Automated Malware Analysis IOC Report for

Details

Name:	00000005.00000003.672649818.0000000004E78000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4E78000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000003.672697027.0000000004E78000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4E78000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.654118322.0000000002F48000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	2F48000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.654205001.0000000002F48000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	2F48000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000002.815005781.0000000000830000.00000040.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page execute and read and write
Base address:	830000
Size:	45056

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000004.00000002.817399519.0000000004749000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4749000
Size:	57344

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.646144505.00000000050E8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	50E8000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000003.672676092.0000000004E78000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4E78000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000004.00000002.815886726.0000000002900000.00000040.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page execute and read and write
Base address:	2900000
Size:	45056

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000002.817115804.0000000010000000.00000040.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute and read and write
Base address:	10000000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.654235540.0000000002F48000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	2F48000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000003.811223945.0000000004B7E000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4B7E000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.646115707.00000000050E8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	50E8000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000002.818561170.0000000010000000.00000040.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute and read and write
Base address:	10000000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.646019987.00000000050E8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	50E8000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.645592862.00000000050E8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	50E8000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000003.720723374.0000000004E78000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4E78000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.645969253.00000000050E8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	50E8000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000002.817884334.0000000010000000.00000040.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute and read and write
Base address:	10000000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000003.672591556.0000000004E78000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4E78000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.738018487.0000000004F6B000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4F6B000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.654165254.0000000002F48000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	2F48000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000004.00000003.764209163.0000000004C3B000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4C3B000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000003.672715825.0000000004E78000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4E78000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000004.00000003.670047440.0000000004DB8000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4DB8000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000003.672729737.0000000004E78000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4E78000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000003.672559198.0000000004E78000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4E78000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000002.817039127.0000000004729000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4729000
Size:	57344

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.646158963.00000000050E8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	50E8000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.699467529.0000000002F48000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	2F48000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.790616577.0000000002C4E000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	2C4E000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000004.00000003.669942654.0000000004DB8000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4DB8000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.654221114.0000000002F48000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	2F48000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000003.672619281.0000000004E78000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4E78000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000004.00000003.669970468.0000000004DB8000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4DB8000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000004.00000002.818723438.0000000010000000.00000040.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute and read and write
Base address:	10000000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000002.816083495.0000000000BC0000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	BC0000
Size:	45056

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000002.816595690.00000000027E9000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	27E9000
Size:	57344

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000002.817687105.0000000004B09000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4B09000
Size:	57344

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.654078991.0000000002F48000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	2F48000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000004.00000003.669913969.0000000004DB8000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4DB8000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.783220677.0000000004DEE000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4DEE000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000003.766145775.0000000004CFB000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4CFB000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000005.00000002.815693935.0000000002910000.00000040.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page execute and read and write
Base address:	2910000
Size:	45056

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000000.00000003.654190370.0000000002F48000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	2F48000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.646095036.00000000050E8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	50E8000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000004.00000003.719495069.0000000004DB8000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4DB8000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000002.817815692.00000000050E8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	50E8000
Size:	12288

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.654145600.0000000002F48000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	2F48000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.646047536.00000000050E8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	50E8000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000003.00000003.692842307.00000000050E8000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	50E8000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.744523407.0000000002DCB000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	2DCB000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000004.00000003.670059469.0000000004DB8000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4DB8000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000004.00000003.670015268.0000000004DB8000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4DB8000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000004.00000003.669995191.0000000004DB8000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4DB8000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000004.00000003.670032388.0000000004DB8000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4DB8000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000004.00000003.808688574.0000000004ABE000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4ABE000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
Yara detected Ursnif	Key, Mouse, Clipboard, Microphone and Screen Capturing, E-Banking Fraud, Hooking and other Techniques for Hiding and Protection, Stealing of Sensitive Information, Remote Access Functionality

Details

Name:	00000016.00000003.658943623.000002455C002000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455C002000
Size:	159744

Details

Name:	00000004.00000003.494561537.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000012.00000002.564621022.00007FF53CBF2000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53CBF2000
Size:	4096

Details

Name:	00000000.00000002.816888266.000000000369F000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	369F000
Size:	4096

Details

Name:	00000005.00000003.716672412.0000000004350000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	4350000
Size:	4096

Details

Name:	00000004.00000002.815017705.000000000213B000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	213B000
Size:	4096

Details

Name:	00000003.00000002.817910004.0000000010005000.00000040.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute and read and write
Base address:	10005000
Size:	40960

Details

Name:	00000004.00000003.470045554.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000017.00000002.660726674.0000008EB858E000.00000004.00000010.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8EB858E000
Size:	8192

Details

Name:	0000000A.00000002.485326693.00007FF5BA887000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BA887000
Size:	4096

Details

Name:	00000016.00000002.673850428.00007FF531872000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531872000
Size:	4096

Details

Name:	00000000.00000003.494394212.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000000.00000003.427222173.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000003.00000003.464960205.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000000.00000003.433747082.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000017.00000002.661196993.00007FF50463B000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50463B000
Size:	12288

Details

Name:	00000005.00000002.815238443.0000000002197000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2197000
Size:	12288

Details

Name:	00000011.00000002.814859100.00000091374F9000.00000004.00000010.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	91374F9000
Size:	28672

Details

Name:	00000003.00000002.817842778.0000000005440000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5440000
Size:	4096

Details

Name:	00000004.00000002.814808099.000000000202D000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	202D000
Size:	4096

Details

Name:	00000011.00000002.815713679.000002008C150000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2008C150000
Size:	4096

Details

Name:	00000004.00000002.815420379.000000000223B000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	223B000
Size:	36864

Details

Name:	00000000.00000002.815055980.0000000000700000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	700000
Size:	16384

Details

Name:	00000004.00000003.466095820.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000016.00000002.674246548.00007FF531B1A000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531B1A000
Size:	8192

Details

Name:	00000004.00000002.816183848.00000000029F0000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	29F0000
Size:	4096

Details

Name:	00000013.00000002.576993460.0000008B11377000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8B11377000
Size:	36864

Details

Name:	00000014.00000002.611749344.00007FF5A691C000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A691C000
Size:	4096

Details

Name:	00000016.00000003.656816751.000002455BB93000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB93000
Size:	32768

Details

Name:	00000004.00000003.473433831.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000011.00000000.547453217.00007DF55E392000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55E392000
Size:	4096

Details

Name:	00000005.00000002.814932492.0000000002065000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2065000
Size:	12288

Details

Name:	00000003.00000003.456450485.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000005.00000002.815732070.0000000002940000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2940000
Size:	12288

