00000000.293156788.000000007F602000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F602000
Size:	4096

Details

Name:	00000004.00000002.818466434.0000000005120000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5120000
Size:	45056

Details

Name:	0000000D.00000002.459165301.000001A42C2F7000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42C2F7000
Size:	40960

Details

Name:	00000005.00000003.565353047.0000000005FAD000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5FAD000
Size:	16384

Details

Name:	00000004.00000002.817357020.00000000028AF000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28AF000
Size:	16384

Details

Name:	00000005.00000003.610630412.00000000036F4000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36F4000
Size:	24576

Details

Name:	00000013.00000002.815785808.0000024894B40000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24894B40000
Size:	4096

Details

Name:	00000003.00000003.429535048.00000000033CE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33CE000
Size:	4096

Details

Name:	00000003.00000003.406504040.000000000338E000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	338E000
Size:	4096

Details

Name:	00000005.00000003.370679151.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000004.00000003.732975735.0000000004984000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4984000
Size:	4096

Details

Name:	00000005.00000003.706505666.0000000003676000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3676000
Size:	24576

Details

Name:	00000004.00000000.293542248.00000000028E8000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	28E8000
Size:	16384

Details

Name:	00000007.00000002.384648969.00007FF583BCC000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF583BCC000
Size:	4096

Details

Name:	00000005.00000002.815585904.0000000002D1B000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D1B000
Size:	36864

Details

Name:	00000004.00000002.818750808.0000000010005000.00000040.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute and read and write
Base address:	10005000
Size:	40960

Details

Name:	00000003.00000003.684742970.00000000033C3000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33C3000
Size:	16384

Details

Name:	0000000D.00000002.459795819.00007FF595DCD000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595DCD000
Size:	4096

Details

Name:	00000001.00000002.304673350.00007FF4F5ABF000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5ABF000
Size:	12288

Details

Name:	00000004.00000003.501226040.0000000004911000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4911000
Size:	73728

Details

Name:	00000005.00000003.362224773.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000003.00000000.293179391.000000007F620000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F620000
Size:	12288

Details

Name:	00000003.00000003.496869314.0000000003332000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3332000
Size:	28672

Details

Name:	00000005.00000002.818915343.00000000060C0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	60C0000
Size:	4096

Details

Name:	00000003.00000002.815091029.00000000029B7000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29B7000
Size:	20480

Details

Name:	00000005.00000003.378282244.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000000.00000003.498809155.0000000001263000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1263000
Size:	98304

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000003.490352889.00000000036A2000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A2000
Size:	106496

Details

Name:	0000000D.00000002.459643089.00007FF595C1F000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595C1F000
Size:	4096

Details

Name:	00000005.00000003.539442798.00000000036A4000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A4000
Size:	98304

Details

Name:	00000000.00000003.498865125.0000000003791000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3791000
Size:	73728

Details

Name:	00000000.00000003.796394553.0000000001256000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1256000
Size:	4096

Details

Name:	00000003.00000003.544842812.0000000005C47000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C47000
Size:	16384

Details

Name:	0000000E.00000002.445916948.0000024131550000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24131550000
Size:	12288

Details

Name:	00000005.00000002.816205609.00000000035E0000.00000004.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	35E0000
Size:	4096

Details

Name:	0000000D.00000003.458555364.000001A42C25D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42C25D000
Size:	8192

Details

Name:	0000000E.00000002.446239977.00007FF539899000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539899000
Size:	12288

Details

Name:	00000013.00000002.816867032.00007FF56555D000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56555D000
Size:	8192

Details

Name:	00000003.00000002.814917375.0000000000CE0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	CE0000
Size:	16384

Details

Name:	00000005.00000003.746542019.00000000036BD000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36BD000
Size:	253952

Details

Name:	00000004.00000003.590354560.0000000000537000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	537000
Size:	4096

Details

Name:	00000005.00000003.490183398.00000000036E6000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36E6000
Size:	20480

Details

Name:	00000005.00000003.490261736.00000000036BD000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36BD000
Size:	36864

Details

Name:	00000009.00000002.415296528.00007FF513EC1000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF513EC1000
Size:	20480

Details

Name:	00000004.00000003.754851186.000000000051C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C000
Size:	53248

Details

Name:	00000005.00000003.365592173.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000000.00000003.471912642.000000000126D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	126D000
Size:	4096

Details

Name:	00000003.00000003.429610522.00000000033B2000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B2000
Size:	20480

Details

Name:	0000000E.00000002.446220679.00007FF53983A000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53983A000
Size:	8192

Details

Name:	00000005.00000003.539456908.00000000036BD000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36BD000
Size:	36864

Details

Name:	00000003.00000003.499972037.0000000005441000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5441000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000009.00000002.415400018.00007FF51424C000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51424C000
Size:	4096

Details

Name:	00000004.00000003.451729404.0000000000518000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	518000
Size:	12288

Details

Name:	00000003.00000002.817647406.0000000004F5D000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	4F5D000
Size:	8192

Details

Name:	00000004.00000003.384823268.0000000004D0C000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4D0C000
Size:	4096

Details

Name:	00000003.00000003.684520439.00000000033BA000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33BA000
Size:	4096

Details

Name:	00000003.00000003.684232105.0000000005C7D000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C7D000
Size:	4096

Details

Name:	0000000D.00000002.458768631.000000891647A000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	891647A000
Size:	24576

Details

Name:	00000004.00000003.662628383.0000000000545000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	545000
Size:	12288

Details

Name:	0000000D.00000002.459356298.000001A42CB4E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB4E000
Size:	57344

Details

Name:	00000004.00000003.384927190.0000000004C89000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4C89000
Size:	77824

Details

Name:	00000013.00000002.816608488.00007FF5654EF000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5654EF000
Size:	12288

Details

Name:	00000004.00000003.590708591.0000000000536000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	536000
Size:	4096

Details

Name:	00000003.00000003.617823228.00000000057CB000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	57CB000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000002.816158825.000000000359C000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	359C000
Size:	16384

Details

Name:	00000005.00000003.543818780.00000000057F1000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	57F1000
Size:	73728

Details

Name:	00000005.00000003.376942150.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000005.00000003.444004394.00000000036A2000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A2000
Size:	8192

Details

Name:	00000005.00000003.800936660.0000000005BEB000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5BEB000
Size:	4096

Details

Name:	00000003.00000002.817365411.00000000035D0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	35D0000
Size:	65536

Details

Name:	00000009.00000002.414984895.000002205DAD0000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2205DAD0000
Size:	102400

Details

Name:	00000003.00000003.429597789.0000000003390000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3390000
Size:	131072

Details

Name:	00000005.00000003.751761947.0000000005FB1000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5FB1000
Size:	794624

Details

Name:	00000004.00000003.771243126.00000000004F6000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F6000
Size:	36864

Details

Name:	00000003.00000003.499992217.00000000057CA000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	57CA000
Size:	4096

Details

Name:	00000004.00000003.590426582.00000000004B1000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B1000
Size:	278528

Details

Name:	00000005.00000003.375301899.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000005.00000003.746586044.0000000003676000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3676000
Size:	24576

Details

Name:	00000004.00000003.708577351.000000000053F000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	53F000
Size:	4096

Details

Name:	00000009.00000002.415470461.00007FF514303000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF514303000
Size:	12288

Details

Name:	00000005.00000002.818664083.0000000005FAC000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5FAC000
Size:	4096

Details

Name:	00000003.00000003.406000646.000000000333F000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	333F000
Size:	77824

Details

Name:	00000003.00000003.684600817.000000000336B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	336B000
Size:	147456

Details

Name:	0000000D.00000003.438635792.000001A42CBA2000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CBA2000
Size:	147456

Details

Name:	00000003.00000002.817892047.0000000005BA0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5BA0000
Size:	4096

Details

Name:	00000003.00000003.544877193.00000000033CE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33CE000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000002.814808223.0000000002B07000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B07000
Size:	4096

Details

Name:	00000003.00000002.817810264.00000000058DD000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	58DD000
Size:	12288

Details

Name:	00000005.00000002.816179009.00000000035DC000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	35DC000
Size:	16384

Details

Name:	00000004.00000003.497149579.0000000004911000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4911000
Size:	475136

Details

Name:	00000009.00000002.415072479.000002205DC54000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2205DC54000
Size:	8192

Details

Name:	0000000D.00000003.458516444.000001A42C27D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42C27D000
Size:	8192

Details

Name:	00000003.00000003.733637703.00000000057CC000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	57CC000
Size:	4096

Details

Name:	00000005.00000003.468319853.000000000367D000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	367D000
Size:	16384

Details

Name:	00000003.00000003.451390038.00000000033CE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33CE000
Size:	4096

Details

Name:	00000004.00000003.754743838.00000000004F6000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F6000
Size:	143360

Details

Name:	00000013.00000002.815806325.0000024894D40000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24894D40000
Size:	12288

Details

Name:	0000000D.00000003.447246596.000001A42D002000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42D002000
Size:	159744

Details

Name:	00000005.00000002.815056180.0000000002C56000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C56000
Size:	8192

Details

Name:	00000005.00000003.369809534.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000005.00000002.818844963.00000000060AA000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	60AA000
Size:	8192

Details

Name:	00000005.00000003.516905864.0000000005FA7000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5FA7000
Size:	40960

Details

Name:	00000005.00000002.815909661.00000000033B0000.00000040.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page execute and read and write
Base address:	33B0000
Size:	61440

Details

Name:	00000004.00000003.754921948.00000000004AB000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4AB000
Size:	24576

Details

Name:	00000007.00000002.384770153.00007FF583C8E000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF583C8E000
Size:	28672

Details

Name:	00000001.00000002.304509099.00007DF4016E0000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4016E0000
Size:	20480

Details

Name:	00000003.00000003.496857726.00000000033CE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33CE000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000003.632834546.00000000036A2000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A2000
Size:	8192

Details

Name:	00000004.00000003.799713818.0000000005292000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5292000
Size:	4096

Details

Name:	00000005.00000003.490242273.00000000036A2000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A2000
Size:	106496

Details

Name:	00000005.00000003.468233833.00000000036E6000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36E6000
Size:	20480

Details

Name:	0000000D.00000002.459225544.000001A42C313000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42C313000
Size:	8192

Details

Name:	00000005.00000003.362949012.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000004.00000003.546502114.000000000051D000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51D000
Size:	45056

Details

Name:	00000000.00000003.704722970.0000000001201000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1201000
Size:	8192

Details

Name:	00000005.00000003.385147244.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000004.00000002.818638389.0000000005241000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5241000
Size:	12288

Details

Name:	00000004.00000002.818002655.00000000047E0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	47E0000
Size:	12288

Details

Name:	00000003.00000003.588735326.0000000003332000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3332000
Size:	28672

Details

Name:	00000005.00000003.746621130.00000000036BD000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36BD000
Size:	253952

Details

Name:	00000005.00000003.361942512.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000005.00000003.361476169.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000005.00000002.818512743.0000000005F1C000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5F1C000
Size:	16384

Details

Name:	0000000D.00000002.458905561.000001A42C23C000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42C23C000
Size:	126976

Details

Name:	00000004.00000003.384893769.000000000051E000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51E000
Size:	4096

Details

Name:	00000009.00000002.414947928.000000FF5AD7C000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	FF5AD7C000
Size:	16384

Details

Name:	0000000D.00000003.447796258.000001A42CB8C000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB8C000
Size:	8192

Details

Name:	00000003.00000003.499858332.00000000033B8000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B8000
Size:	4096

Details

Name:	0000000D.00000002.458775862.000000891657E000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	891657E000
Size:	8192

Details

Name:	00000000.00000002.817606997.00000000043A0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	43A0000
Size:	4096

Details

Name:	00000000.00000003.680057492.000000000127E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	127E000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000009.00000002.415521740.00007FF514357000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF514357000
Size:	8192

Details

Name:	00000004.00000003.546141238.00000000004B1000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B1000
Size:	278528

Details

Name:	00000003.00000002.817907193.0000000005C20000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5C20000
Size:	4096

Details

Name:	00000004.00000003.754688967.0000000000533000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	533000
Size:	4096

Details

Name:	00000004.00000003.662888198.00000000004A4000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A4000
Size:	24576

Details

Name:	00000005.00000003.490301827.0000000003672000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3672000
Size:	4096

Details

Name:	00000007.00000002.384273891.000001FC1F800000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FC1F800000
Size:	4096

Details

Name:	00000000.00000003.471899734.000000000125A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	125A000
Size:	32768

Details

Name:	00000003.00000003.588708761.00000000033C3000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33C3000
Size:	4096

Details

Name:	00000007.00000002.383968292.0000003BEB27E000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3BEB27E000
Size:	8192

Details

Name:	00000013.00000002.815939466.00000248954E0000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	248954E0000
Size:	65536

Details

Name:	00000004.00000003.799802139.00000000004A0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A0000
Size:	4096

Details

Name:	00000004.00000003.708428370.0000000005127000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5127000
Size:	16384

Details

Name:	00000005.00000002.818022056.0000000005390000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5390000
Size:	4096

Details

Name:	00000001.00000002.304564498.00007FF4F5835000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5835000
Size:	8192

Details

Name:	00000004.00000003.546082911.0000000000537000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	537000
Size:	32768

Details

Name:	0000000D.00000003.436877942.000001A42CBA6000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CBA6000
Size:	90112

Details

Name:	0000000E.00000002.445976866.0000024131790000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24131790000
Size:	8192

Details

Name:	00000000.00000003.729256179.000000000126A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	126A000
Size:	69632

Details

Name:	00000005.00000002.816099987.000000000354E000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	354E000
Size:	8192

Details

Name:	0000000D.00000003.441358702.000001A42CB86000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB86000
Size:	61440

Details

Name:	00000007.00000002.384690655.00007FF583C57000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF583C57000
Size:	4096

Details

Name:	00000004.00000002.816880975.00000000026FE000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26FE000
Size:	12288

Details

Name:	00000001.00000002.305208276.00007FF4F5B03000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5B03000
Size:	24576

Details

Name:	00000004.00000002.817022890.00000000027E1000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27E1000
Size:	16384

Details

Name:	0000000D.00000002.458937472.000001A42C261000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42C261000
Size:	12288

Details

Name:	00000001.00000002.304557721.00007FF4F5697000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5697000
Size:	32768

Details

Name:	00000000.00000002.816306804.000000000147E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	147E000
Size:	8192

Details

Name:	00000003.00000003.496814953.00000000057CB000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	57CB000
Size:	8192

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000003.590565326.00000000004F6000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F6000
Size:	151552

Details

Name:	00000005.00000003.468381250.00000000036A4000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A4000
Size:	98304

Details

Name:	0000000E.00000002.445995850.00000241317F0000.00000004.00000040.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	241317F0000
Size:	12288

Details

Name:	00000009.00000002.415010184.000002205DC00000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2205DC00000
Size:	73728

Details

Name:	00000005.00000003.777725502.00000000057F1000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	57F1000
Size:	73728

Details

Name:	00000000.00000002.817398244.0000000003B8D000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3B8D000
Size:	12288