Details

Name:	00000011.00000002.816415466.00007FF55068E000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55068E000
Size:	4096

Details

Name:	00000005.00000002.815878014.0000000002997000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2997000
Size:	12288

Details

Name:	00000013.00000002.577295593.00007DF542BF2000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF542BF2000
Size:	4096

Details

Name:	00000000.00000003.744331715.0000000000808000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	808000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000012.00000002.564647608.00007FF53D156000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53D156000
Size:	16384

Details

Name:	00000012.00000002.564513865.0000024AD1800000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24AD1800000
Size:	12288

Details

Name:	00000000.00000000.288328537.000000007FFA2000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFA2000
Size:	4096

Details

Name:	00000016.00000003.654206551.000002455C019000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455C019000
Size:	90112

Details

Name:	00000003.00000003.781452595.0000000000ADD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	ADD000
Size:	8192

Details

Name:	0000000A.00000002.483536018.00000050ACFFF000.00000004.00000010.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	50ACFFF000
Size:	4096

Details

Name:	00000012.00000002.564129274.000000D05E97E000.00000004.00000010.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	D05E97E000
Size:	8192

Details

Name:	00000013.00000002.577567549.00007FF534EDB000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF534EDB000
Size:	12288

Details

Name:	00000012.00000002.564682109.00007FF53D1BB000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53D1BB000
Size:	8192

Details

Name:	00000003.00000002.815080744.000000000085C000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	85C000
Size:	4096

Details

Name:	00000000.00000003.430937024.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000003.00000003.465937382.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000004.00000003.466746944.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000000.00000003.436641134.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000012.00000002.564868502.00007FF53D323000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53D323000
Size:	24576

Details

Name:	00000017.00000002.660808775.0000022B329C0000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	22B329C0000
Size:	12288

Details

Name:	00000004.00000003.470777919.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000011.00000002.815467298.000002008B5A5000.00000004.00000040.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2008B5A5000
Size:	12288

Details

Name:	00000000.00000003.480531877.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000005.00000002.815523439.000000000253B000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	253B000
Size:	20480

Details

Name:	0000000A.00000003.483044358.00000195BA64E000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	195BA64E000
Size:	131072

Details

Name:	00000004.00000002.818749072.0000000010005000.00000040.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute and read and write
Base address:	10005000
Size:	40960

Details

Name:	00000003.00000003.465429260.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000012.00000002.564103756.000000D05E87B000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	D05E87B000
Size:	20480

Details

Name:	00000013.00000002.577530502.00007FF534EA3000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF534EA3000
Size:	28672

Details

Name:	00000016.00000003.656770432.000002455BBB5000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BBB5000
Size:	126976

Details

Name:	00000004.00000002.815387323.000000000222A000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	222A000
Size:	24576

Details

Name:	00000004.00000002.818121354.000000000538D000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	538D000
Size:	12288

Details

Name:	00000000.00000003.789870701.0000000003DDD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DDD000
Size:	4096

Details

Name:	00000004.00000002.816268876.0000000002B10000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2B10000
Size:	32768

Details

Name:	00000013.00000002.577375416.00007FF5346D2000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5346D2000
Size:	4096

Details

Name:	00000016.00000003.660598005.000002455BB96000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB96000
Size:	45056

Details

Name:	00000005.00000003.719399177.0000000002A80000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2A80000
Size:	188416

Details

Name:	00000016.00000003.658754911.000002455BB9C000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB9C000
Size:	139264

Details

Name:	00000016.00000003.654171928.000002455BBA2000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BBA2000
Size:	49152

Details

Name:	00000005.00000003.809396540.0000000005751000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5751000
Size:	335872

Details

Name:	00000000.00000003.439924966.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000012.00000002.564717257.00007FF53D23C000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53D23C000
Size:	4096

Details

Name:	00000003.00000003.692734469.0000000005069000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	5069000
Size:	471040

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000016.00000003.659007837.000002455BB9B000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB9B000
Size:	212992

Details

Name:	00000005.00000003.720589205.00000000057E4000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57E4000
Size:	471040

Details

Name:	00000017.00000000.648565036.00007DF512362000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF512362000
Size:	4096

Details

Name:	00000004.00000002.817815911.000000000495C000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	495C000
Size:	16384

Details

Name:	00000005.00000002.814755036.0000000001F3B000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F3B000
Size:	8192

Details

Name:	00000016.00000002.674197721.00007FF531AEB000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531AEB000
Size:	12288

Details

Name:	00000013.00000002.577525438.00007FF534E9F000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF534E9F000
Size:	12288

Details

Name:	00000011.00000002.816306390.00007FF550643000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF550643000
Size:	8192

Details

Name:	00000013.00000000.565310781.000001B0F1C30000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0F1C30000
Size:	102400

Details

Name:	00000017.00000000.648572146.00007DF512370000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF512370000
Size:	12288

Details

Name:	00000000.00000003.789938667.00000000007A8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7A8000
Size:	126976

Details

Name:	00000000.00000003.465430041.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000016.00000002.673791305.00007FF531709000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531709000
Size:	4096

Details

Name:	00000005.00000003.764641677.0000000002A80000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2A80000
Size:	172032

Details

Name:	00000013.00000002.577300208.00007DF542C00000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF542C00000
Size:	4096

Details

Name:	00000005.00000003.765847502.0000000004E7B000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4E7B000
Size:	8192

Details

Name:	00000000.00000002.814742237.0000000000320000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	320000
Size:	4096

Details

Name:	00000013.00000002.577598071.00007FF534F62000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF534F62000
Size:	12288

Details

Name:	00000000.00000002.815582046.000000000085C000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	85C000
Size:	16384

Details

Name:	00000003.00000003.460673696.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000003.00000002.817336872.000000000303A000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	303A000
Size:	24576

Details

Name:	00000000.00000003.742430181.0000000000808000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	808000
Size:	94208

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000002.817781806.000000000520E000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	520E000
Size:	8192

Details

Name:	00000016.00000003.653034935.000002455BBC0000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BBC0000
Size:	126976

Details

Name:	0000000A.00000002.487747212.00007FF5BAAB7000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BAAB7000
Size:	16384

Details

Name:	00000004.00000003.474594238.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000017.00000002.660752046.0000008EB88F9000.00000004.00000010.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8EB88F9000
Size:	28672

Details

Name:	00000000.00000003.495416575.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000011.00000002.816267340.00007FF55063D000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55063D000
Size:	4096

Details

Name:	00000000.00000003.415497349.0000000000C10000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C10000
Size:	4096

Details

Name:	00000004.00000003.473563257.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000000.00000003.428899683.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000004.00000003.470499274.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000013.00000002.577434747.00007FF534D7B000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF534D7B000
Size:	8192

Details

Name:	00000004.00000002.816755929.0000000002BB4000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2BB4000
Size:	180224

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000011.00000002.816484371.00007FF550709000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF550709000
Size:	12288

Details

Name:	00000003.00000002.817154738.0000000002FDC000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2FDC000
Size:	8192

Details

Name:	00000003.00000002.814771319.0000000000440000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	440000
Size:	8192

Details

Name:	00000005.00000000.291126982.000000007F592000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F592000
Size:	4096

Details

Name:	00000005.00000003.763637427.0000000005751000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5751000
Size:	319488

Details

Name:	00000003.00000003.646168357.00000000050EB000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	50EB000
Size:	4096

Details

Name:	00000000.00000003.424749907.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000003.00000003.459497881.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000012.00000002.564478240.0000024AD1486000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24AD1486000
Size:	53248

Details

Name:	00000014.00000002.611542086.00007DF5B4720000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5B4720000
Size:	4096

Details

Name:	0000000A.00000002.483600663.00000195BA440000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	195BA440000
Size:	12288

Details

Name:	0000000A.00000002.485917496.00007FF5BA9FC000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BA9FC000
Size:	4096

Details

Name:	00000016.00000003.653130091.000002455BB5D000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB5D000
Size:	131072

Details

Name:	00000003.00000001.290295896.0000000010000000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	10000000
Size:	4096

Details

Name:	00000013.00000002.576978780.0000008B111FB000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8B111FB000
Size:	20480

Details

Name:	00000004.00000003.468039333.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000016.00000002.674091308.00007FF531A8E000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531A8E000
Size:	8192

Details

Name:	00000004.00000003.716825058.0000000002BA3000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2BA3000
Size:	65536

Details

Name:	00000016.00000002.673397486.000002455BB19000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB19000
Size:	4096

Details

Name:	00000005.00000002.814999907.0000000002077000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2077000
Size:	12288

Details

Name:	00000016.00000003.659555607.000002455BB19000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB19000
Size:	4096

Details

Name:	00000017.00000002.661049145.00007FF503EA1000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF503EA1000
Size:	8192

Details

Name:	00000000.00000001.297636472.0000000010000000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	10000000
Size:	4096

Details

Name:	00000004.00000002.817090821.0000000002FA0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2FA0000
Size:	364544

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	00000016.00000003.654225731.000002455C002000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455C002000
Size:	94208

Details

Name:	0000000A.00000002.484669363.00000195BA64B000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	195BA64B000
Size:	12288

Details

Name:	00000005.00000003.764567729.0000000005719000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5719000
Size:	4096

Details

Name:	00000003.00000003.691123931.0000000000A7E000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A7E000
Size:	16384

Details

Name:	00000000.00000002.816765386.0000000002B50000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2B50000
Size:	4096

Details

Name:	00000005.00000002.815507035.00000000024FC000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24FC000
Size:	16384

Details

Name:	00000000.00000002.815028350.00000000006FB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6FB000
Size:	20480

Details

Name:	0000000A.00000002.485284426.00007FF5BA671000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BA671000
Size:	20480

Details

Name:	00000000.00000003.433647406.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000003.00000002.816115477.0000000000C87000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	C87000
Size:	12288

Details

Name:	00000000.00000002.817260539.000000007FFA2000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFA2000
Size:	4096

Details

Name:	00000005.00000002.818682554.000000007F590000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F590000
Size:	4096

Details

Name:	00000003.00000002.814800888.0000000000600000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	600000
Size:	102400

Details

Name:	00000014.00000002.611426533.0000018EB6108000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18EB6108000
Size:	24576

Details

Name:	00000004.00000003.719381114.0000000002B9D000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2B9D000
Size:	8192

Details

Name:	00000003.00000002.816316387.000000000118E000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	118E000
Size:	4096

Details

Name:	0000000A.00000002.483631295.00000195BA470000.00000004.00000020.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	195BA470000
Size:	8192

Details

Name:	00000005.00000002.815896051.00000000029D0000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	29D0000
Size:	4096

Details

Name:	00000004.00000002.817864740.0000000004DB8000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4DB8000
Size:	12288

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.463387345.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000005.00000002.814890780.000000000203F000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	203F000
Size:	4096

Details

Name:	0000000A.00000002.485348428.00007FF5BA960000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BA960000
Size:	4096

Details

Name:	00000005.00000002.815363011.0000000002221000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2221000
Size:	32768

Details

Name:	00000014.00000002.611037581.0000003F7127F000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3F7127F000
Size:	4096

Details

Name:	0000000A.00000002.484800777.00000195BA700000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	195BA700000
Size:	4096

Details

Name:	00000017.00000002.660703236.0000008EB848A000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8EB848A000
Size:	24576

Details

Name:	00000004.00000003.491279795.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000000.00000003.452163575.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000017.00000002.660738712.0000008EB887E000.00000004.00000010.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8EB887E000
Size:	8192

Details

Name:	00000004.00000003.474735620.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000003.00000003.455881795.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000017.00000002.660933898.0000022B33080000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	22B33080000
Size:	4096

Details

Name:	00000000.00000003.459969271.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000005.00000002.815761364.0000000002980000.00000004.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2980000
Size:	4096

Details

Name:	00000014.00000002.611093793.0000003F715F7000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3F715F7000
Size:	36864

Details

Name:	00000013.00000002.577211037.000001B0F1F00000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B0F1F00000
Size:	4096

Details

Name:	00000016.00000002.674026053.00007FF531A0C000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531A0C000
Size:	4096

Details

Name:	00000013.00000002.577429355.00007FF534D60000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF534D60000
Size:	4096

Details

Name:	00000016.00000003.660704026.000002455BBB5000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BBB5000
Size:	106496

Details

Name:	00000004.00000003.466419626.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000014.00000002.611665699.00007FF5A6735000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A6735000
Size:	8192

Details

Name:	00000004.00000003.716835189.0000000002BB4000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2BB4000
Size:	172032

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000017.00000002.661165936.00007FF504610000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF504610000
Size:	4096

Details

Name:	00000000.00000002.817014132.0000000003CDA000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3CDA000
Size:	24576

Details

Name:	00000012.00000002.564115307.000000D05E8FE000.00000004.00000010.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	D05E8FE000
Size:	8192

Details

Name:	00000000.00000002.814771923.0000000000330000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	330000
Size:	102400

Details

Name:	00000003.00000003.689327545.0000000000920000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	920000
Size:	4096

Details

Name:	00000004.00000001.290661937.0000000010000000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	10000000
Size:	4096