Details

Name:	0000000E.00000002.446284788.00007FF5398BA000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5398BA000
Size:	4096

Details

Name:	00000005.00000003.751988171.0000000005BEC000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5BEC000
Size:	4096

Details

Name:	0000000D.00000002.459270130.000001A42C970000.00000008.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page write copy
Base address:	1A42C970000
Size:	266240

Details

Name:	00000013.00000002.815203780.00000248945D0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	248945D0000
Size:	12288

Details

Name:	00000004.00000002.817817028.0000000004720000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	4720000
Size:	733184

Details

Name:	00000005.00000003.370814640.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000003.00000003.496893278.0000000003355000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3355000
Size:	86016

Details

Name:	00000004.00000003.771192696.00000000004B2000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B2000
Size:	274432

Details

Name:	0000000D.00000002.459590482.00007FF595B45000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595B45000
Size:	8192

Details

Name:	00000007.00000002.384354923.00007DF5919D0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5919D0000
Size:	4096

Details

Name:	00000005.00000003.362676335.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000005.00000003.490334221.0000000003688000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3688000
Size:	102400

Details

Name:	00000005.00000002.816936269.00000000036BD000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	36BD000
Size:	249856

Details

Name:	00000005.00000003.364685325.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000003.00000003.662683335.00000000057CB000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	57CB000
Size:	4096

Details

Name:	00000004.00000002.817228314.000000000283D000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	283D000
Size:	32768

Details

Name:	00000004.00000002.816935378.00000000027C7000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27C7000
Size:	20480

Details

Name:	00000004.00000003.546068551.0000000000530000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	530000
Size:	4096

Details

Name:	00000004.00000003.406523630.000000000051E000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51E000
Size:	4096

Details

Name:	00000004.00000002.818160717.00000000048AF000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	48AF000
Size:	4096

Details

Name:	00000013.00000002.816086755.00007DF573260000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF573260000
Size:	12288

Details

Name:	00000005.00000002.815866864.0000000003380000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3380000
Size:	16384

Details

Name:	00000009.00000002.415592168.00007FF5143C4000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5143C4000
Size:	20480

Details

Name:	00000009.00000002.415372388.00007FF5141CB000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5141CB000
Size:	8192

Details

Name:	00000004.00000002.815146110.00000000001F0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F0000
Size:	8192

Details

Name:	0000000D.00000003.447773007.000001A42CB86000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB86000
Size:	12288

Details

Name:	0000000D.00000002.459617473.00007FF595BCB000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595BCB000
Size:	8192

Details

Name:	00000005.00000003.377009872.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000003.00000003.406591960.000000000333A000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	333A000
Size:	20480

Details

Name:	00000004.00000003.522821902.00000000004F6000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F6000
Size:	151552

Details

Name:	0000000D.00000002.459915779.00007FF595E99000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595E99000
Size:	12288

Details

Name:	0000000E.00000002.445970834.0000024131770000.00000004.00000001.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24131770000
Size:	8192

Details

Name:	00000001.00000002.305233008.00007FF4F5B94000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5B94000
Size:	20480

Details

Name:	00000003.00000003.591540186.00000000033C5000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33C5000
Size:	8192

Details

Name:	00000005.00000003.443949856.0000000003714000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3714000
Size:	4096

Details

Name:	00000004.00000003.546058500.00000000051A3000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51A3000
Size:	4096

Details

Name:	00000004.00000003.568350387.0000000000539000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	539000
Size:	32768

Details

Name:	00000009.00000002.415146974.000002205DD02000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2205DD02000
Size:	16384

Details

Name:	00000003.00000003.709179952.00000000033BD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33BD000
Size:	8192

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000003.468422423.00000000036C7000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36C7000
Size:	126976

Details

Name:	0000000E.00000002.446197938.00007FF5397EE000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5397EE000
Size:	4096

Details

Name:	00000004.00000000.293548474.000000007FDD0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FDD0000
Size:	4096

Details

Name:	00000005.00000003.539212141.00000000036ED000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36ED000
Size:	28672

Details

Name:	00000004.00000003.708598070.0000000000546000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	546000
Size:	8192

Details

Name:	0000000E.00000002.446186450.00007FF5397E7000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5397E7000
Size:	16384

Details

Name:	00000005.00000003.382268866.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000004.00000003.662325266.0000000005248000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5248000
Size:	32768

Details

Name:	00000004.00000002.816488613.0000000000740000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	740000
Size:	20480

Details

Name:	0000000D.00000002.459142360.000001A42C2E3000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42C2E3000
Size:	32768

Details

Name:	00000009.00000002.415323174.00007FF514065000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF514065000
Size:	8192

Details

Name:	00000003.00000003.429550302.0000000003355000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3355000
Size:	86016

Details

Name:	00000004.00000003.522788662.00000000004B3000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B3000
Size:	270336

Details

Name:	00000000.00000001.301106188.0000000010000000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	10000000
Size:	4096

Details

Name:	00000005.00000002.819136235.000000007F3B0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F3B0000
Size:	4096

Details

Name:	00000009.00000002.415611796.00007FF5143E1000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5143E1000
Size:	16384

Details

Name:	00000005.00000003.371482878.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000004.00000003.451741254.000000000051E000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51E000
Size:	12288

Details

Name:	00000005.00000003.728307914.00000000036A2000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A2000
Size:	8192

Details

Name:	00000005.00000003.370280660.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	0000000E.00000002.445811528.000000E6DB47A000.00000004.00000001.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E6DB47A000
Size:	24576

Details

Name:	00000005.00000003.512017150.0000000003681000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3681000
Size:	24576

Details

Name:	00000003.00000003.496989791.0000000003390000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3390000
Size:	163840

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000002.459803423.00007FF595DCF000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595DCF000
Size:	12288

Details

Name:	00000004.00000003.501161226.00000000004F6000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F6000
Size:	151552

Details

Name:	00000004.00000002.816401864.00000000006B0000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	6B0000
Size:	4096

Details

Name:	00000000.00000003.382591333.000000000124B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	124B000
Size:	4096

Details

Name:	00000009.00000002.415078393.000002205DC57000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2205DC57000
Size:	81920

Details

Name:	00000000.00000002.816537430.00000000014C0000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	14C0000
Size:	16384

Details

Name:	00000000.00000002.817444531.0000000003FDE000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3FDE000
Size:	8192

Details

Name:	00000005.00000003.468396099.00000000036BD000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36BD000
Size:	36864

Details

Name:	00000000.00000003.729245643.0000000004307000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4307000
Size:	4096

Details

Name:	00000005.00000003.610681146.00000000036A2000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A2000
Size:	106496

Details

Name:	00000013.00000002.816833147.00007FF56555A000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56555A000
Size:	8192

Details

Name:	0000000D.00000000.431911996.00007DF5A3B40000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A3B40000
Size:	12288

Details

Name:	00000004.00000003.754829296.000000000051A000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51A000
Size:	4096

Details

Name:	00000003.00000002.817879525.0000000005B9C000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5B9C000
Size:	16384

Details

Name:	00000003.00000002.815205341.00000000029BF000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29BF000
Size:	8192

Details

Name:	0000000D.00000002.459396228.000001A42CB86000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB86000
Size:	4096

Details

Name:	0000000D.00000002.459921739.00007FF595EA4000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595EA4000
Size:	20480

Details

Name:	00000005.00000003.512113357.00000000036EE000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36EE000
Size:	24576

Details

Name:	00000003.00000003.521524021.0000000003332000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3332000
Size:	28672

Details

Name:	00000005.00000003.705172888.0000000003700000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3700000
Size:	32768

Details

Name:	0000000D.00000002.459728034.00007FF595D2C000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595D2C000
Size:	4096

Details

Name:	00000005.00000003.381899717.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000005.00000002.815760852.0000000002FEC000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2FEC000
Size:	16384

Details

Name:	00000003.00000002.816125818.00000000030F5000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	30F5000
Size:	16384

Details

Name:	0000000E.00000003.445447919.00000241316A0000.00000004.00000001.sdmp
TargetID:	14
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	241316A0000
Size:	61440

Details

Name:	00000013.00000002.816442301.00007FF56537A000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56537A000
Size:	12288

Details

Name:	00000004.00000000.293557549.000000007FDE2000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FDE2000
Size:	4096

Details

Name:	00000000.00000003.379111109.0000000003710000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3710000
Size:	4096

Details

Name:	00000005.00000003.371349489.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000001.00000003.303505121.000002255D86A000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2255D86A000
Size:	73728

Details

Name:	00000004.00000003.430075620.00000000004A0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A0000
Size:	4096

Details

Name:	00000000.00000003.428795418.0000000001256000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1256000
Size:	4096

Details

Name:	0000000D.00000003.438137157.000001A42CB7E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB7E000
Size:	16384

Details

Name:	00000003.00000003.588850120.000000000336B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	336B000
Size:	147456

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.588757872.0000000003350000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3350000
Size:	4096

Details

Name:	00000000.00000002.817457342.00000000040DF000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	40DF000
Size:	4096

Details

Name:	00000013.00000000.545561455.00007FF5655E1000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5655E1000
Size:	16384

Details

Name:	0000000E.00000002.446265094.00007FF5398B1000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5398B1000
Size:	12288

Details

Name:	00000005.00000003.799450796.0000000003670000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3670000
Size:	12288

Details

Name:	00000005.00000003.773760394.0000000005BEB000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5BEB000
Size:	4096

Details

Name:	00000004.00000003.799780024.000000000052C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	52C000
Size:	28672

Details

Name:	00000003.00000003.591091600.00000000057CC000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	57CC000
Size:	4096

Details

Name:	00000013.00000000.545490554.00007DF573250000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF573250000
Size:	4096

Details

Name:	00000000.00000003.773665013.0000000001201000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1201000
Size:	221184

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000E.00000002.446078491.00007DF547520000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF547520000
Size:	4096

Details

Name:	00000005.00000003.388798074.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000003.00000003.379191295.0000000003333000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3333000
Size:	49152

Details

Name:	00000001.00000002.304332957.000002255D6A0000.00000004.00000040.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2255D6A0000
Size:	4096

Details

Name:	0000000D.00000003.435601130.000001A42CB90000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB90000
Size:	131072

Details

Name:	00000007.00000002.384750471.00007FF583C83000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF583C83000
Size:	12288

Details

Name:	00000004.00000003.733068733.000000000051C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C000
Size:	53248

Details

Name:	00000004.00000003.406485391.000000000052A000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	52A000
Size:	8192

Details

Name:	00000003.00000003.406330832.000000000336B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	336B000
Size:	139264

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000001.00000002.304738420.00007FF4F5AD0000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5AD0000
Size:	4096

Details

Name:	00000005.00000003.660618928.0000000003714000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3714000
Size:	4096

Details

Name:	00000003.00000003.544894430.000000000333A000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	333A000
Size:	86016

Details

Name:	00000004.00000002.817787179.00000000046C8000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	46C8000
Size:	4096

Details

Name:	00000005.00000003.632882028.00000000036ED000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36ED000
Size:	28672

Details

Name:	00000013.00000002.817050478.00007FF5655E1000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5655E1000
Size:	16384

Details

Name:	0000000D.00000002.458731779.0000008915FF7000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8915FF7000
Size:	36864

Details

Name:	00000005.00000003.746465409.00000000036FF000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36FF000
Size:	32768

Details

Name:	00000003.00000002.818700691.000000007F620000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F620000
Size:	12288

Details

Name:	00000013.00000002.815744121.0000024894930000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24894930000
Size:	4096

Details

Name:	00000005.00000003.660656884.0000000005BEB000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5BEB000
Size:	8192

Details

Name:	00000000.00000003.498826036.000000000127E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	127E000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000002.815273541.0000000002C7F000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C7F000
Size:	24576

Details

Name:	00000003.00000003.566934195.0000000003354000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3354000
Size:	4096

Details

Name:	00000005.00000002.814950092.0000000002C2E000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C2E000
Size:	8192

Details

Name:	00000004.00000003.568367243.00000000004B1000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B1000
Size:	278528

Details

Name:	00000003.00000000.293110052.0000000000CC0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	CC0000
Size:	102400

Details

Name:	00000003.00000003.566778642.00000000033C3000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33C3000
Size:	4096

Details

Name:	00000004.00000003.473558397.000000000512F000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	512F000
Size:	20480

Details

Name:	0000000D.00000003.440478589.000001A42CB7A000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB7A000
Size:	8192

Details

Name:	00000004.00000003.706401553.0000000005292000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5292000
Size:	4096

Details

Name:	00000005.00000000.294595894.000000007F3B2000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F3B2000
Size:	4096

Details

Name:	00000013.00000002.814869640.0000009A095F9000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	9A095F9000
Size:	28672

Details

Name:	00000004.00000002.815631807.00000000004A0000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	4A0000
Size:	4096

Details

Name:	00000013.00000002.816702122.00007FF565500000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF565500000
Size:	4096

Details

Name:	00000003.00000003.706554074.000000000332E000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	332E000
Size:	4096

Details

Name:	00000000.00000003.498892395.0000000003804000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3804000
Size:	4096

Details

Name:	00000007.00000002.384032886.000001FC1F470000.00000004.00000040.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1FC1F470000
Size:	4096

Details

Name:	00000005.00000003.417996892.0000000003670000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3670000
Size:	4096

Details

Name:	00000004.00000002.818072269.00000000048A0000.00000004.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	48A0000
Size:	4096

Details

Name:	00000005.00000003.422258809.00000000036F8000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36F8000
Size:	118784

Details

Name:	00000005.00000003.443983444.0000000003681000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3681000
Size:	131072

Details

Name:	00000000.00000000.291475420.000000007F282000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F282000
Size:	4096

Details

Name:	00000000.00000002.815804284.0000000001201000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1201000
Size:	8192

Details

Name:	00000009.00000002.415171600.000002205DD13000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2205DD13000
Size:	12288

Details

Name:	00000007.00000000.367847642.00007DF5919E0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5919E0000
Size:	12288

Details

Name:	00000005.00000002.818699736.0000000005FAE000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5FAE000
Size:	12288

Details

Name:	00000003.00000003.617748290.0000000005C4C000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C4C000
Size:	204800

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000001.00000002.304578464.00007FF4F5980000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5980000
Size:	4096

Details

Name:	00000005.00000002.814893483.0000000002B4E000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B4E000
Size:	12288

Details

Name:	00000000.00000003.796372620.0000000001242000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1242000
Size:	49152

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000002.818345465.0000000005D20000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5D20000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000003.422305074.00000000036E7000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36E7000
Size:	12288

Details

Name:	00000013.00000000.545511476.00007DF573260000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF573260000
Size:	12288

Details

Name:	00000003.00000003.706835740.0000000003390000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3390000
Size:	135168

Details

Name:	00000005.00000003.512086231.00000000036BD000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36BD000
Size:	36864

Details

Name:	00000007.00000002.384200638.000001FC1F65D000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FC1F65D000
Size:	73728

Details

Name:	00000005.00000003.371151782.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000003.00000003.544865127.00000000033C5000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33C5000
Size:	4096

Details

Name:	00000005.00000003.364535501.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000005.00000002.818985481.0000000010000000.00000040.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute and read and write
Base address:	10000000
Size:	16384