Details

Name:	00000016.00000003.654243182.000002455BB80000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB80000
Size:	94208

Details

Name:	00000003.00000002.817363571.0000000003041000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3041000
Size:	32768

Details

Name:	00000005.00000002.815833328.000000000298C000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	298C000
Size:	4096

Details

Name:	00000004.00000002.815157676.0000000002189000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2189000
Size:	32768

Details

Name:	00000004.00000000.290396779.000000007F4D2000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F4D2000
Size:	4096

Details

Name:	00000013.00000002.577274773.000001B0F2380000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0F2380000
Size:	4096

Details

Name:	00000000.00000003.462444133.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000004.00000003.464120198.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000016.00000002.672890387.000002455B250000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2455B250000
Size:	12288

Details

Name:	00000003.00000002.817796241.0000000004CF0000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4CF0000
Size:	4096

Details

Name:	00000003.00000003.468037555.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000000.00000003.422057925.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000004.00000002.816147626.00000000029B5000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	29B5000
Size:	16384

Details

Name:	00000004.00000003.476446046.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	0000000A.00000002.484846904.00000195BA708000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	195BA708000
Size:	24576

Details

Name:	00000000.00000003.491548648.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000003.00000003.782309631.0000000005441000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5441000
Size:	708608

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000000.290356018.0000000002258000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2258000
Size:	16384

Details

Name:	00000017.00000003.660440249.0000022B32B31000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22B32B31000
Size:	49152

Details

Name:	00000012.00000002.564467472.0000024AD1470000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24AD1470000
Size:	49152

Details

Name:	00000005.00000002.816680952.0000000002CE0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2CE0000
Size:	69632

Details

Name:	0000000A.00000002.483473423.00000050ACD7B000.00000004.00000010.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	50ACD7B000
Size:	20480

Details

Name:	00000014.00000002.611886434.00007FF5A6A03000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A6A03000
Size:	24576

Details

Name:	00000000.00000003.475045245.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000014.00000002.611926958.00007FF5A6A89000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A6A89000
Size:	12288

Details

Name:	00000000.00000003.423274816.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000013.00000002.577334203.00007DF542C10000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF542C10000
Size:	12288

Details

Name:	00000004.00000002.815492668.0000000002252000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2252000
Size:	8192

Details

Name:	00000004.00000003.466238997.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000003.00000002.817174806.0000000002FE0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2FE0000
Size:	73728

Details

Name:	00000004.00000003.716816544.0000000002BDE000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2BDE000
Size:	8192

Details

Name:	00000013.00000002.577537906.00007FF534EB0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF534EB0000
Size:	4096

Details

Name:	00000012.00000002.564453511.0000024AD1457000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24AD1457000
Size:	98304

Details

Name:	00000014.00000002.611394422.0000018EB608B000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18EB608B000
Size:	16384

Details

Name:	00000013.00000002.577164797.000001B0F1E58000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B0F1E58000
Size:	4096

Details

Name:	00000014.00000002.611300882.0000018EB6013000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18EB6013000
Size:	86016

Details

Name:	00000016.00000003.653061911.000002455BBC0000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BBC0000
Size:	126976

Details

Name:	0000000A.00000002.485442472.00007FF5BA99F000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BA99F000
Size:	8192

Details

Name:	00000000.00000003.452750557.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000004.00000003.477823614.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000011.00000003.547936689.000002008B2A9000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2008B2A9000
Size:	4096

Details

Name:	00000004.00000002.815761285.00000000025F0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25F0000
Size:	4096

Details

Name:	00000005.00000002.815224932.000000000218F000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	218F000
Size:	24576

Details

Name:	00000013.00000002.577255416.000001B0F2000000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0F2000000
Size:	4096

Details

Name:	00000005.00000002.818012106.000000000560E000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	560E000
Size:	8192

Details

Name:	00000005.00000002.815569136.00000000025C0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25C0000
Size:	16384

Details

Name:	00000005.00000003.492204191.0000000002940000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000014.00000000.596145335.0000018EB5E70000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	18EB5E70000
Size:	102400

Details

Name:	00000005.00000002.815248775.000000000219D000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	219D000
Size:	32768

Details

Name:	00000016.00000002.672812800.000002455B1F0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2455B1F0000
Size:	16384

Details

Name:	00000003.00000002.816378202.0000000002D5B000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2D5B000
Size:	8192

Details

Name:	00000000.00000003.743350214.00000000007AA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7AA000
Size:	118784

Details

Name:	00000016.00000003.656842778.000002455BBB4000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BBB4000
Size:	4096

Details

Name:	00000004.00000003.763079995.0000000002C0E000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C0E000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000002.815186453.0000000002195000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2195000
Size:	16384

Details

Name:	00000003.00000002.816294783.000000000114A000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	114A000
Size:	24576

Details

Name:	00000003.00000003.464622904.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000013.00000002.577413308.00007FF534D16000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF534D16000
Size:	16384

Details

Name:	00000017.00000002.661248346.00007FF5046C9000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5046C9000
Size:	12288

Details

Name:	00000000.00000003.494729551.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000016.00000002.672683194.0000005788D7B000.00000004.00000010.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5788D7B000
Size:	20480

Details

Name:	00000000.00000003.477581836.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000000.00000002.814960205.00000000003F0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3F0000
Size:	8192

Details

Name:	00000005.00000002.815858316.000000000298F000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	298F000
Size:	4096

Details

Name:	00000013.00000002.577366052.00007FF5346CC000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5346CC000
Size:	16384

Details

Name:	00000004.00000003.474201972.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000003.00000002.817027817.0000000002FBD000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2FBD000
Size:	32768

Details

Name:	00000005.00000002.815650419.00000000028F0000.00000040.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page execute and read and write
Base address:	28F0000
Size:	81920

Details

Name:	00000014.00000002.611020585.0000003F70FFB000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3F70FFB000
Size:	20480

Details

Name:	00000003.00000003.736658707.0000000000ABC000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	ABC000
Size:	4096

Details

Name:	00000005.00000002.815176972.0000000002176000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2176000
Size:	8192

Details

Name:	00000005.00000003.495935368.0000000002950000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2950000
Size:	4096

Details

Name:	00000003.00000002.817250767.000000000302B000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	302B000
Size:	12288

Details

Name:	00000005.00000002.817843606.00000000052CF000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	52CF000
Size:	4096

Details

Name:	00000016.00000003.672474124.000002455B24A000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455B24A000
Size:	4096

Details

Name:	00000016.00000002.673572965.000002455BB6C000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB6C000
Size:	61440

Details

Name:	0000000A.00000002.485884590.00007FF5BA9E5000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BA9E5000
Size:	20480

Details

Name:	00000003.00000002.816742312.0000000002F61000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2F61000
Size:	16384

Details

Name:	00000013.00000002.577290453.00007DF542BF0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF542BF0000
Size:	4096

Details

Name:	00000003.00000002.816942874.0000000002FAB000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2FAB000
Size:	12288

Details

Name:	00000004.00000003.465629163.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000014.00000002.611932998.00007FF5A6A94000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A6A94000
Size:	20480

Details

Name:	00000012.00000002.564920830.00007FF53D3B4000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53D3B4000
Size:	20480

Details

Name:	00000004.00000003.481849757.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000004.00000003.467074738.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	0000000A.00000002.489702270.00007FF5BAB62000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BAB62000
Size:	12288

Details

Name:	00000004.00000003.719290662.0000000002BE7000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2BE7000
Size:	8192

Details

Name:	00000000.00000003.790375429.00000000007F5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7F5000
Size:	77824

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000003.495365151.0000000002950000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2950000
Size:	4096

Details

Name:	00000016.00000003.657885536.000002455BB91000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB91000
Size:	4096

Details

Name:	00000011.00000000.547533271.00007FF53C641000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53C641000
Size:	8192

Details

Name:	0000000A.00000002.484842088.00000195BA702000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	195BA702000
Size:	16384

Details

Name:	00000000.00000003.429099232.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000011.00000002.816389027.00007FF550682000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF550682000
Size:	28672

Details

Name:	00000000.00000003.467200682.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000004.00000002.818241527.00000000055D0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	55D0000
Size:	4096

Details

Name:	00000011.00000003.547974446.000002008B2B2000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2008B2B2000
Size:	4096

Details

Name:	00000014.00000002.611112041.0000003F717FF000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3F717FF000
Size:	4096

Details

Name:	00000017.00000002.661135978.00007FF5045FF000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5045FF000
Size:	12288

Details

Name:	00000004.00000003.716808084.0000000002B95000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2B95000
Size:	24576

Details

Name:	00000013.00000002.577515150.00007FF534E99000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF534E99000
Size:	8192

Details

Name:	00000004.00000000.290400603.000000007F4E0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F4E0000
Size:	4096

Details

Name:	00000017.00000002.661145480.00007FF504603000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF504603000
Size:	8192

Details

Name:	00000012.00000002.564547872.00007DF54B030000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF54B030000
Size:	4096

Details

Name:	00000005.00000002.815133994.0000000002161000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2161000
Size:	4096

Details

Name:	00000000.00000003.489362688.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000013.00000002.577630119.00007FF534F91000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF534F91000
Size:	16384

Details

Name:	00000000.00000003.490843732.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000016.00000002.674219979.00007FF531AFE000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531AFE000
Size:	4096

Details

Name:	00000005.00000002.815028287.000000000212B000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	212B000
Size:	4096

Details

Name:	00000016.00000002.674080276.00007FF531A7E000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531A7E000
Size:	4096

Details

Name:	00000017.00000002.661311710.00007FF5046EA000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5046EA000
Size:	4096

Details

Name:	00000014.00000002.611436726.0000018EB6113000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18EB6113000
Size:	20480

Details

Name:	00000016.00000000.647433162.00007DF53F800000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF53F800000
Size:	4096

Details

Name:	0000000A.00000002.483526074.00000050ACEF7000.00000004.00000010.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	50ACEF7000
Size:	36864

Details

Name:	00000005.00000003.809652116.0000000002AAC000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AAC000
Size:	12288

Details

Name:	00000004.00000003.452464367.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000017.00000002.660963619.00007DF512352000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF512352000
Size:	4096

Details

Name:	00000016.00000002.674369556.00007FF531B9A000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531B9A000
Size:	4096

Details

Name:	00000016.00000002.673776754.00007FF531687000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531687000
Size:	32768

Details

Name:	00000000.00000002.816667649.0000000002868000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2868000
Size:	4096

Details

Name:	00000000.00000003.416109946.0000000000C10000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C10000
Size:	4096

Details

Name:	00000005.00000003.719445694.0000000002AAA000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AAA000
Size:	16384

Details

Name:	00000003.00000003.689321486.0000000000920000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	920000
Size:	4096

Details

Name:	00000004.00000002.816307183.0000000002B1A000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2B1A000
Size:	372736

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery
URLs found in memory or binary data	Networking

Details

Name:	00000014.00000002.611199812.0000018EB5E90000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	18EB5E90000
Size:	12288

Details

Name:	00000005.00000002.817930988.00000000053CF000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	53CF000
Size:	4096

Details

Name:	00000011.00000002.816182973.00007FF550542000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF550542000
Size:	8192

Details

Name:	00000000.00000002.816701319.0000000002ABE000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2ABE000
Size:	8192

Details

Name:	00000016.00000002.673974305.00007FF531970000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531970000
Size:	4096

Details

Name:	00000003.00000002.816424854.0000000002E3D000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E3D000
Size:	4096

Details

Name:	00000014.00000002.611637151.00007FF5A6597000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A6597000
Size:	32768

Details

Name:	00000000.00000003.430194359.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000012.00000002.564692532.00007FF53D1DF000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53D1DF000
Size:	8192

Details

Name:	00000013.00000002.577021587.000001B0F1C20000.00000004.00000040.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1B0F1C20000
Size:	4096

Details

Name:	00000000.00000002.816682428.000000000297E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	297E000
Size:	8192

Details

Name:	00000004.00000003.466931291.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000016.00000002.672625428.0000005788A7C000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5788A7C000
Size:	16384

Details

Name:	00000016.00000002.673796488.00007FF531774000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531774000
Size:	8192

Details

Name:	0000000A.00000002.483669523.00000195BA613000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	195BA613000
Size:	86016

Details

Name:	00000012.00000002.564490763.0000024AD1502000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24AD1502000
Size:	12288

Details

Name:	00000014.00000002.611959932.00007FF5A6AAA000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A6AAA000
Size:	4096

Details

Name:	00000000.00000002.816953729.00000000038DE000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	38DE000
Size:	8192

Details

Name:	00000016.00000003.654182658.000002455C019000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455C019000
Size:	90112

Details

Name:	00000000.00000003.461253311.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000011.00000002.815959262.00007FF54FE72000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54FE72000
Size:	16384

Details

Name:	00000000.00000003.422766971.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000016.00000002.673106925.000002455B313000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2455B313000
Size:	8192

Details

Name:	00000000.00000003.424114270.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000003.00000003.736678193.0000000000ADD000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	ADD000
Size:	8192