Details

Name:	00000013.00000002.816049324.00007DF573250000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF573250000
Size:	4096

Details

Name:	0000000D.00000003.445435201.000001A42CB8A000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB8A000
Size:	425984

Details

Name:	00000004.00000003.662414867.00000000004F6000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F6000
Size:	151552

Details

Name:	00000005.00000003.370750557.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000005.00000003.377848237.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000007.00000002.384762689.00007FF583C87000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF583C87000
Size:	16384

Details

Name:	00000013.00000002.816241096.00007FF564DFA000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF564DFA000
Size:	4096

Details

Name:	0000000D.00000002.459721040.00007FF595D1B000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595D1B000
Size:	24576

Details

Name:	00000003.00000003.617787008.0000000005C49000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C49000
Size:	12288

Details

Name:	00000003.00000002.818600707.000000007F600000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F600000
Size:	4096

Details

Name:	00000001.00000002.304410916.000002255D84A000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2255D84A000
Size:	4096

Details

Name:	00000005.00000003.588819940.0000000005FB0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5FB0000
Size:	4096

Details

Name:	0000000D.00000003.447789333.000001A42CB8A000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB8A000
Size:	4096

Details

Name:	00000000.00000002.817754126.000000007F280000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F280000
Size:	4096

Details

Name:	00000007.00000002.384168344.000001FC1F627000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FC1F627000
Size:	4096

Details

Name:	00000003.00000002.815311583.00000000029DF000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29DF000
Size:	20480

Details

Name:	00000003.00000003.544941795.0000000003354000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3354000
Size:	4096

Details

Name:	00000000.00000003.729228700.00000000042C4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	42C4000
Size:	73728

Details

Name:	0000000D.00000002.459541691.00007FF595827000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595827000
Size:	12288

Details

Name:	00000003.00000003.496972790.000000000336B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	336B000
Size:	147456

Details

Name:	00000001.00000002.304304278.000000A5E84FE000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A5E84FE000
Size:	8192

Details

Name:	0000000D.00000002.458759941.000000891637A000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	891637A000
Size:	24576

Details

Name:	00000001.00000002.304502675.000002255DE60000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2255DE60000
Size:	4096

Details

Name:	00000007.00000003.383808258.000001FC1F64C000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FC1F64C000
Size:	65536

Details

Name:	00000004.00000003.754706017.00000000004B1000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B1000
Size:	278528

Details

Name:	0000000D.00000002.459377726.000001A42CB6B000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB6B000
Size:	65536

Details

Name:	00000003.00000003.588695874.00000000033B8000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B8000
Size:	28672

Details

Name:	00000003.00000003.709159616.0000000003390000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3390000
Size:	155648

Details

Name:	00000003.00000003.473312936.0000000003332000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3332000
Size:	28672

Details

Name:	0000000D.00000003.458544703.000001A42C260000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42C260000
Size:	16384

Details

Name:	00000001.00000002.305224577.00007FF4F5B82000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5B82000
Size:	12288

Details

Name:	00000003.00000002.816954193.000000000333A000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	333A000
Size:	196608

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000001.00000002.304371640.000002255D800000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2255D800000
Size:	73728

Details

Name:	00000004.00000003.754636947.0000000005292000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5292000
Size:	4096

Details

Name:	0000000D.00000000.431871489.000001A42C170000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A42C170000
Size:	102400

Details

Name:	00000001.00000002.305248021.00007FF4F5BB1000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5BB1000
Size:	16384

Details

Name:	00000003.00000002.817639946.0000000004F5C000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	4F5C000
Size:	4096

Details

Name:	00000004.00000003.706411057.0000000005127000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5127000
Size:	16384

Details

Name:	00000003.00000003.429620091.000000000332E000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	332E000
Size:	4096

Details

Name:	00000000.00000002.817647882.0000000010005000.00000040.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute and read and write
Base address:	10005000
Size:	40960

Details

Name:	00000003.00000003.707138133.00000000033BE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33BE000
Size:	4096

Details

Name:	00000001.00000002.304585439.00007FF4F59BF000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F59BF000
Size:	8192

Details

Name:	00000004.00000003.799808796.00000000004A4000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A4000
Size:	24576

Details

Name:	00000005.00000002.816267948.00000000035EC000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	35EC000
Size:	4096

Details

Name:	00000004.00000003.380862252.0000000000680000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	680000
Size:	4096

Details

Name:	00000005.00000003.706540851.00000000036F4000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36F4000
Size:	20480

Details

Name:	00000004.00000002.815661607.00000000004AB000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	4AB000
Size:	24576

Details

Name:	00000003.00000000.293168442.000000007F612000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F612000
Size:	4096

Details

Name:	00000005.00000002.819159284.000000007F3B2000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F3B2000
Size:	4096

Details

Name:	0000000D.00000003.436860377.000001A42CBA6000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CBA6000
Size:	90112

Details

Name:	00000000.00000003.680067742.0000000001242000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1242000
Size:	61440

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.545064935.0000000003356000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3356000
Size:	81920

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000003.433798105.000001A42C9E0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42C9E0000
Size:	4096

Details

Name:	00000004.00000003.799854630.00000000004F6000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F6000
Size:	139264

Details

Name:	00000005.00000003.632797109.0000000003714000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3714000
Size:	4096

Details

Name:	00000005.00000003.361219835.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000005.00000003.376206092.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000009.00000000.402416715.00007DF522042000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF522042000
Size:	4096

Details

Name:	00000003.00000002.815938554.0000000002D3C000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2D3C000
Size:	16384

Details

Name:	00000003.00000003.639322312.0000000005C7D000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C7D000
Size:	4096

Details

Name:	0000000E.00000002.446026779.0000024131A00000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24131A00000
Size:	65536

Details

Name:	00000007.00000002.383973043.0000003BEB37B000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3BEB37B000
Size:	20480

Details

Name:	0000000E.00000002.446180708.00007FF5397E3000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5397E3000
Size:	12288

Details

Name:	00000005.00000003.610816990.00000000036A4000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A4000
Size:	98304

Details

Name:	00000005.00000003.728268267.0000000003714000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3714000
Size:	4096

Details

Name:	00000000.00000002.816444563.000000000149C000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	149C000
Size:	4096

Details

Name:	00000000.00000003.773607435.000000000127E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	127E000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000003.754806731.000000000052C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	52C000
Size:	16384

Details

Name:	00000003.00000003.379186164.000000000332C000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	332C000
Size:	4096

Details

Name:	00000009.00000002.414942666.000000FF5AC7E000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	FF5AC7E000
Size:	8192

Details

Name:	00000003.00000003.451435125.0000000003355000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3355000
Size:	81920

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000001.00000002.304515864.00007DF503812000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF503812000
Size:	4096

Details

Name:	0000000E.00000000.432855657.00007DF547540000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF547540000
Size:	12288

Details

Name:	00000005.00000002.816329963.00000000035EF000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	35EF000
Size:	4096

Details

Name:	00000004.00000003.662471266.000000000053D000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	53D000
Size:	4096

Details

Name:	00000005.00000003.610610848.0000000003700000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3700000
Size:	20480

Details

Name:	00000005.00000003.657175374.00000000036F5000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36F5000
Size:	4096

Details

Name:	00000004.00000002.818427760.000000000511D000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	511D000
Size:	12288

Details

Name:	00000005.00000003.632810564.0000000005FAF000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5FAF000
Size:	8192

Details

Name:	00000004.00000003.590723048.00000000004A0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A0000
Size:	4096

Details

Name:	00000005.00000003.375000376.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000003.00000003.733529855.0000000005CA3000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5CA3000
Size:	159744

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000003.380551945.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000013.00000002.815972894.0000024895500000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24895500000
Size:	4096

Details

Name:	00000000.00000002.817570388.0000000004307000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4307000
Size:	4096

Details

Name:	00000013.00000002.815679039.0000024894820000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24894820000
Size:	16384

Details

Name:	00000005.00000003.422323511.00000000036A4000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A4000
Size:	98304

Details

Name:	00000005.00000003.362884621.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000001.00000002.304588853.00007FF4F5A05000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5A05000
Size:	20480

Details

Name:	00000004.00000003.754790437.000000000051C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C000
Size:	53248

Details

Name:	00000005.00000003.468354644.00000000036BD000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36BD000
Size:	36864

Details

Name:	00000004.00000003.497497518.00000000004F6000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F6000
Size:	151552

Details

Name:	00000005.00000003.657275668.00000000057F1000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	57F1000
Size:	471040

Details

Name:	00000005.00000003.443957175.0000000005FA7000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5FA7000
Size:	20480

Details

Name:	00000007.00000002.383963524.0000003BEAF9E000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3BEAF9E000
Size:	8192

Details

Name:	00000003.00000003.709138497.000000000336B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	336B000
Size:	147456

Details

Name:	00000005.00000003.377076879.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000007.00000002.384547654.00007FF5839E5000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5839E5000
Size:	8192

Details

Name:	00000005.00000002.817149807.0000000003701000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	3701000
Size:	32768

Details

Name:	00000009.00000002.415092406.000002205DC6C000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2205DC6C000
Size:	16384

Details

Name:	00000000.00000002.817074199.000000000303E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	303E000
Size:	8192

Details

Name:	00000005.00000002.816036191.0000000003430000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3430000
Size:	4096

Details

Name:	00000000.00000003.495625474.000000000124F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	124F000
Size:	8192

Details

Name:	00000004.00000002.817134700.0000000002819000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2819000
Size:	32768

Details

Name:	00000004.00000003.406709856.00000000004AB000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4AB000
Size:	24576

Details

Name:	00000003.00000002.814850094.0000000000CC0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	CC0000
Size:	102400

Details

Name:	0000000D.00000003.445382323.000001A42CB9B000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB9B000
Size:	212992

Details

Name:	0000000D.00000003.441318507.000001A42CB97000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB97000
Size:	32768

Details

Name:	00000000.00000002.814950722.0000000000BCC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	BCC000
Size:	16384

Details

Name:	0000000D.00000002.459054654.000001A42C2B0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42C2B0000
Size:	32768

Details

Name:	00000009.00000000.402423921.00007DF522052000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF522052000
Size:	4096

Details

Name:	00000003.00000002.816917106.0000000003332000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	3332000
Size:	28672

Details

Name:	0000000D.00000002.459648416.00007FF595C25000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595C25000
Size:	4096

Details

Name:	00000005.00000002.816632246.0000000003672000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	3672000
Size:	4096

Details

Name:	00000013.00000002.815692113.0000024894920000.00000004.00000040.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	24894920000
Size:	12288

Details

Name:	00000001.00000002.304451529.000002255D902000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2255D902000
Size:	16384

Details

Name:	00000003.00000003.639356714.00000000033CE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33CE000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000007.00000002.384875545.00007FF583D4A000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF583D4A000
Size:	12288

Details

Name:	00000007.00000002.384269551.000001FC1F713000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FC1F713000
Size:	12288

Details

Name:	00000001.00000003.303523647.000002255D864000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2255D864000
Size:	4096

Details

Name:	0000000E.00000002.446276220.00007FF5398B5000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5398B5000
Size:	16384

Details

Name:	0000000D.00000003.447292716.000001A42CB8E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB8E000
Size:	61440

Details

Name:	00000000.00000003.428535411.000000000126D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	126D000
Size:	4096

Details

Name:	00000003.00000003.499949523.00000000053D1000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	53D1000
Size:	73728

Details

Name:	00000001.00000002.305221468.00007FF4F5B2D000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5B2D000
Size:	8192

Details

Name:	00000003.00000002.814803226.0000000000CB0000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	CB0000
Size:	4096

Details

Name:	00000005.00000002.815844702.0000000003240000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3240000
Size:	4096

Details

Name:	00000004.00000002.817149065.0000000002825000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2825000
Size:	16384

Details

Name:	00000005.00000003.777600519.0000000003705000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3705000
Size:	65536

Details

Name:	00000005.00000003.362811545.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000001.00000002.304350430.000002255D6D0000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2255D6D0000
Size:	12288

Details

Name:	00000005.00000003.539433690.00000000036ED000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36ED000
Size:	28672

Details

Name:	00000005.00000003.705336288.0000000003681000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3681000
Size:	131072

Details

Name:	00000004.00000003.568450935.00000000004A0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A0000
Size:	4096

Details

Name:	00000009.00000003.414699162.000002205DC4A000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2205DC4A000
Size:	4096

Details

Name:	00000004.00000003.708584827.0000000000541000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	541000
Size:	16384

Details

Name:	00000004.00000003.662900324.00000000004AB000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4AB000
Size:	24576

Details

Name:	00000005.00000003.746578214.0000000003672000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3672000
Size:	4096

Details

Name:	00000003.00000003.566856234.000000000336B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	336B000
Size:	147456

Details

Name:	00000003.00000002.815011037.00000000028EE000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28EE000
Size:	12288

Details

Name:	00000000.00000002.817256327.0000000003790000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3790000
Size:	466944

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.588546803.0000000001256000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1256000
Size:	4096

Details

Name:	00000000.00000002.816189644.000000000125E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	125E000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000001.00000002.304360484.000002255D700000.00000004.00000020.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2255D700000
Size:	8192

Details

Name:	00000004.00000002.817100009.0000000002806000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2806000
Size:	8192

Details

Name:	00000004.00000003.662361494.00000000004B1000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B1000
Size:	278528

Details

Name:	00000004.00000003.708630597.000000000052C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	52C000
Size:	8192

Details

Name:	00000004.00000003.451903523.0000000000498000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	498000
Size:	28672

Details

Name:	00000009.00000002.415212977.000002205E402000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2205E402000
Size:	4096

Details

Name:	00000005.00000003.368876296.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000004.00000003.771128348.000000000051C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C000
Size:	53248

Details

Name:	00000005.00000003.538952741.0000000005FAD000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5FAD000
Size:	16384

Details

Name:	00000005.00000003.468288874.00000000036C7000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36C7000
Size:	126976

Details

Name:	00000004.00000002.818326868.0000000004F1E000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4F1E000
Size:	8192

Details

Name:	00000003.00000003.588835484.0000000003350000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3350000
Size:	4096

Details

Name:	00000003.00000003.684662648.00000000033BA000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33BA000
Size:	4096

Details

Name:	00000004.00000003.590729139.00000000004A4000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A4000
Size:	24576

Details

Name:	0000000D.00000003.440064349.000001A42CB81000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB81000
Size:	4096

Details

Name:	00000009.00000002.415383407.00007FF514235000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF514235000
Size:	20480

Details

Name:	00000003.00000003.684243518.000000000332E000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	332E000
Size:	4096

Details

Name:	00000000.00000002.817236278.000000000374D000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	374D000
Size:	12288

Details

Name:	00000000.00000003.382625161.0000000003B09000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3B09000
Size:	77824

Details

Name:	00000004.00000003.546667631.0000000000489000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	489000
Size:	57344

Details

Name:	00000004.00000002.816714320.0000000000AE0000.00000040.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	AE0000
Size:	61440

Details

Name:	00000005.00000003.374367647.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000003.00000003.684940382.00000000057CA000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	57CA000
Size:	4096

Details

Name:	0000000D.00000002.459756795.00007FF595D82000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595D82000
Size:	4096

Details

Name:	00000009.00000002.414981576.000002205DAC0000.00000004.00000040.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2205DAC0000
Size:	4096

Details

Name:	00000005.00000003.777650567.00000000036F9000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36F9000
Size:	49152

Details

Name:	00000005.00000003.371215825.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	0000000D.00000003.447741172.000001A42CB7B000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB7B000
Size:	4096

Details

Name:	00000004.00000003.451853514.00000000004F6000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F6000
Size:	139264

Details

Name:	0000000D.00000002.458978234.000001A42C26F000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42C26F000
Size:	53248

Details

Name:	00000003.00000003.639370966.00000000033B0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B0000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000002.459441214.00007DF5A3B22000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A3B22000
Size:	4096

Details

Name:	00000005.00000003.468362435.00000000036C7000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36C7000
Size:	126976

Details

Name:	00000003.00000002.815484184.0000000002A15000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A15000
Size:	16384

Details

Name:	00000004.00000003.799825586.00000000004B2000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B2000
Size:	274432

Details

Name:	00000001.00000002.304461227.000002255D913000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2255D913000
Size:	20480

Details

Name:	00000013.00000002.816329056.00007FF564E69000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF564E69000
Size:	12288

Details

Name:	00000005.00000003.361074344.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000005.00000003.728349127.00000000036BD000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36BD000
Size:	253952

Details

Name:	00000004.00000003.662790347.000000000053D000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	53D000
Size:	4096

Details

Name:	00000000.00000003.428334746.000000000125A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	125A000
Size:	32768

Details

Name:	00000000.00000003.680104498.000000000125D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	125D000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.706522888.0000000005C51000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C51000
Size:	32768

Details

Name:	00000004.00000003.473585377.000000000051E000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51E000
Size:	12288

Details

Name:	00000005.00000003.376809035.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000004.00000002.817802722.000000000471E000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	471E000
Size:	8192

Details

Name:	00000001.00000002.304329391.000002255D690000.00000004.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2255D690000
Size:	4096

Details

Name:	00000003.00000003.733555548.0000000005CCB000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5CCB000
Size:	32768

Details

Name:	00000003.00000003.429540318.000000000333F000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	333F000
Size:	77824

Details

Name:	0000000D.00000002.459013009.000001A42C281000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42C281000
Size:	24576

Details

Name:	00000004.00000003.662611156.0000000000541000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	541000
Size:	12288

Details

Name:	00000005.00000002.815310415.0000000002C8D000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C8D000
Size:	32768

Details

Name:	00000003.00000002.816473233.0000000003240000.00000040.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	3240000
Size:	45056

Details

Name:	0000000E.00000002.446255043.00007FF5398AA000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5398AA000
Size:	12288

Details

Name:	00000000.00000003.704654592.0000000001253000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1253000
Size:	8192

Details

Name:	00000007.00000002.384587428.00007FF583B2D000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF583B2D000
Size:	4096

Details

Name:	00000005.00000003.565454794.0000000003681000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3681000
Size:	131072

Details

Name:	00000000.00000003.495605249.0000000001237000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1237000
Size:	69632

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000003.657202669.0000000005FAF000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5FAF000
Size:	8192

Details

Name:	00000007.00000002.384493262.00007FF5833EB000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5833EB000
Size:	16384

Details

Name:	00000001.00000002.305245309.00007FF4F5BAA000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5BAA000
Size:	4096

Details

Name:	00000013.00000002.815898745.00000248952A0000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	248952A0000
Size:	49152

Details

Name:	00000005.00000002.816135834.0000000003557000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3557000
Size:	8192

Details

Name:	00000005.00000003.490208959.0000000003681000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3681000
Size:	24576

Details

Name:	00000000.00000002.817779997.000000007F290000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F290000
Size:	12288

Details

Name:	00000004.00000003.429942890.0000000000518000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	518000
Size:	12288

Details

Name:	00000004.00000002.816204919.0000000000535000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	535000
Size:	53248

Details

Name:	00000003.00000003.706948782.000000000333F000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	333F000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.521642965.0000000003390000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3390000
Size:	163840

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000009.00000002.415482283.00007FF514307000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF514307000
Size:	16384

Details

Name:	00000004.00000003.590668180.0000000000529000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	529000
Size:	8192

Details

Name:	00000005.00000002.815370470.0000000002CB0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CB0000
Size:	73728

Details

Name:	00000004.00000003.662769690.000000000052C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	52C000
Size:	24576

Details

Name:	0000000E.00000002.446176343.00007FF5397E0000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5397E0000
Size:	4096

Details

Name:	00000004.00000003.568402857.00000000004F6000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F6000
Size:	151552

Details

Name:	00000003.00000003.353147065.0000000004EB0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4EB0000
Size:	4096

Details

Name:	00000004.00000002.816798044.00000000026F4000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	26F4000
Size:	4096

Details

Name:	00000003.00000003.708943433.0000000005DC3000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5DC3000
Size:	466944

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000003.708675448.0000000000546000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	546000
Size:	8192

Details

Name:	00000004.00000003.568360365.0000000000547000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	547000
Size:	4096

Details

Name:	0000000D.00000002.459886091.00007FF595E1E000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595E1E000
Size:	4096

Details

Name:	0000000D.00000003.438998626.000001A42CB8D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB8D000
Size:	8192

Details

Name:	00000001.00000002.304469596.000002255DC00000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2255DC00000
Size:	12288

Details

Name:	00000005.00000003.539249768.0000000003687000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3687000
Size:	106496

Details

Name:	00000003.00000002.815375506.00000000029FA000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29FA000
Size:	12288

Details

Name:	00000000.00000003.495422173.0000000003B8B000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3B8B000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000002.458687700.000000891598B000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	891598B000
Size:	20480

Details

Name:	0000000D.00000002.459908569.00007FF595E92000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595E92000
Size:	12288

Details

Name:	00000005.00000003.490281850.00000000036C7000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36C7000
Size:	126976

Details

Name:	00000005.00000003.370009754.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000005.00000003.657183028.00000000036FC000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36FC000
Size:	32768

Details

Name:	00000003.00000002.816375886.0000000003177000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3177000
Size:	8192

Details

Name:	00000003.00000003.617843998.00000000053E3000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	53E3000
Size:	4096

Details

Name:	00000005.00000002.814976814.0000000002C31000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C31000
Size:	16384

Details

Name:	00000003.00000003.521627320.000000000336B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	336B000
Size:	147456

Details

Name:	00000003.00000003.383230876.00000000033B4000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B4000
Size:	16384

Details

Name:	00000005.00000003.746606038.00000000036A5000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A5000
Size:	94208

Details

Name:	00000005.00000000.294551676.000000007F3A0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F3A0000
Size:	4096

Details

Name:	0000000D.00000003.445704812.000001A42D06A000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42D06A000
Size:	425984

Details

Name:	00000000.00000003.498905274.0000000003B8B000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3B8B000
Size:	4096

Details

Name:	00000003.00000003.733648769.00000000057CB000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	57CB000
Size:	4096

Details

Name:	00000003.00000003.709104782.0000000003332000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3332000
Size:	28672

Details

Name:	0000000E.00000002.446234023.00007FF539892000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539892000
Size:	12288

Details

Name:	00000003.00000002.815899762.0000000002AD2000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AD2000
Size:	8192

Details

Name:	00000004.00000002.814801833.00000000000E0000.00000004.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	E0000
Size:	4096

Details

Name:	00000000.00000002.817193911.000000000369F000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	369F000
Size:	4096

Details

Name:	0000000E.00000002.446151930.00007FF5397CD000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5397CD000
Size:	4096

Details

Name:	00000005.00000000.294576767.000000007F3A2000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F3A2000
Size:	4096

Details

Name:	00000005.00000003.543640194.00000000036FA000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36FA000
Size:	73728

Details

Name:	00000004.00000003.708459779.00000000004AB000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4AB000
Size:	303104

Details

Name:	00000004.00000003.770930553.000000000051C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C000
Size:	53248

Details

Name:	00000001.00000000.292255043.00007DF503810000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF503810000
Size:	4096

Details

Name:	00000004.00000002.817488529.00000000028DC000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28DC000
Size:	16384

Details

Name:	00000005.00000003.657246435.00000000036BD000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36BD000
Size:	229376

Details

Name:	00000000.00000003.704740025.0000000001204000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1204000
Size:	208896

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.733601070.0000000005CCB000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5CCB000
Size:	32768

Details

Name:	00000004.00000003.429953160.000000000051E000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51E000
Size:	12288

Details

Name:	0000000D.00000003.433805508.000001A42C9E0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42C9E0000
Size:	4096

Details

Name:	00000000.00000002.817479899.000000000419D000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	419D000
Size:	12288

Details

Name:	00000000.00000002.816111760.0000000001256000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1256000
Size:	4096

Details

Name:	00000004.00000003.384900217.0000000000520000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	520000
Size:	4096

Details

Name:	00000000.00000003.729271076.000000000127E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	127E000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000003.592564201.000000000512B000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	512B000
Size:	471040

Details

Name:	00000003.00000003.496959833.0000000003355000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3355000
Size:	86016

Details

Name:	00000003.00000002.815413048.0000000002A06000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A06000
Size:	8192

Details

Name:	00000005.00000003.632819090.0000000003683000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3683000
Size:	122880

Details

Name:	00000003.00000003.709285496.00000000033C1000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33C1000
Size:	4096

Details

Name:	0000000D.00000002.458826881.000001A42C1A0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A42C1A0000
Size:	4096

Details

Name:	00000004.00000003.430132623.0000000000498000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	498000
Size:	28672

Details

Name:	00000005.00000003.539466680.00000000036C7000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36C7000
Size:	151552

Details

Name:	00000004.00000003.451749871.0000000000524000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	524000
Size:	16384

Details

Name:	00000000.00000003.495615897.0000000001249000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1249000
Size:	20480

Details

Name:	00000009.00000002.415225355.00007DF522040000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF522040000
Size:	4096

Details

Name:	00000000.00000000.291465838.000000007F272000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F272000
Size:	4096

Details

Name:	00000013.00000002.815991895.0000024895510000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24895510000
Size:	4096

Details

Name:	00000005.00000003.728621033.0000000005BEA000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5BEA000
Size:	4096

Details

Name:	0000000D.00000002.459871586.00007FF595E0B000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595E0B000
Size:	12288

Details

Name:	00000007.00000000.367828487.00007DF5919C0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5919C0000
Size:	4096

Details

Name:	00000004.00000002.818281576.0000000004E1D000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4E1D000
Size:	12288

Details

Name:	0000000E.00000002.446215842.00007FF53981E000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53981E000
Size:	8192

Details

Name:	00000003.00000003.684383818.0000000003356000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3356000
Size:	77824

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000002.817533231.00000000028E8000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28E8000
Size:	16384

Details

Name:	00000005.00000002.817235274.0000000003920000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3920000
Size:	65536

Details

Name:	0000000E.00000002.446084307.00007DF547522000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF547522000
Size:	4096

Details

Name:	0000000D.00000003.458475589.000001A42CB6A000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB6A000
Size:	69632

Details

Name:	00000004.00000002.817287677.0000000002860000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2860000
Size:	73728

Details

Name:	0000000D.00000002.459155572.000001A42C2EC000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42C2EC000
Size:	40960

Details

Name:	00000003.00000003.544947469.0000000003356000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3356000
Size:	81920

Details

Name:	00000004.00000003.662489457.0000000000545000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	545000
Size:	12288

Details

Name:	00000003.00000003.353441088.0000000004EB0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4EB0000
Size:	4096

Details

Name:	00000004.00000003.546748906.0000000000498000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	498000
Size:	28672

Details

Name:	0000000D.00000003.436900132.000001A42CB8F000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB8F000
Size:	94208

Details

Name:	00000000.00000003.680120018.0000000001258000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1258000
Size:	20480

Details

Name:	00000005.00000002.815626166.0000000002D2C000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D2C000
Size:	16384

Details

Name:	00000003.00000003.684581057.0000000003353000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3353000
Size:	4096

Details

Name:	00000005.00000003.610641132.0000000005FAF000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5FAF000
Size:	8192

Details

Name:	00000000.00000000.291471155.000000007F280000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F280000
Size:	4096

Details

Name:	00000000.00000002.817087749.0000000003090000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3090000
Size:	4096

Details

Name:	0000000D.00000002.459816855.00007FF595DE0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595DE0000
Size:	4096

Details

Name:	00000005.00000003.773751669.0000000005863000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5863000
Size:	4096

Details

Name:	00000004.00000002.818942318.000000007FDE2000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FDE2000
Size:	4096

Details

Name:	00000003.00000003.383210016.00000000033B8000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B8000
Size:	94208

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.592991170.000000000336B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	336B000
Size:	147456

Details

Name:	00000003.00000003.379230965.00000000031B0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	31B0000
Size:	4096

Details

Name:	00000003.00000002.817825574.000000000591D000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	591D000
Size:	12288

Details

Name:	0000000D.00000002.459933629.00007FF595EB1000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595EB1000
Size:	32768

Details

Name:	00000004.00000003.522843490.000000000051D000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51D000
Size:	45056

Details

Name:	00000004.00000003.451804373.00000000004B2000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B2000
Size:	274432

Details

Name:	00000005.00000003.752056949.00000000060C1000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	60C1000
Size:	364544

Details

Name:	00000005.00000003.422375653.0000000005B69000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5B69000
Size:	77824

Details

Name:	00000005.00000002.819071802.000000007F2A0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F2A0000
Size:	20480

Details

Name:	00000004.00000003.497224792.0000000004D0B000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4D0B000
Size:	8192

Details

Name:	0000000D.00000002.459573975.00007FF595A29000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595A29000
Size:	4096

Details

Name:	00000003.00000002.818676915.000000007F612000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F612000
Size:	4096

Details

Name:	00000005.00000003.389769116.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000000.00000003.704587575.0000000001237000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1237000
Size:	94208

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000002.816233597.00000000035E1000.00000020.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	35E1000
Size:	45056

Details

Name:	0000000D.00000003.435832164.000001A42CB7F000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB7F000
Size:	4096

Details

Name:	00000004.00000003.501181426.000000000051D000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51D000
Size:	45056

Details

Name:	00000009.00000002.415057175.000002205DC3C000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2205DC3C000
Size:	49152

Details

Name:	00000003.00000002.817327801.00000000033C3000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	33C3000
Size:	16384

Details

Name:	0000000D.00000002.459231049.000001A42C316000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42C316000
Size:	4096

Details

Name:	00000000.00000003.353146269.0000000001130000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1130000
Size:	4096

Details

Name:	0000000D.00000002.459612549.00007FF595BBC000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595BBC000
Size:	4096

Details

Name:	0000000D.00000002.459750137.00007FF595D71000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595D71000
Size:	24576

Details

Name:	00000005.00000002.818578212.0000000005FA0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5FA0000
Size:	28672

Details

Name:	00000013.00000002.815273107.0000024894710000.00000004.00000020.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	24894710000
Size:	28672