Details

Name:	00000016.00000003.653015363.000002455BB7F000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB7F000
Size:	114688

Details

Name:	00000003.00000002.814743337.00000000003E0000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	3E0000
Size:	4096

Details

Name:	00000016.00000003.659057894.000002455BB8A000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB8A000
Size:	425984

Details

Name:	00000003.00000002.814958923.0000000000810000.00000040.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page execute and read and write
Base address:	810000
Size:	81920

Details

Name:	00000003.00000002.816260942.00000000010CA000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	10CA000
Size:	24576

Details

Name:	00000005.00000003.764583801.0000000002AC2000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2000
Size:	40960

Details

Name:	00000005.00000002.814976597.000000000206D000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	206D000
Size:	24576

Details

Name:	00000013.00000002.577541945.00007FF534EB3000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF534EB3000
Size:	12288

Details

Name:	00000011.00000003.562509670.000002008B590000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2008B590000
Size:	4096

Details

Name:	00000013.00000002.576973883.0000008B10DFE000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8B10DFE000
Size:	8192

Details

Name:	00000000.00000001.289115972.0000000010000000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	10000000
Size:	4096

Details

Name:	00000000.00000002.815931536.0000000000AF0000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	AF0000
Size:	4096

Details

Name:	00000000.00000003.413523670.0000000000C10000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C10000
Size:	4096

Details

Name:	00000005.00000003.495206563.0000000002950000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2950000
Size:	4096

Details

Name:	00000003.00000003.737898532.0000000005541000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5541000
Size:	471040

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.697321748.0000000000A90000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000004.00000003.670068802.0000000004DBB000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4DBB000
Size:	4096

Details

Name:	00000004.00000003.464889262.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	0000000A.00000002.487638236.00007FF5BAAA3000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BAAA3000
Size:	28672

Details

Name:	00000000.00000003.421087222.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000012.00000002.564803833.00007FF53D2F7000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53D2F7000
Size:	16384

Details

Name:	00000016.00000003.650113983.000002455B930000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455B930000
Size:	4096

Details

Name:	00000000.00000003.466421355.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000004.00000002.815133532.000000000217A000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	217A000
Size:	12288

Details

Name:	00000004.00000002.815275715.00000000021B6000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	21B6000
Size:	16384

Details

Name:	00000004.00000002.815974550.0000000002970000.00000004.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2970000
Size:	4096

Details

Name:	00000014.00000002.611232411.0000018EB5EC0000.00000004.00000020.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	18EB5EC0000
Size:	8192

Details

Name:	00000005.00000003.495031541.0000000002950000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2950000
Size:	4096

Details

Name:	00000005.00000002.814922021.000000000205C000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	205C000
Size:	12288

Details

Name:	0000000A.00000002.489692960.00007FF5BAB0D000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BAB0D000
Size:	8192

Details

Name:	00000013.00000000.565327929.00007DF542BF0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF542BF0000
Size:	4096

Details

Name:	00000014.00000002.611910164.00007FF5A6A2D000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A6A2D000
Size:	8192

Details

Name:	00000016.00000003.654854428.000002455BB6C000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB6C000
Size:	32768

Details

Name:	00000004.00000003.485281872.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000014.00000002.611690954.00007FF5A6861000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A6861000
Size:	8192

Details

Name:	00000003.00000002.817865176.0000000005540000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5540000
Size:	4096

Details

Name:	00000005.00000002.814799962.0000000002016000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2016000
Size:	20480

Details

Name:	00000000.00000003.473575909.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000005.00000003.811157796.0000000004AFF000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4AFF000
Size:	475136

Details

Name:	00000016.00000002.673964786.00007FF53196D000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53196D000
Size:	4096

Details

Name:	00000003.00000000.289986033.000000007F0E0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F0E0000
Size:	4096

Details

Name:	0000000A.00000000.471672335.00007FF5BAB91000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BAB91000
Size:	16384

Details

Name:	00000012.00000002.564672711.00007FF53D1A0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53D1A0000
Size:	4096

Details

Name:	00000016.00000002.673982997.00007FF53198B000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53198B000
Size:	8192

Details

Name:	00000004.00000002.816252109.0000000002A9E000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2A9E000
Size:	8192

Details

Name:	00000013.00000002.577505567.00007FF534E15000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF534E15000
Size:	4096

Details

Name:	00000004.00000003.713934590.0000000002AB0000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2AB0000
Size:	4096

Details

Name:	00000012.00000002.564286000.000000D05EE7D000.00000004.00000010.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	D05EE7D000
Size:	12288

Details

Name:	00000003.00000002.815233247.00000000009F0000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	9F0000
Size:	36864

Details

Name:	00000003.00000002.816557910.0000000002E89000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E89000
Size:	8192

Details

Name:	00000000.00000003.416727314.0000000000C10000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C10000
Size:	4096

Details

Name:	00000004.00000003.477046707.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000016.00000002.673113180.000002455B316000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2455B316000
Size:	4096

Details

Name:	00000003.00000003.781266461.0000000000AC8000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	AC8000
Size:	94208

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000016.00000002.672922852.000002455B271000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2455B271000
Size:	98304

Details

Name:	00000012.00000002.564509203.0000024AD1600000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24AD1600000
Size:	4096

Details

Name:	00000013.00000002.577196734.000001B0F1E8A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B0F1E8A000
Size:	8192

Details

Name:	00000004.00000002.815775180.0000000002695000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2695000
Size:	8192

Details

Name:	00000005.00000002.815055056.0000000002133000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2133000
Size:	8192

Details

Name:	00000000.00000003.495568840.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000016.00000002.672646019.0000005788AFE000.00000004.00000010.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5788AFE000
Size:	8192

Details

Name:	00000003.00000002.816222012.0000000000F10000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F10000
Size:	4096

Details

Name:	00000004.00000000.290409666.000000007F4F0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F4F0000
Size:	12288

Details

Name:	00000003.00000002.815126029.0000000000880000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	880000
Size:	8192

Details

Name:	00000016.00000002.672880464.000002455B24D000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2455B24D000
Size:	4096

Details

Name:	00000003.00000003.463388907.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000000.00000003.468471875.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000000.00000003.429537796.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000003.00000002.815097578.000000000085D000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	85D000
Size:	8192

Details

Name:	00000017.00000002.660865899.0000022B32B31000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22B32B31000
Size:	49152

Details

Name:	00000014.00000003.610787948.0000018EB6054000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18EB6054000
Size:	114688

Details

Name:	00000014.00000000.596157360.00007DF5B4710000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5B4710000
Size:	4096