Details

Name:	00000004.00000003.708555848.000000000052F000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	52F000
Size:	16384

Details

Name:	00000005.00000002.814917912.0000000002C1F000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C1F000
Size:	8192

Details

Name:	00000005.00000001.295796589.0000000010000000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	10000000
Size:	4096

Details

Name:	00000005.00000003.468340801.00000000036A2000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A2000
Size:	106496

Details

Name:	00000003.00000003.383192940.0000000005C21000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C21000
Size:	73728

Details

Name:	00000005.00000002.815562205.0000000002D11000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D11000
Size:	32768

Details

Name:	0000000D.00000003.447204611.000001A42CB9F000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB9F000
Size:	176128

Details

Name:	0000000D.00000003.438555349.000001A42CB97000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB97000
Size:	147456

Details

Name:	00000004.00000003.732990752.0000000005242000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5242000
Size:	90112

Details

Name:	00000003.00000002.815219386.00000000029C3000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29C3000
Size:	8192

Details

Name:	00000009.00000002.415181069.000002205E000000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2205E000000
Size:	16384

Details

Name:	00000004.00000003.662879150.00000000004A0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A0000
Size:	4096

Details

Name:	00000004.00000002.815700809.00000000004B2000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	4B2000
Size:	274432

Details

Name:	00000001.00000002.304670298.00007FF4F5ABD000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5ABD000
Size:	4096

Details

Name:	00000003.00000002.815555631.0000000002A27000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A27000
Size:	12288

Details

Name:	00000000.00000003.354378661.0000000001130000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1130000
Size:	4096

Details

Name:	00000013.00000002.815376395.0000024894721000.00000004.00000020.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	24894721000
Size:	389120

Details

Name:	00000004.00000003.406516884.0000000000518000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	518000
Size:	12288

Details

Name:	00000003.00000003.499823348.0000000005C21000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C21000
Size:	114688

Details

Name:	00000005.00000003.752168239.00000000036FF000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36FF000
Size:	90112

Details

Name:	00000013.00000002.816402957.00007FF5651B0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5651B0000
Size:	8192

Details

Name:	00000001.00000002.304335862.000002255D6B0000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2255D6B0000
Size:	102400

Details

Name:	00000000.00000002.815724439.00000000011E3000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	11E3000
Size:	16384

Details

Name:	00000003.00000002.814986365.00000000028E9000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28E9000
Size:	16384

Details

Name:	0000000D.00000003.435857883.000001A42CB6B000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB6B000
Size:	65536

Details

Name:	00000004.00000003.522770790.000000000052F000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	52F000
Size:	32768

Details

Name:	00000003.00000003.706888928.00000000033BA000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33BA000
Size:	4096

Details

Name:	00000000.00000003.428615725.00000000011E5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11E5000
Size:	110592

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	00000005.00000003.799337134.0000000003681000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3681000
Size:	131072

Details

Name:	0000000E.00000002.446202601.00007FF53980B000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53980B000
Size:	12288

Details

Name:	00000003.00000002.815749679.0000000002AA4000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AA4000
Size:	8192

Details

Name:	00000004.00000003.708546110.000000000052C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	52C000
Size:	8192

Details

Name:	00000007.00000000.367843520.00007DF5919D2000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5919D2000
Size:	4096

Details

Name:	00000003.00000003.496954305.0000000003351000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3351000
Size:	4096

Details

Name:	00000004.00000003.771099751.0000000000545000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	545000
Size:	12288

Details

Name:	00000004.00000003.754819587.0000000000518000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	518000
Size:	4096

Details

Name:	00000003.00000003.684587204.0000000003356000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3356000
Size:	77824

Details

Name:	00000005.00000002.815463510.0000000002CFB000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CFB000
Size:	12288

Details

Name:	00000005.00000002.816467187.000000000362A000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	362A000
Size:	286720

Details

Name:	00000013.00000002.816378792.00007FF564E6E000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF564E6E000
Size:	4096

Details

Name:	00000003.00000002.817747337.0000000005358000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5358000
Size:	4096

Details

Name:	00000003.00000003.499877751.00000000033C5000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33C5000
Size:	4096

Details

Name:	00000003.00000003.545092822.000000000336B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	336B000
Size:	147456

Details

Name:	0000000D.00000002.459854093.00007FF595DEE000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595DEE000
Size:	28672

Details

Name:	00000000.00000003.588351968.0000000001257000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1257000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000002.816684010.000000000367D000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	367D000
Size:	147456

Details

Name:	00000003.00000003.641113927.00000000057CA000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	57CA000
Size:	4096

Details

Name:	0000000D.00000002.459369461.000001A42CB5F000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB5F000
Size:	45056

Details

Name:	00000000.00000003.428777377.000000000124F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	124F000
Size:	8192

Details

Name:	00000009.00000002.415006163.000002205DB20000.00000004.00000020.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2205DB20000
Size:	8192

Details

Name:	00000005.00000002.818945940.0000000006119000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6119000
Size:	4096

Details

Name:	00000003.00000003.451473750.000000000336B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	336B000
Size:	139264

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000003.364455278.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000005.00000003.751997695.0000000006157000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6157000
Size:	466944

Details

Name:	00000003.00000003.567168310.00000000057CB000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	57CB000
Size:	4096

Details

Name:	00000005.00000003.373709186.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000005.00000003.369951874.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000004.00000003.406504940.0000000005127000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5127000
Size:	20480

Details

Name:	0000000E.00000002.445828879.000000E6DB4FF000.00000004.00000010.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	E6DB4FF000
Size:	4096

Details

Name:	00000003.00000002.816048178.0000000002E0A000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2E0A000
Size:	4096

Details

Name:	00000005.00000002.816403406.0000000003620000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	3620000
Size:	36864

Details

Name:	00000000.00000003.495561848.0000000001249000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1249000
Size:	20480

Details

Name:	00000003.00000002.818615359.000000007F602000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F602000
Size:	4096

Details

Name:	00000000.00000003.773773595.0000000001238000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1238000
Size:	90112

Details

Name:	00000003.00000002.818361499.0000000005D22000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5D22000
Size:	53248

Details

Name:	00000003.00000003.475281379.00000000033B8000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B8000
Size:	12288

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000007.00000002.384641429.00007FF583BBB000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF583BBB000
Size:	24576

Details

Name:	00000007.00000002.384803928.00007FF583CAB000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF583CAB000
Size:	12288

Details

Name:	00000004.00000003.473796759.0000000000489000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	489000
Size:	57344

Details

Name:	00000005.00000003.728438040.000000000367D000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	367D000
Size:	16384

Details

Name:	00000004.00000003.546135991.0000000000547000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	547000
Size:	4096

Details

Name:	00000004.00000002.817206492.0000000002837000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2837000
Size:	12288

Details

Name:	0000000E.00000000.432848519.00007DF547530000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF547530000
Size:	4096

Details

Name:	00000003.00000002.816514961.000000000328D000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	328D000
Size:	12288

Details

Name:	00000005.00000003.370345596.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	0000000D.00000002.458801775.000001A42C170000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A42C170000
Size:	102400

Details

Name:	00000003.00000000.293141590.0000000002AD8000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AD8000
Size:	16384

Details

Name:	00000005.00000003.371852394.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000003.00000002.816255344.0000000003160000.00000040.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	3160000
Size:	61440

Details

Name:	00000004.00000003.662752437.0000000005292000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5292000
Size:	4096

Details

Name:	00000004.00000003.771117250.0000000000518000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	518000
Size:	12288

Details

Name:	00000005.00000003.388530345.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	0000000D.00000003.443265683.000001A42CB86000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB86000
Size:	4096

Details

Name:	00000005.00000003.418042548.0000000005D40000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D40000
Size:	4096

Details

Name:	0000000D.00000002.458723311.0000008915EF7000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8915EF7000
Size:	36864

Details

Name:	00000001.00000002.305058218.00007FF4F5ADE000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5ADE000
Size:	28672

Details

Name:	00000003.00000003.593305603.0000000003390000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3390000
Size:	172032

Details

Name:	00000009.00000002.415067192.000002205DC49000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2205DC49000
Size:	4096

Details

Name:	00000003.00000003.545043972.000000000333F000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	333F000
Size:	65536

Details

Name:	00000000.00000003.614018217.0000000001264000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1264000
Size:	110592

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.496848826.00000000033BF000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33BF000
Size:	32768

Details

Name:	00000000.00000003.773749608.0000000001254000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1254000
Size:	4096

Details

Name:	00000005.00000003.418059249.0000000005D40000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D40000
Size:	4096

Details

Name:	00000000.00000003.495500925.00000000011E5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11E5000
Size:	110592

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000002.459047102.000001A42C2A5000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42C2A5000
Size:	40960

Details

Name:	00000004.00000003.590689049.000000000052F000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	52F000
Size:	12288

Details

Name:	00000013.00000002.815324614.0000024894719000.00000004.00000020.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	24894719000
Size:	28672

Details

Name:	00000005.00000003.379056714.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000000.00000003.704232162.0000000004469000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4469000
Size:	466944

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.567175882.00000000057CA000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	57CA000
Size:	4096

Details

Name:	00000003.00000002.818436526.0000000005D75000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5D75000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000003.440526315.000001A42CB86000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB86000
Size:	4096

Details

Name:	0000000E.00000000.432844842.00007DF547522000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF547522000
Size:	4096

Details

Name:	00000005.00000002.815344367.0000000002C9B000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C9B000
Size:	12288

Details

Name:	00000000.00000002.815981942.0000000001238000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1238000
Size:	90112

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000003.490321111.000000000367D000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	367D000
Size:	16384

Details

Name:	00000005.00000003.799484794.00000000036F6000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36F6000
Size:	12288

Details

Name:	00000001.00000002.304381002.000002255D813000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2255D813000
Size:	90112

Details

Name:	00000001.00000002.304659512.00007FF4F5A35000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5A35000
Size:	4096

Details

Name:	00000009.00000002.415436062.00007FF5142E9000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5142E9000
Size:	8192

Details

Name:	00000007.00000002.384552428.00007FF583AE6000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF583AE6000
Size:	16384

Details

Name:	00000005.00000002.818072988.00000000053C0000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	53C0000
Size:	4096

Details

Name:	00000000.00000003.704670959.0000000001257000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1257000
Size:	45056

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000003.443213395.000001A42CB7F000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB7F000
Size:	8192

Details

Name:	00000003.00000003.406210609.0000000003355000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3355000
Size:	81920

Details

Name:	00000004.00000002.816593011.0000000000950000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	950000
Size:	65536

Details

Name:	0000000D.00000002.459607667.00007FF595B92000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595B92000
Size:	4096

Details

Name:	0000000D.00000003.435539606.000001A42D003000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42D003000
Size:	253952

Details

Name:	00000004.00000003.384876142.0000000000528000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	528000
Size:	4096

Details

Name:	00000003.00000003.473162538.00000000033B6000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B6000
Size:	32768

Details

Name:	00000004.00000003.497329113.0000000005221000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5221000
Size:	466944

Details

Name:	00000005.00000003.567281259.0000000005BEB000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5BEB000
Size:	4096

Details

Name:	00000003.00000003.684688973.00000000033BE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33BE000
Size:	4096

Details

Name:	00000005.00000003.365980050.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000004.00000000.293555117.000000007FDE0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FDE0000
Size:	4096

Details

Name:	00000005.00000003.422336553.00000000036BD000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36BD000
Size:	36864

Details

Name:	00000004.00000003.708439579.000000000049F000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	49F000
Size:	8192

Details

Name:	00000005.00000003.512094535.00000000036C7000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36C7000
Size:	147456

Details

Name:	00000004.00000003.473594025.0000000000524000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	524000
Size:	16384

Details

Name:	00000005.00000003.362615744.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	0000000E.00000002.445843039.000000E6DB5FC000.00000004.00000010.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	E6DB5FC000
Size:	16384

Details

Name:	00000013.00000000.545473783.00007DF573240000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF573240000
Size:	4096

Details

Name:	00000003.00000003.684652122.00000000033B2000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B2000
Size:	16384

Details

Name:	00000003.00000003.496775472.00000000053D1000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	53D1000
Size:	462848

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000003.662600951.000000000053D000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	53D000
Size:	4096

Details

Name:	00000003.00000003.588715567.00000000033C5000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33C5000
Size:	8192

Details

Name:	00000005.00000002.815490517.0000000002CFF000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CFF000
Size:	16384

Details

Name:	0000000E.00000002.445850852.000000E6DB679000.00000004.00000010.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	E6DB679000
Size:	28672

Details

Name:	00000005.00000003.565497613.00000000036A2000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A2000
Size:	8192

Details

Name:	00000000.00000002.817122438.0000000003409000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3409000
Size:	57344

Details

Name:	0000000D.00000002.459305057.000001A42CA02000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CA02000
Size:	4096

Details

Name:	00000013.00000002.816007683.00007DF471110000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF471110000
Size:	20480

Details

Name:	0000000D.00000003.435468421.000001A42CB80000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB80000
Size:	61440

Details

Name:	00000005.00000003.517273830.00000000036A2000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A2000
Size:	106496

Details

Name:	00000001.00000002.304581692.00007FF4F599B000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F599B000
Size:	8192

Details

Name:	00000000.00000002.816086458.000000000124F000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	124F000
Size:	8192

Details

Name:	00000004.00000002.816693474.0000000000AD0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	AD0000
Size:	4096

Details

Name:	0000000E.00000002.446070562.00007DF4453F0000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4453F0000
Size:	20480

Details

Name:	0000000D.00000003.438545911.000001A42CB86000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB86000
Size:	61440

Details

Name:	0000000D.00000003.444888357.000001A42CB9B000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB9B000
Size:	176128

Details

Name:	00000004.00000003.406534532.0000000000524000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	524000
Size:	16384

Details

Name:	00000007.00000002.384294497.000001FC1FB80000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FC1FB80000
Size:	4096

Details

Name:	00000004.00000002.816361110.00000000006A0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6A0000
Size:	4096

Details

Name:	00000005.00000003.383510143.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000005.00000003.799372490.00000000036A5000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A5000
Size:	94208

Details

Name:	00000007.00000002.384279394.000001FC1FA00000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FC1FA00000
Size:	12288

Details

Name:	00000013.00000002.815247180.00000248946D0000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	248946D0000
Size:	8192

Details

Name:	00000001.00000000.292261830.00007DF503820000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF503820000
Size:	4096

Details

Name:	00000004.00000003.754912105.00000000004A4000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A4000
Size:	24576

Details

Name:	00000003.00000003.709278500.00000000033BD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33BD000
Size:	8192

Details

Name:	00000000.00000003.354138687.0000000001130000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1130000
Size:	4096

Details

Name:	00000013.00000002.814801933.0000009A0947C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	9A0947C000
Size:	16384

Details

Name:	00000003.00000002.817349699.00000000033D0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	33D0000
Size:	36864

Details

Name:	0000000D.00000003.441331535.000001A42CBB7000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CBB7000
Size:	61440

Details

Name:	00000003.00000003.592851855.000000000333F000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	333F000
Size:	69632

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000013.00000002.815715803.0000024894925000.00000004.00000040.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	24894925000
Size:	12288

Details

Name:	00000001.00000002.304308486.000000A5E85FB000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A5E85FB000
Size:	20480

Details

Name:	00000004.00000002.818121643.00000000048AC000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	48AC000
Size:	4096

Details

Name:	00000007.00000002.384843780.00007FF583CDD000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF583CDD000
Size:	8192

Details

Name:	00000005.00000002.815827127.000000000323B000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	323B000
Size:	20480

Details

Name:	00000009.00000002.415377376.00007FF5141EF000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5141EF000
Size:	8192

Details

Name:	0000000D.00000003.458550744.000001A42C25F000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42C25F000
Size:	4096

Details

Name:	00000007.00000003.383826317.000001FC1F65D000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1FC1F65D000
Size:	73728

Details

Name:	0000000D.00000003.435479764.000001A42CB90000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB90000
Size:	131072

Details

Name:	0000000D.00000003.435497359.000001A42D002000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42D002000
Size:	131072

Details

Name:	0000000D.00000003.445618793.000001A42D002000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42D002000
Size:	851968

Details

Name:	00000007.00000002.384667496.00007FF583BE5000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF583BE5000
Size:	4096

Details

Name:	0000000D.00000003.439819231.000001A42CB86000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB86000
Size:	61440

Details

Name:	00000000.00000002.817435847.0000000003F9D000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3F9D000
Size:	12288

Details

Name:	00000004.00000003.354310911.0000000004800000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4800000
Size:	4096

Details

Name:	0000000D.00000002.459667868.00007FF595C75000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595C75000
Size:	12288

Details

Name:	00000003.00000003.733675694.00000000053E3000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	53E3000
Size:	4096

Details

Name:	00000001.00000003.303518785.000002255D865000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2255D865000
Size:	8192

Details

Name:	00000003.00000001.293542928.0000000010000000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	10000000
Size:	4096

Details

Name:	00000003.00000002.815866304.0000000002AC6000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AC6000
Size:	12288

Details

Name:	00000000.00000002.816741357.0000000001850000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1850000
Size:	4096

Details

Name:	00000005.00000003.418052332.0000000005D40000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D40000
Size:	4096

Details

Name:	00000009.00000003.414633364.000002205DC7B000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2205DC7B000
Size:	36864

Details

Name:	00000005.00000003.565327715.00000000036FA000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36FA000
Size:	12288

Details

Name:	00000013.00000002.816567644.00007FF5654ED000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5654ED000
Size:	4096

Details

Name:	00000013.00000002.815965743.00000248954F0000.00000002.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	248954F0000
Size:	4096

Details

Name:	00000001.00000002.304321991.000000A5E87FF000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A5E87FF000
Size:	4096

Details

Name:	00000004.00000003.590640187.000000000051D000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51D000
Size:	45056

Details

Name:	00000004.00000003.754650821.0000000005121000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5121000
Size:	20480

Details

Name:	00000007.00000002.384211529.000001FC1F670000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FC1F670000
Size:	45056

Details

Name:	00000007.00000002.384237488.000001FC1F687000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FC1F687000
Size:	40960

Details

Name:	00000009.00000002.415506589.00007FF51432B000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51432B000
Size:	12288

Details

Name:	00000003.00000003.379239042.00000000031B0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	31B0000
Size:	4096

Details

Name:	00000004.00000002.816328609.0000000000650000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	650000
Size:	4096

Details

Name:	00000004.00000003.733018855.0000000005292000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5292000
Size:	4096

Details

Name:	00000005.00000003.610766734.00000000036BD000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36BD000
Size:	192512

Details

Name:	0000000D.00000002.459456100.00007DF5A3B40000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A3B40000
Size:	12288

Details

Name:	00000005.00000003.385649511.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000005.00000002.818563866.0000000005F20000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5F20000
Size:	4096

Details

Name:	00000004.00000003.662739265.0000000005244000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5244000
Size:	32768

Details

Name:	00000004.00000003.662806468.0000000000546000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	546000
Size:	8192

Details

Name:	0000000E.00000000.432829131.0000024131530000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	24131530000
Size:	102400

Details

Name:	00000000.00000003.680079308.0000000001253000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1253000
Size:	4096

Details

Name:	00000004.00000003.708382047.00000000051A3000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51A3000
Size:	4096

Details

Name:	00000005.00000003.539066393.00000000036C7000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36C7000
Size:	151552

Details

Name:	00000004.00000003.473810158.0000000000498000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	498000
Size:	28672

Details

Name:	00000004.00000003.733027900.0000000005123000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5123000
Size:	32768

Details

Name:	00000004.00000003.592911655.00000000051A3000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51A3000
Size:	4096

Details

Name:	00000007.00000002.384789856.00007FF583C97000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF583C97000
Size:	49152

Details

Name:	00000000.00000002.817163815.0000000003488000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3488000
Size:	4096

Details

Name:	00000003.00000003.756838960.00000000057CA000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	57CA000
Size:	4096

Details

Name:	00000005.00000003.706730465.0000000005BEA000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5BEA000
Size:	4096

Details

Name:	00000005.00000002.818876279.00000000060AE000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	60AE000
Size:	12288

Details

Name:	00000005.00000002.818142873.0000000005739000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5739000
Size:	57344

Details

Name:	00000009.00000002.415233608.00007DF522050000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF522050000
Size:	4096

Details

Name:	00000013.00000002.814888842.0000009A09679000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	9A09679000
Size:	28672

Details

Name:	00000005.00000002.818487988.0000000005EDD000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5EDD000
Size:	12288

Details

Name:	00000003.00000003.591718705.0000000003356000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3356000
Size:	81920

Details

Name:	00000005.00000003.361303834.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000003.00000003.429631011.000000000333A000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	333A000
Size:	20480

Details

Name:	00000000.00000002.815375955.0000000000FD5000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	FD5000
Size:	16384

Details

Name:	00000003.00000003.566809686.0000000003332000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3332000
Size:	28672

Details

Name:	00000003.00000003.429564566.000000000336B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	336B000
Size:	139264

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000003.384906680.0000000000524000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	524000
Size:	16384

Details

Name:	00000003.00000003.684537509.00000000033C1000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33C1000
Size:	4096

Details

Name:	0000000D.00000002.459689804.00007FF595CAB000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595CAB000
Size:	8192

Details

Name:	00000004.00000003.708328801.000000000512B000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	512B000
Size:	466944

Details

Name:	00000005.00000002.816064294.000000000350D000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	350D000
Size:	12288

Details

Name:	0000000D.00000002.459561750.00007FF5959A7000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5959A7000
Size:	32768

Details

Name:	00000005.00000003.377278637.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000000.00000003.498922048.0000000003B8A000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3B8A000
Size:	4096

Details

Name:	00000009.00000002.415451697.00007FF5142EF000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5142EF000
Size:	12288

Details

Name:	00000005.00000003.422344362.00000000036C7000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36C7000
Size:	131072

Details

Name:	00000005.00000003.512049203.00000000036A5000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A5000
Size:	94208

Details

Name:	00000013.00000002.816159449.00007FF564D44000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF564D44000
Size:	16384

Details

Name:	00000003.00000002.816403118.0000000003180000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3180000
Size:	4096

Details

Name:	00000009.00000000.402413021.00007DF522040000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF522040000
Size:	4096

Details

Name:	00000003.00000003.473305895.000000000332E000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	332E000
Size:	4096

Details

Name:	0000000D.00000002.459257060.000001A42C850000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A42C850000
Size:	4096

Details

Name:	00000004.00000003.546560651.000000000052F000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	52F000
Size:	4096

Details

Name:	00000005.00000003.369876650.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000005.00000003.370411738.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000001.00000002.304313676.000000A5E86F7000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A5E86F7000
Size:	36864

Details

Name:	00000003.00000003.709083763.0000000005CC4000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5CC4000
Size:	61440

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.815049083.0000000000BE0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	BE0000
Size:	4096

Details

Name:	00000005.00000003.610621861.0000000003714000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3714000
Size:	4096

Details

Name:	00000003.00000003.706702830.0000000003350000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3350000
Size:	4096

Details

Name:	00000000.00000003.704536052.0000000001262000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1262000
Size:	118784

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000003.543652061.0000000003714000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3714000
Size:	4096

Details

Name:	00000004.00000003.662797802.0000000000541000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	541000
Size:	12288

Details

Name:	00000005.00000002.815605038.0000000002D26000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D26000
Size:	12288

Details

Name:	0000000D.00000002.458753257.000000891627E000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	891627E000
Size:	8192

Details

Name:	00000000.00000003.773583535.0000000001265000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1265000
Size:	32768

Details

Name:	00000001.00000003.303548505.000002255D84F000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2255D84F000
Size:	4096

Details

Name:	00000004.00000003.590674430.000000000052C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	52C000
Size:	8192

Details

Name:	00000003.00000003.475051818.0000000005C21000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C21000
Size:	811008

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000003.662499551.000000000049F000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	49F000
Size:	8192

Details

Name:	00000001.00000000.292258120.00007DF503812000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF503812000
Size:	4096

Details

Name:	00000003.00000003.566733560.0000000005C47000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C47000
Size:	16384

Details

Name:	0000000D.00000002.459174712.000001A42C302000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42C302000
Size:	16384

Details

Name:	00000003.00000003.451381888.00000000033B6000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B6000
Size:	32768

Details

Name:	00000005.00000002.817507703.0000000005200000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	5200000
Size:	733184

Details

Name:	00000005.00000003.565506328.0000000003687000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3687000
Size:	106496

Details

Name:	00000003.00000003.451525275.000000000333A000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	333A000
Size:	20480

Details

Name:	0000000D.00000002.458844364.000001A42C1F0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42C1F0000
Size:	4096

Details

Name:	00000007.00000002.384184309.000001FC1F63C000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FC1F63C000
Size:	65536

Details

Name:	0000000D.00000002.459785176.00007FF595DB7000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595DB7000
Size:	4096

Details

Name:	00000004.00000003.473609933.00000000004A4000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A4000
Size:	24576

Details

Name:	00000000.00000002.815413798.00000000010E0000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	10E0000
Size:	45056

Details

Name:	00000003.00000002.818459156.0000000010000000.00000040.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute and read and write
Base address:	10000000
Size:	16384

Details

Name:	00000003.00000003.588777939.000000000336B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	336B000
Size:	147456

Details

Name:	00000005.00000003.705164063.00000000036F9000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36F9000
Size:	4096

Details

Name:	00000001.00000002.304654602.00007FF4F5A31000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5A31000
Size:	12288

Details

Name:	00000005.00000003.365104230.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000004.00000003.799735985.0000000000542000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	542000
Size:	12288

Details

Name:	00000003.00000003.706871504.00000000033B2000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B2000
Size:	16384

Details

Name:	00000007.00000002.384883955.00007FF583D51000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF583D51000
Size:	32768

Details

Name:	00000005.00000003.660647480.0000000005863000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5863000
Size:	4096

Details

Name:	00000005.00000003.362750870.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	0000000D.00000003.447581114.000001A42D063000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42D063000
Size:	397312

Details

Name:	00000003.00000002.815882326.0000000002ACC000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2ACC000
Size:	4096

Details

Name:	00000013.00000002.817003286.00007FF5655D5000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5655D5000
Size:	16384

Details

Name:	00000004.00000003.406696937.000000000049F000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	49F000
Size:	8192

Details

Name:	00000003.00000002.814971898.00000000028E7000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28E7000
Size:	4096

Details

Name:	00000000.00000003.382746631.0000000003B8A000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	3B8A000
Size:	4096

Details

Name:	00000009.00000002.414955305.000000FF5ADFF000.00000004.00000010.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	FF5ADFF000
Size:	4096

Details

Name:	00000000.00000002.817631728.0000000010000000.00000040.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute and read and write
Base address:	10000000
Size:	16384

Details

Name:	00000005.00000003.372420951.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000003.00000003.733617490.00000000053D1000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	53D1000
Size:	77824

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000002.818170036.00000000048F0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	48F0000
Size:	4096

Details

Name:	00000007.00000002.384379341.00007DF5919D2000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5919D2000
Size:	4096

Details

Name:	00000000.00000003.704636309.000000000124F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	124F000
Size:	8192

Details

Name:	00000005.00000003.422298901.00000000036F6000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36F6000
Size:	8192

Details

Name:	00000003.00000002.817694217.00000000052D9000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	52D9000
Size:	57344

Details

Name:	00000003.00000003.588722979.00000000033CE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33CE000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000003.437048050.000001A42CB7E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB7E000
Size:	4096

Details

Name:	00000009.00000002.415526258.00007FF51435A000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51435A000
Size:	8192

Details

Name:	00000005.00000002.814870597.0000000002B47000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B47000
Size:	4096

Details

Name:	00000004.00000003.473622069.00000000004AB000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4AB000
Size:	303104

Details

Name:	00000003.00000002.815627495.0000000002A50000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A50000
Size:	73728

Details

Name:	00000005.00000003.370947785.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000009.00000002.415347620.00007FF514191000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF514191000
Size:	12288

Details

Name:	0000000D.00000003.437054699.000001A42CB85000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB85000
Size:	16384

Details

Name:	00000009.00000002.415465712.00007FF514300000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF514300000
Size:	4096

Details

Name:	00000005.00000003.371281955.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	0000000E.00000002.446227980.00007FF53983D000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53983D000
Size:	8192

Details

Name:	00000007.00000002.384902924.00007FF583D61000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF583D61000
Size:	16384

Details

Name:	00000000.00000002.817222563.00000000036FD000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	36FD000
Size:	12288

Details

Name:	00000005.00000003.539354893.00000000036A2000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A2000
Size:	106496

Details

Name:	0000000D.00000003.438993834.000001A42CB88000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB88000
Size:	8192

Details

Name:	0000000D.00000003.447479127.000001A42D002000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42D002000
Size:	794624

Details

Name:	00000005.00000003.610923277.00000000036ED000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36ED000
Size:	28672

Details

Name:	00000007.00000002.384704882.00007FF583C6D000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF583C6D000
Size:	4096

Details

Name:	00000000.00000003.796353008.000000000127E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	127E000
Size:	4096

Details

Name:	00000004.00000003.501095517.0000000000547000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	547000
Size:	4096

Details

Name:	00000000.00000003.353442457.0000000001130000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1130000
Size:	4096

Details

Name:	00000004.00000003.754661040.0000000005128000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5128000
Size:	12288

Details

Name:	0000000D.00000002.458838130.000001A42C1D0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A42C1D0000
Size:	16384

Details

Name:	00000001.00000002.304443132.000002255D890000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2255D890000
Size:	28672

Details

Name:	00000003.00000003.588820522.000000000333F000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	333F000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000003.384954068.0000000004D0B000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4D0B000
Size:	4096

Details

Name:	00000005.00000003.565554123.00000000036A2000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A2000
Size:	8192

Details

Name:	00000007.00000002.384254142.000001FC1F700000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FC1F700000
Size:	4096

Details

Name:	00000003.00000003.523341991.00000000057CB000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	57CB000
Size:	4096