Details

Name:	00000004.00000002.814980997.0000000002085000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2085000
Size:	4096

Details

Name:	00000000.00000002.814864028.000000000038C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	38C000
Size:	16384

Details

Name:	00000003.00000000.289981365.0000000003068000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	3068000
Size:	16384

Details

Name:	00000011.00000002.815492450.000002008B5B0000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2008B5B0000
Size:	4096

Details

Name:	00000011.00000002.816550236.00007FF550721000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF550721000
Size:	12288

Details

Name:	00000013.00000002.577328418.00007DF542C02000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF542C02000
Size:	4096

Details

Name:	00000013.00000003.576547736.000001B0F1E80000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B0F1E80000
Size:	36864

Details

Name:	00000014.00000002.611730867.00007FF5A6905000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A6905000
Size:	20480

Details

Name:	00000005.00000002.815202888.0000000002185000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2185000
Size:	16384

Details

Name:	00000000.00000003.465293975.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000005.00000002.817626126.000000000495C000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	495C000
Size:	16384

Details

Name:	00000016.00000003.657720202.000002455BBC5000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BBC5000
Size:	61440

Details

Name:	00000013.00000002.577060363.000001B0F1D60000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0F1D60000
Size:	16384

Details

Name:	00000004.00000003.713959747.0000000002AB0000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2AB0000
Size:	4096

Details

Name:	00000011.00000002.816210470.00007FF550547000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF550547000
Size:	4096

Details

Name:	00000005.00000000.291023823.000000007F580000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F580000
Size:	4096

Details

Name:	00000000.00000002.816983933.0000000003BDF000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3BDF000
Size:	4096

Details

Name:	00000016.00000002.672655475.0000005788B7E000.00000004.00000010.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5788B7E000
Size:	8192

Details

Name:	00000000.00000003.471019684.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000017.00000002.661212382.00007FF50464E000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50464E000
Size:	8192

Details

Name:	00000013.00000002.577547019.00007FF534EB7000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF534EB7000
Size:	16384

Details

Name:	00000000.00000003.438980505.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000014.00000002.611443049.0000018EB6200000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	18EB6200000
Size:	4096

Details

Name:	00000000.00000003.475364994.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000014.00000002.611054117.0000003F713FB000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3F713FB000
Size:	20480

Details

Name:	00000000.00000002.817301895.000000007FFB2000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000004.00000003.463572786.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000016.00000002.672664920.0000005788C7C000.00000004.00000010.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5788C7C000
Size:	16384

Details

Name:	00000004.00000002.816654146.0000000002B86000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2B86000
Size:	86016

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery
URLs found in memory or binary data	Networking

Details

Name:	00000017.00000002.660875942.0000022B32C00000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	22B32C00000
Size:	8192

Details

Name:	00000012.00000002.564528622.0000024AD1980000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24AD1980000
Size:	4096

Details

Name:	00000014.00000002.611074782.0000003F714FB000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3F714FB000
Size:	20480

Details

Name:	00000017.00000002.661190549.00007FF50461E000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50461E000
Size:	4096

Details

Name:	00000003.00000003.689216007.0000000000A6B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A6B000
Size:	12288

Details

Name:	00000005.00000002.817802331.000000000524D000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	524D000
Size:	12288

Details

Name:	00000011.00000002.816005406.00007FF54FF34000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54FF34000
Size:	8192

Details

Name:	00000016.00000002.673547278.000002455BB66000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB66000
Size:	20480

Details

Name:	00000017.00000002.660894290.0000022B32CF5000.00000004.00000040.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	22B32CF5000
Size:	8192

Details

Name:	00000000.00000003.464621761.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000004.00000003.808617526.0000000004A3F000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4A3F000
Size:	475136

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000000.289991447.000000007F0F0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F0F0000
Size:	4096

Details

Name:	0000000A.00000002.484905946.00000195BA713000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	195BA713000
Size:	12288

Details

Name:	00000000.00000003.427463320.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000005.00000002.815468349.0000000002490000.00000004.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2490000
Size:	4096

Details

Name:	00000003.00000003.735794684.0000000000A96000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A96000
Size:	155648

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000002.814987824.0000000002075000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2075000
Size:	4096

Details

Name:	00000014.00000002.611408559.0000018EB6100000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18EB6100000
Size:	4096

Details

Name:	00000017.00000002.661256072.00007FF5046D4000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5046D4000
Size:	20480

Details

Name:	00000004.00000003.495978658.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000003.00000002.817318638.0000000003034000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3034000
Size:	8192

Details

Name:	0000000A.00000002.483468070.00000050ACB7E000.00000004.00000010.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	50ACB7E000
Size:	8192

Details

Name:	00000004.00000003.719410114.0000000004D39000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4D39000
Size:	471040

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000003.461251774.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000005.00000002.815843470.000000000298D000.00000004.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	298D000
Size:	8192

Details

Name:	00000004.00000002.818223739.00000000055CF000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	55CF000
Size:	4096

Details

Name:	00000003.00000003.450501143.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000003.00000002.816359789.000000000124F000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	124F000
Size:	4096

Details

Name:	00000000.00000003.742497224.00000000007AE000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7AE000
Size:	102400

Details

Name:	00000011.00000003.547946131.000002008B2B1000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2008B2B1000
Size:	4096

Details

Name:	00000004.00000003.464420127.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000004.00000002.818930354.000000007F4F0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F4F0000
Size:	12288

Details

Name:	00000012.00000000.550882313.00007DF54B030000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF54B030000
Size:	4096

Details

Name:	00000000.00000003.787985448.000000000081E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	81E000
Size:	4096

Details

Name:	00000000.00000003.459335818.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000004.00000003.466572528.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000004.00000003.475003454.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000017.00000002.661318490.00007FF5046F1000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5046F1000
Size:	16384

Details

Name:	00000016.00000003.660616271.000002455BBA5000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BBA5000
Size:	139264

Details

Name:	00000000.00000003.421797861.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000004.00000002.815243433.00000000021A7000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	21A7000
Size:	12288

Details

Name:	00000011.00000002.815746722.00007DF45C260000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF45C260000
Size:	20480

Details

Name:	00000004.00000002.816014942.000000000297C000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	297C000
Size:	4096

Details

Name:	00000003.00000003.736668780.0000000000ABF000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	ABF000
Size:	32768

Details

Name:	0000000A.00000002.483460787.00000050ACAFE000.00000004.00000010.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	50ACAFE000
Size:	8192

Details

Name:	00000004.00000002.815309855.00000000021D0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	21D0000
Size:	73728

Details

Name:	00000016.00000003.652663236.000002455BB6E000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB6E000
Size:	32768