Details

Name:	0000000E.00000002.446139867.00007FF539087000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF539087000
Size:	8192

Details

Name:	00000004.00000003.733058422.0000000000519000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	519000
Size:	8192

Details

Name:	00000004.00000003.706614864.00000000004A0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A0000
Size:	4096

Details

Name:	00000003.00000003.566795582.00000000033CE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33CE000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.684527701.00000000033BE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33BE000
Size:	4096

Details

Name:	00000009.00000002.415530608.00007FF51435D000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51435D000
Size:	8192

Details

Name:	00000003.00000002.817430448.0000000003760000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3760000
Size:	323584

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	00000005.00000002.819124755.000000007F3A2000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F3A2000
Size:	4096

Details

Name:	00000000.00000003.588332414.00000000011D8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11D8000
Size:	40960

Details

Name:	00000004.00000003.593571318.0000000000536000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	536000
Size:	8192

Details

Name:	00000004.00000003.771156473.0000000000535000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	535000
Size:	53248

Details

Name:	00000004.00000003.662760622.0000000000528000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	528000
Size:	12288

Details

Name:	00000003.00000003.639527522.0000000003390000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3390000
Size:	131072

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.815750106.00000000011E8000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	11E8000
Size:	98304

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.521503192.00000000033BE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33BE000
Size:	4096

Details

Name:	00000003.00000002.815783994.0000000002AB1000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AB1000
Size:	32768

Details

Name:	00000004.00000003.771010926.0000000000535000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	535000
Size:	61440

Details

Name:	00000013.00000000.545483967.00007DF573242000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF573242000
Size:	4096

Details

Name:	00000005.00000003.799324764.0000000003714000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3714000
Size:	4096

Details

Name:	00000000.00000003.704325042.00000000043A1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	43A1000
Size:	430080

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000003.364853123.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000003.00000003.473327174.000000000333A000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	333A000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000003.367098217.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000005.00000000.294631784.000000007F3C0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F3C0000
Size:	12288

Details

Name:	00000005.00000002.817196816.0000000003720000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3720000
Size:	36864

Details

Name:	00000005.00000003.370889275.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000004.00000002.817700720.00000000042AD000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	42AD000
Size:	12288

Details

Name:	00000001.00000002.304662727.00007FF4F5AA7000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5AA7000
Size:	4096

Details

Name:	00000001.00000002.304365487.000002255D7E0000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2255D7E0000
Size:	16384

Details

Name:	00000004.00000002.815343024.0000000000415000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	415000
Size:	8192

Details

Name:	00000007.00000002.384083326.000001FC1F5B0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FC1F5B0000
Size:	16384

Details

Name:	0000000D.00000000.431901297.00007DF5A3B30000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A3B30000
Size:	4096

Details

Name:	00000000.00000002.815569753.000000000118B000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	118B000
Size:	299008

Signature Hits	Behavior Group	Mitre Attack
Creates a DirectInput object (often for capturing keystrokes)	Key, Mouse, Clipboard, Microphone and Screen Capturing	Input Capture
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.521496892.00000000033B8000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33B8000
Size:	16384

Details

Name:	00000009.00000002.415413424.00007FF514261000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF514261000
Size:	12288

Details

Name:	00000009.00000000.402427857.00007DF522060000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF522060000
Size:	12288

Details

Name:	00000004.00000002.818300813.0000000004E5C000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4E5C000
Size:	16384

Details

Name:	00000003.00000003.475229450.0000000005D21000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5D21000
Size:	458752

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000003.543841448.0000000005863000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5863000
Size:	4096

Details

Name:	00000004.00000003.593406668.00000000004B1000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B1000
Size:	278528

Details

Name:	00000003.00000003.684555839.00000000033CE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33CE000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000003.447424595.000001A42CB8E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB8E000
Size:	397312

Details

Name:	00000004.00000002.816515303.0000000000747000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	747000
Size:	8192

Details

Name:	00000007.00000002.384012220.0000003BEB6FE000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3BEB6FE000
Size:	8192

Details

Name:	00000000.00000003.495485466.0000000001266000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1266000
Size:	102400

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.816143931.0000000001258000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1258000
Size:	20480

Details

Name:	00000003.00000003.684253897.0000000003332000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3332000
Size:	28672

Details

Name:	00000005.00000003.746525440.00000000036A5000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A5000
Size:	94208

Details

Name:	00000004.00000002.817339168.00000000028AB000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28AB000
Size:	12288

Details

Name:	00000005.00000002.816850828.00000000036A5000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	36A5000
Size:	94208

Details

Name:	00000005.00000003.588967742.0000000005BEA000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5BEA000
Size:	4096

Details

Name:	00000013.00000002.816041991.00007DF573242000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF573242000
Size:	4096

Details

Name:	00000003.00000003.639425057.000000000333A000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	333A000
Size:	86016

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000002.817545811.0000000002B10000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B10000
Size:	323584

Details

Name:	0000000D.00000003.435585378.000001A42CB7F000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB7F000
Size:	4096

Details

Name:	00000001.00000002.304456839.000002255D908000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2255D908000
Size:	24576

Details

Name:	00000003.00000003.684376252.0000000003353000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3353000
Size:	4096

Details

Name:	0000000D.00000002.459451616.00007DF5A3B32000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A3B32000
Size:	4096

Details

Name:	00000005.00000003.365354407.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000004.00000003.451758001.00000000004A0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A0000
Size:	4096

Details

Name:	00000004.00000003.754899934.000000000049F000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	49F000
Size:	8192

Details

Name:	00000004.00000003.662479678.0000000000541000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	541000
Size:	12288

Details

Name:	00000004.00000002.817722442.00000000042D0000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	42D0000
Size:	4096

Details

Name:	00000009.00000002.415188115.000002205E010000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2205E010000
Size:	12288

Details

Name:	00000005.00000003.728226607.00000000036FB000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36FB000
Size:	4096

Details

Name:	00000000.00000003.588532271.0000000001252000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1252000
Size:	4096

Details

Name:	0000000D.00000002.459556487.00007FF5959A1000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5959A1000
Size:	20480

Details

Name:	00000001.00000002.304943318.00007FF4F5AD7000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5AD7000
Size:	16384

Details

Name:	00000005.00000002.815356103.0000000002CAC000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CAC000
Size:	8192

Details

Name:	00000003.00000003.641103834.00000000057CB000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	57CB000
Size:	4096

Details

Name:	00000005.00000003.375906164.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000005.00000003.567295497.0000000005BEA000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5BEA000
Size:	4096

Details

Name:	00000003.00000003.684360668.0000000003350000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3350000
Size:	4096

Details

Name:	00000003.00000003.521579273.0000000003390000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3390000
Size:	163840

Details

Name:	00000003.00000002.817777666.00000000053E3000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	53E3000
Size:	4096

Details

Name:	00000000.00000002.815135395.0000000000C66000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C66000
Size:	4096

Details

Name:	0000000D.00000002.459569358.00007FF595A27000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595A27000
Size:	4096

Details

Name:	00000005.00000003.728426861.0000000003676000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3676000
Size:	24576

Details

Name:	00000001.00000000.292244020.000002255D6B0000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2255D6B0000
Size:	102400

Details

Name:	00000013.00000002.816742844.00007FF56552B000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF56552B000
Size:	12288

Details

Name:	00000005.00000002.818334608.0000000005C3B000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5C3B000
Size:	20480

Details

Name:	0000000E.00000002.445959976.00000241316A0000.00000004.00000001.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	241316A0000
Size:	61440

Details

Name:	00000004.00000003.770766288.0000000005292000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5292000
Size:	4096

Details

Name:	00000003.00000003.707186737.00000000033CE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33CE000
Size:	4096

Details

Name:	00000005.00000003.543755704.00000000036BD000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36BD000
Size:	36864

Details

Name:	0000000D.00000002.459704443.00007FF595CD2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595CD2000
Size:	8192

Details

Name:	00000005.00000003.706531939.000000000367D000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	367D000
Size:	16384

Details

Name:	00000004.00000002.815924863.00000000004F6000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	4F6000
Size:	151552

Details

Name:	00000009.00000002.415312894.00007FF513EC7000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF513EC7000
Size:	32768

Details

Name:	00000001.00000000.292268063.00007DF503830000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF503830000
Size:	12288

Details

Name:	0000000D.00000002.459695829.00007FF595CCF000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595CCF000
Size:	8192

Details

Name:	00000005.00000003.635614425.0000000003702000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3702000
Size:	77824

Details

Name:	0000000E.00000000.432840492.00007DF547520000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF547520000
Size:	4096

Details

Name:	0000000D.00000003.458534520.000001A42C265000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42C265000
Size:	16384

Details

Name:	00000005.00000000.294523527.0000000002F90000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2F90000
Size:	102400

Details

Name:	00000004.00000002.817003447.00000000027DE000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	27DE000
Size:	8192

Details

Name:	00000003.00000002.817952188.0000000005C40000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5C40000
Size:	45056

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000002.816111043.0000000003550000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3550000
Size:	20480

Details

Name:	00000007.00000002.384654735.00007FF583BE1000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF583BE1000
Size:	12288

Details

Name:	00000003.00000002.818314511.0000000005CD0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5CD0000
Size:	12288

Details

Name:	00000003.00000003.521514193.00000000033CE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33CE000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000002.459403538.000001A42CB88000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB88000
Size:	20480

Details

Name:	0000000D.00000002.459415302.000001A42D000000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42D000000
Size:	8192

Details

Name:	00000004.00000003.754881636.000000000052C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	52C000
Size:	16384

Details

Name:	00000004.00000002.818249962.0000000004D9D000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4D9D000
Size:	12288

Details

Name:	0000000D.00000003.443186804.000001A42CB7D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB7D000
Size:	4096

Details

Name:	0000000D.00000003.458490558.000001A42CB7D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB7D000
Size:	20480

Details

Name:	00000004.00000003.522779514.0000000000547000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	547000
Size:	4096

Details

Name:	00000005.00000003.443966722.00000000036E6000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36E6000
Size:	16384

Details

Name:	00000005.00000002.818780527.0000000006073000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6073000
Size:	4096

Details

Name:	00000004.00000003.733083724.000000000052C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	52C000
Size:	24576

Details

Name:	00000003.00000003.639549220.000000000333F000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	333F000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000003.657226659.00000000036A2000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A2000
Size:	8192

Details

Name:	00000003.00000002.815918484.0000000002AD8000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AD8000
Size:	16384

Details

Name:	00000000.00000002.816270438.000000000127E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	127E000
Size:	4096

Details

Name:	00000004.00000003.380856961.0000000000680000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	680000
Size:	4096

Details

Name:	00000005.00000002.817176637.0000000003714000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	3714000
Size:	4096

Details

Name:	00000004.00000002.815425321.0000000000440000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	440000
Size:	4096

Details

Name:	00000005.00000003.799388855.00000000036BD000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36BD000
Size:	245760

Details

Name:	00000003.00000003.496943381.000000000333F000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	333F000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000003.438589183.000001A42CB7E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB7E000
Size:	294912

Details

Name:	0000000D.00000002.458819906.000001A42C190000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A42C190000
Size:	12288

Details

Name:	00000000.00000003.773635920.00000000011E7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	11E7000
Size:	102400

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	0000000D.00000002.458832794.000001A42C1C0000.00000004.00000020.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1A42C1C0000
Size:	12288

Details

Name:	00000003.00000002.817659761.0000000004F5F000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	4F5F000
Size:	4096

Details

Name:	00000005.00000003.610833712.00000000036BD000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36BD000
Size:	192512

Details

Name:	00000005.00000002.818804365.00000000060A6000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	60A6000
Size:	12288

Details

Name:	00000005.00000003.366985680.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	0000000E.00000002.445951007.0000024131698000.00000004.00000001.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24131698000
Size:	28672

Details

Name:	00000003.00000002.817836853.000000000595D000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	595D000
Size:	12288

Details

Name:	00000005.00000003.746484228.0000000003714000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3714000
Size:	4096

Details

Name:	00000000.00000002.817465445.00000000040E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	40E0000
Size:	4096

Details

Name:	00000003.00000002.815513921.0000000002A1B000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A1B000
Size:	12288

Details

Name:	0000000E.00000002.446064468.0000024131B80000.00000002.00020000.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24131B80000
Size:	4096

Details

Name:	00000000.00000002.815491710.000000000116C000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	116C000
Size:	16384

Details

Name:	00000009.00000003.414661163.000002205DC6C000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2205DC6C000
Size:	16384

Details

Name:	00000003.00000002.817318946.00000000033C0000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	33C0000
Size:	8192

Details

Name:	00000005.00000003.799354995.00000000036A2000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36A2000
Size:	8192

Details

Name:	00000005.00000003.371014359.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000005.00000003.377344361.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000005.00000003.543705817.00000000036F4000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36F4000
Size:	24576

Details

Name:	00000001.00000002.304568336.00007FF4F5936000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5936000
Size:	16384

Details

Name:	00000005.00000003.443975695.00000000036EF000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36EF000
Size:	20480

Details

Name:	00000005.00000003.777754390.0000000005863000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5863000
Size:	4096

Details

Name:	00000003.00000003.684779311.00000000033CE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33CE000
Size:	4096

Details

Name:	00000009.00000002.415446386.00007FF5142ED000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5142ED000
Size:	4096

Details

Name:	00000003.00000003.383337032.00000000057CC000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	57CC000
Size:	4096

Details

Name:	00000005.00000003.386185239.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000004.00000003.708524968.000000000051C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C000
Size:	53248

Details

Name:	00000009.00000002.415208834.000002205E280000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2205E280000
Size:	4096

Details

Name:	00000003.00000003.639572379.0000000003353000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3353000
Size:	4096

Details

Name:	00000000.00000002.814915967.0000000000ACD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	ACD000
Size:	12288

Details

Name:	00000000.00000002.816241014.0000000001265000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1265000
Size:	32768

Details

Name:	0000000D.00000003.439792908.000001A42CBA7000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CBA7000
Size:	65536

Details

Name:	00000000.00000003.498851075.0000000001257000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1257000
Size:	32768

Details

Name:	00000003.00000003.588763141.0000000003356000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3356000
Size:	81920

Details

Name:	00000004.00000001.293907234.0000000010000000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	10000000
Size:	4096

Details

Name:	00000004.00000003.708497207.00000000004F6000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F6000
Size:	151552

Details

Name:	00000013.00000003.559249531.0000024895560000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24895560000
Size:	20480

Details

Name:	0000000D.00000002.459940716.00007FF595EBA000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595EBA000
Size:	4096

Details

Name:	00000007.00000002.384514305.00007FF583841000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF583841000
Size:	20480

Details

Name:	00000003.00000003.566818324.000000000333A000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	333A000
Size:	86016

Details

Name:	00000005.00000002.814881872.0000000002B49000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B49000
Size:	16384

Details

Name:	00000007.00000000.367907035.00007FF583D61000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF583D61000
Size:	16384

Details

Name:	0000000D.00000002.459389459.000001A42CB7D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB7D000
Size:	20480

Details

Name:	00000007.00000002.384257792.000001FC1F702000.00000004.00000001.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1FC1F702000
Size:	16384

Details

Name:	00000003.00000003.708934943.00000000057CC000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	57CC000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000002.817385909.00000000028BB000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28BB000
Size:	20480

Details

Name:	00000005.00000003.387504426.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000005.00000003.468279385.00000000036BD000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36BD000
Size:	36864

Details

Name:	00000005.00000003.365821269.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	0000000E.00000002.445835646.000000E6DB57F000.00000004.00000010.sdmp
TargetID:	14
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	E6DB57F000
Size:	4096

Details

Name:	00000000.00000003.495589676.0000000001257000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1257000
Size:	45056

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000002.816064279.00000000030E0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	30E0000
Size:	4096

Details

Name:	00000004.00000003.593371077.0000000000538000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	538000
Size:	24576

Details

Name:	00000001.00000002.305236687.00007FF4F5B9A000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5B9A000
Size:	12288

Details

Name:	00000005.00000003.468312637.0000000003676000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3676000
Size:	24576

Details

Name:	00000005.00000003.746596114.000000000367D000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	367D000
Size:	16384

Details

Name:	00000003.00000002.816826231.000000000331D000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	331D000
Size:	73728

Details

Name:	00000005.00000003.364618608.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	0000000D.00000002.459423997.00007DF4A19F0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4A19F0000
Size:	20480

Details

Name:	00000005.00000003.361138848.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000001.00000002.304552575.00007FF4F5691000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5691000
Size:	20480

Details

Name:	00000005.00000003.752097077.0000000005FB1000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5FB1000
Size:	274432

Details

Name:	00000005.00000003.386823221.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000000.00000002.817408237.0000000003C9F000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3C9F000
Size:	4096

Details

Name:	00000005.00000002.814999729.0000000002C3F000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C3F000
Size:	20480

Details

Name:	00000005.00000002.815853188.0000000003360000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3360000
Size:	8192

Details

Name:	00000013.00000002.816899843.00007FF5655B9000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5655B9000
Size:	12288

Details

Name:	0000000D.00000003.440497638.000001A42CB7D000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB7D000
Size:	12288

Details

Name:	00000005.00000003.517385457.00000000036C7000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36C7000
Size:	151552

Details

Name:	00000005.00000003.539395574.00000000036C7000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36C7000
Size:	151552

Details

Name:	00000000.00000002.815825005.0000000001204000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1204000
Size:	208896

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000002.819015141.0000000010005000.00000040.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute and read and write
Base address:	10005000
Size:	40960

Details

Name:	00000000.00000003.773622495.0000000001258000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1258000
Size:	40960

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000003.382905044.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000000.00000002.817586043.000000000433A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	433A000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000002.816158256.0000000003120000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3120000
Size:	4096

Details

Name:	00000005.00000003.362007173.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000004.00000003.522904956.000000000512B000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	512B000
Size:	16384

Details

Name:	00000003.00000003.707008335.0000000003356000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3356000
Size:	81920

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.773733243.000000000124F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	124F000
Size:	8192

Details

Name:	00000005.00000003.468249955.0000000003681000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3681000
Size:	131072

Details

Name:	00000005.00000003.728248248.0000000003702000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3702000
Size:	32768

Details

Name:	00000003.00000002.815767294.0000000002AAB000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AAB000
Size:	20480

Details

Name:	00000009.00000002.415229260.00007DF522042000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF522042000
Size:	4096

Details

Name:	00000005.00000003.660666533.0000000005BEA000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5BEA000
Size:	4096

Details

Name:	00000004.00000002.818523150.00000000051A3000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	51A3000
Size:	4096

Details

Name:	00000005.00000003.543848684.0000000005BEB000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5BEB000
Size:	4096

Details

Name:	00000003.00000003.639597088.000000000336B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	336B000
Size:	147456

Details

Name:	00000005.00000003.517017043.0000000003676000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3676000
Size:	24576

Details

Name:	00000004.00000002.818043708.000000000483C000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	483C000
Size:	16384

Details

Name:	00000005.00000003.386655315.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000005.00000003.611302521.0000000005BEA000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5BEA000
Size:	4096

Details

Name:	00000004.00000003.451885256.0000000000489000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	489000
Size:	57344

Details

Name:	00000004.00000003.430085040.00000000004A4000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4A4000
Size:	24576

Details

Name:	00000003.00000002.814950238.00000000028E4000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28E4000
Size:	4096

Details

Name:	00000004.00000003.770999241.0000000000533000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	533000
Size:	4096

Details

Name:	00000005.00000003.363179163.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000000.00000003.704097811.00000000043A1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	43A1000
Size:	1236992

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	0000000D.00000002.458700205.0000008915C7E000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8915C7E000
Size:	8192

Details

Name:	00000004.00000002.818714897.0000000010000000.00000040.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute and read and write
Base address:	10000000
Size:	16384

Details

Name:	00000003.00000003.496923629.0000000003390000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3390000
Size:	163840

Details

Name:	00000001.00000003.303514742.000002255D867000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2255D867000
Size:	12288

Details

Name:	00000005.00000003.706435284.00000000036BD000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36BD000
Size:	245760

Details

Name:	00000005.00000003.728416736.0000000003672000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3672000
Size:	4096

Details

Name:	00000000.00000003.588196406.0000000001262000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1262000
Size:	118784

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.588277330.000000000124F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	124F000
Size:	8192

Details

Name:	00000001.00000003.303491104.000002255D87C000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2255D87C000
Size:	36864

Details

Name:	0000000D.00000003.439150664.000001A42CB91000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB91000
Size:	32768

Details

Name:	00000009.00000003.414674010.000002205DC51000.00000004.00000001.sdmp
TargetID:	9
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2205DC51000
Size:	4096

Details

Name:	0000000D.00000002.459116462.000001A42C2C3000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42C2C3000
Size:	81920

Details

Name:	00000003.00000003.499928627.00000000033CE000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33CE000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000013.00000002.815881490.0000024895290000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24895290000
Size:	4096

Details

Name:	00000003.00000003.544936249.0000000003350000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3350000
Size:	4096

Details

Name:	00000004.00000002.818062043.000000000487C000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	487C000
Size:	16384

Details

Name:	00000000.00000003.588112317.00000000043A1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	43A1000
Size:	462848

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000013.00000002.815034870.00000248945B0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	248945B0000
Size:	102400

Details

Name:	00000005.00000003.490217214.0000000003688000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3688000
Size:	102400

Details

Name:	00000003.00000003.521491169.0000000005C3C000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C3C000
Size:	4096

Details

Name:	00000005.00000003.543632510.0000000005BEC000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5BEC000
Size:	4096

Details

Name:	00000013.00000002.816298938.00007FF564E5F000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF564E5F000
Size:	4096

Details

Name:	00000001.00000002.304465234.000002255DA00000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2255DA00000
Size:	4096

Details

Name:	00000005.00000003.610650761.0000000003683000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3683000
Size:	122880

Details

Name:	00000007.00000002.384836727.00007FF583CDA000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF583CDA000
Size:	8192

Details

Name:	00000003.00000003.496876297.000000000333A000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	333A000
Size:	86016

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000002.816008175.0000000002DF0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2DF0000
Size:	16384

Details

Name:	00000000.00000002.817707476.000000007F170000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F170000
Size:	20480

Details

Name:	00000005.00000002.815892697.00000000033A0000.00000040.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page execute and read and write
Base address:	33A0000
Size:	4096

Details

Name:	00000007.00000002.383993929.0000003BEB5F7000.00000004.00000010.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3BEB5F7000
Size:	36864

Details

Name:	0000000D.00000002.459536622.00007FF595687000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595687000
Size:	8192

Details

Name:	00000000.00000003.796327032.0000000001265000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1265000
Size:	32768

Details

Name:	00000005.00000003.635515898.0000000005BEC000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5BEC000
Size:	4096

Details

Name:	00000005.00000003.443895022.00000000036F6000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36F6000
Size:	8192

Details

Name:	00000005.00000003.777591133.0000000006073000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6073000
Size:	4096

Details

Name:	00000005.00000003.746449639.00000000036FB000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36FB000
Size:	4096

Details

Name:	00000003.00000003.684620004.0000000003390000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3390000
Size:	135168

Details

Name:	00000000.00000002.816378518.0000000001491000.00000020.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	1491000
Size:	45056

Details

Name:	00000003.00000003.591635505.000000000333A000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	333A000
Size:	90112

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.588311721.0000000001252000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1252000
Size:	4096

Details

Name:	00000004.00000002.815295426.0000000000410000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	410000
Size:	16384

Details

Name:	00000005.00000003.632787695.0000000003700000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3700000
Size:	20480

Details

Name:	00000013.00000002.816722866.00007FF565503000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF565503000
Size:	12288

Details

Name:	00000000.00000002.815219774.0000000000F10000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	F10000
Size:	4096

Details

Name:	00000004.00000003.593508623.0000000000529000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	529000
Size:	8192

Details

Name:	00000007.00000002.384624232.00007FF583BB5000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF583BB5000
Size:	20480

Details

Name:	00000004.00000003.593450368.00000000004F6000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4F6000
Size:	151552

Details

Name:	0000000D.00000002.459679931.00007FF595C8D000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF595C8D000
Size:	4096

Details

Name:	00000009.00000002.415365368.00007FF5141B0000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5141B0000
Size:	4096

Details

Name:	00000005.00000003.368268183.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000001.00000002.304325656.000000A5E88FE000.00000004.00000010.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A5E88FE000
Size:	8192

Details

Name:	00000005.00000003.635689593.00000000036FF000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36FF000
Size:	12288

Details

Name:	00000003.00000003.639407158.0000000003332000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3332000
Size:	28672

Details

Name:	00000013.00000002.816771204.00007FF565532000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF565532000
Size:	28672

Details

Name:	00000004.00000003.546038351.000000000512C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	512C000
Size:	12288

Details

Name:	00000005.00000003.512163481.000000000367D000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	367D000
Size:	16384

Details

Name:	00000007.00000002.384597442.00007FF583B4B000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF583B4B000
Size:	8192

Details

Name:	00000004.00000003.770953931.000000000052C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	52C000
Size:	24576

Details

Name:	00000005.00000003.377143242.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000003.00000002.816443919.000000000320D000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	320D000
Size:	12288

Details

Name:	00000003.00000003.451488138.000000000338E000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	338E000
Size:	4096

Details

Name:	00000001.00000002.304492714.000002255DD80000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2255DD80000
Size:	4096

Details

Name:	00000007.00000002.384069618.000001FC1F4A0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1FC1F4A0000
Size:	12288

Details

Name:	00000003.00000003.639619726.0000000003390000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3390000
Size:	131072

Details

Name:	00000003.00000002.816026862.0000000002E06000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2E06000
Size:	8192

Details

Name:	0000000D.00000003.458521428.000001A42C281000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42C281000
Size:	24576

Details

Name:	00000003.00000003.733514040.0000000005C4B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C4B000
Size:	8192

Details

Name:	00000000.00000003.680092805.0000000001258000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1258000
Size:	40960

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000003.367230898.0000000003400000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	3400000
Size:	4096

Details

Name:	00000003.00000003.706747138.0000000003356000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3356000
Size:	81920

Details

Name:	00000003.00000003.475292368.00000000033BC000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	33BC000
Size:	77824

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000009.00000002.415237799.00007DF522052000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF522052000
Size:	4096

Details

Name:	00000005.00000003.728283070.0000000003681000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3681000
Size:	131072

Details

Name:	00000004.00000003.522895247.0000000000498000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	498000
Size:	28672

Details

Name:	0000000D.00000002.459310579.000001A42CB00000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1A42CB00000
Size:	65536

Details

Name:	00000005.00000003.657195308.0000000003714000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3714000
Size:	4096

Details

Name:	00000007.00000002.384341676.00007DF5919C0000.00000002.00020000.sdmp
TargetID:	7
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5919C0000
Size:	4096

Details

Name:	00000013.00000003.546072126.0000024894757000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24894757000
Size:	4096

Details

Name:	00000003.00000002.817667202.0000000004F60000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4F60000
Size:	4096

Details

Name:	00000009.00000002.414996781.000002205DAF0000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2205DAF0000
Size:	12288

Details

Name:	00000004.00000002.817715205.00000000042B0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	42B0000
Size:	4096

Details

Name:	00000005.00000003.683593306.0000000005BEA000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5BEA000
Size:	4096

Details

Name:	00000003.00000000.293153715.000000007F600000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F600000
Size:	4096

Details

Name:	00000003.00000002.816179451.0000000003140000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	3140000
Size:	4096

Details

Name:	00000004.00000002.818202949.0000000004984000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4984000
Size:	4096

Details

Name:	00000000.00000003.588027654.00000000042A1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	42A1000
Size:	741376

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.521548386.0000000003356000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3356000
Size:	81920

Details

Name:	00000003.00000003.588791855.0000000003390000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3390000
Size:	163840

Details

Name:	00000001.00000003.303528783.000002255D850000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2255D850000
Size:	77824

Details

Name:	00000004.00000003.501059156.0000000000528000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	528000
Size:	102400

Details

Name:	00000004.00000003.497634680.000000000512B000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	512B000
Size:	16384

Details

Name:	00000003.00000003.545233418.00000000057CB000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	57CB000
Size:	4096

Details

Name:	00000004.00000002.815642908.00000000004A4000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	4A4000
Size:	24576

Details

Name:	00000000.00000003.704565966.00000000042A1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	42A1000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.814837336.0000000000A70000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	A70000
Size:	102400

Details

Name:	00000001.00000002.305218478.00007FF4F5B2A000.00000002.00020000.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F5B2A000
Size:	8192

Details

Name:	00000005.00000003.543805340.00000000036ED000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	36ED000
Size:	28672

Details

Name:	00000004.00000002.817464711.00000000028D6000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28D6000
Size:	12288

Details

Name:	00000005.00000003.777807819.0000000005BEA000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5BEA000
Size:	4096

Details

Name:	00000004.00000003.706425425.00000000004B1000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4B1000
Size:	278528

Details

Name:	00000000.00000002.817771569.000000007F282000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F282000
Size:	4096

Details

Name:	00000004.00000003.662518771.00000000004AB000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	4AB000
Size:	24576

Details

Name:	00000005.00000003.705326349.0000000005FAF000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5FAF000
Size:	8192

Details

Name:	00000003.00000002.816224958.0000000003150000.00000040.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	3150000
Size:	4096

Details

Name:	00000005.00000003.777693217.0000000003701000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3701000
Size:	16384

Details

Name:	00000001.00000003.303563062.000002255D84D000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2255D84D000
Size:	8192

Details

Name:	00000003.00000003.708990364.0000000005C4D000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5C4D000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000001.00000002.304023053.000000A5E827C000.00000004.00000001.sdmp
TargetID:	1
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A5E827C000
Size:	16384

Details

Name:	00000003.00000003.499982114.00000000057CB000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	57CB000
Size:	8192

Details

Name:	00000009.00000000.402420531.00007DF522050000.00000002.00020000.sdmp
TargetID:	9
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF522050000
Size:	4096

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

IOC Report

Processes

URLs

Domains

IPs

Memdumps