Details

Name:	00000005.00000003.810692993.0000000005751000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5751000
Size:	1024000

Details

Name:	00000016.00000003.672468624.000002455B24B000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455B24B000
Size:	12288

Details

Name:	00000004.00000003.465223587.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000014.00000002.611481111.0000018EB6802000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18EB6802000
Size:	4096

Details

Name:	00000016.00000002.673822917.00007FF531825000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531825000
Size:	8192

Details

Name:	00000016.00000002.673313534.000002455B940000.00000004.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2455B940000
Size:	8192

Details

Name:	00000004.00000003.490712125.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000000.00000003.469342661.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000016.00000002.673742834.00007FF531351000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531351000
Size:	8192

Details

Name:	00000014.00000002.611703886.00007FF5A6880000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A6880000
Size:	4096

Details

Name:	0000000A.00000000.471640550.00007DF5C8802000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5C8802000
Size:	4096

Details

Name:	00000016.00000003.661434423.000002455C063000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455C063000
Size:	397312

Details

Name:	00000014.00000002.611368616.0000018EB6057000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18EB6057000
Size:	102400

Details

Name:	00000004.00000003.719103436.0000000005651000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5651000
Size:	909312

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000017.00000000.648534055.0000022B329A0000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	22B329A0000
Size:	102400

Details

Name:	0000000A.00000002.484950697.00000195BAA00000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	195BAA00000
Size:	12288

Details

Name:	00000012.00000002.564413845.0000024AD142A000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24AD142A000
Size:	69632

Details

Name:	00000011.00000002.814960774.000002008B200000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2008B200000
Size:	102400

Details

Name:	00000017.00000002.660972054.00007DF512360000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF512360000
Size:	4096

Details

Name:	00000005.00000002.814819327.000000000201D000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	201D000
Size:	4096

Details

Name:	00000003.00000003.469327954.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000000.00000003.744389174.00000000007C8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7C8000
Size:	262144

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.453946389.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000003.00000003.782389996.0000000005441000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5441000
Size:	741376

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000002.815637033.000000000250C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	250C000
Size:	16384

Details

Name:	00000011.00000000.547478634.00007DF55E3A0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55E3A0000
Size:	4096

Details

Name:	00000005.00000003.719470072.0000000002A80000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2A80000
Size:	172032

Details

Name:	00000016.00000002.673996775.00007FF5319B2000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5319B2000
Size:	8192

Details

Name:	00000000.00000003.441789896.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000016.00000002.673897287.00007FF5318E6000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5318E6000
Size:	4096

Details

Name:	00000016.00000002.672979023.000002455B2C4000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2455B2C4000
Size:	106496

Details

Name:	00000000.00000002.815359876.00000000007A7000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	7A7000
Size:	4096

Details

Name:	00000014.00000002.611255029.0000018EB5FC0000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18EB5FC0000
Size:	4096

Details

Name:	00000005.00000002.815114473.000000000214F000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	214F000
Size:	20480

Details

Name:	00000003.00000003.691197346.0000000000A84000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A84000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000016.00000002.673734051.00007FF5312E2000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5312E2000
Size:	4096

Details

Name:	00000003.00000003.457595332.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000005.00000003.810855367.0000000004E7B000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4E7B000
Size:	4096

Details

Name:	00000013.00000002.577143872.000001B0F1E3C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B0F1E3C000
Size:	110592

Details

Name:	00000014.00000002.611762268.00007FF5A6935000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A6935000
Size:	4096

Details

Name:	00000011.00000002.816149837.00007FF5504CA000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5504CA000
Size:	12288

Details

Name:	00000004.00000002.816999435.0000000002E10000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E10000
Size:	69632

Details

Name:	00000016.00000003.661588809.000002455BB81000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB81000
Size:	40960

Details

Name:	00000016.00000003.655362124.000002455BBA4000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BBA4000
Size:	294912

Details

Name:	00000016.00000000.647445348.00007DF53F802000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF53F802000
Size:	4096

Details

Name:	00000016.00000003.654837282.000002455BB69000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB69000
Size:	45056

Details

Name:	00000004.00000002.815475574.000000000224C000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	224C000
Size:	16384

Details

Name:	00000012.00000002.564353071.0000024AD11F0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24AD11F0000
Size:	4096

Details

Name:	00000005.00000002.815186005.0000000002179000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2179000
Size:	32768

Details

Name:	00000012.00000002.564296326.000000D05EF7E000.00000004.00000010.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	D05EF7E000
Size:	8192

Details

Name:	00000000.00000003.426217878.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000004.00000000.290371484.00000000024B0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B0000
Size:	102400

Details

Name:	00000014.00000002.611894811.00007FF5A6A0E000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A6A0E000
Size:	4096

Details

Name:	00000003.00000003.452332074.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000013.00000002.577407978.00007FF534C15000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF534C15000
Size:	8192

Details

Name:	00000000.00000003.478725686.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000004.00000002.818193484.000000000544F000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	544F000
Size:	4096

Details

Name:	00000012.00000002.564854395.00007FF53D31B000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53D31B000
Size:	12288

Details

Name:	0000000A.00000002.485085731.00007DF5C8800000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5C8800000
Size:	4096

Details

Name:	00000004.00000003.764112395.0000000002BF2000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2BF2000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.471625374.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000003.00000003.463448412.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000011.00000002.816376360.00007FF55067B000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55067B000
Size:	12288

Details

Name:	00000016.00000003.652653333.000002455BB5D000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB5D000
Size:	53248

Details

Name:	00000004.00000003.493525724.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000000.00000003.788057648.00000000007F5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7F5000
Size:	77824

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000016.00000003.657981600.000002455BB8B000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB8B000
Size:	32768

Details

Name:	00000000.00000003.789592040.0000000002F4B000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	2F4B000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000A.00000002.483565165.00000195BA410000.00000004.00000040.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	195BA410000
Size:	4096

Details

Name:	00000000.00000003.698439791.00000000007AF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7AF000
Size:	98304

Details

Name:	00000004.00000003.490119243.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000013.00000002.577204529.000001B0F1E8D000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B0F1E8D000
Size:	12288

Details

Name:	00000016.00000002.672963328.000002455B2B2000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2455B2B2000
Size:	28672

Details

Name:	00000014.00000002.611449270.0000018EB6400000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	18EB6400000
Size:	12288

Details

Name:	00000003.00000003.737964101.0000000004EEC000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4EEC000
Size:	471040

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000016.00000003.654862499.000002455BB78000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB78000
Size:	8192

Details

Name:	00000004.00000002.817075048.0000000002F90000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2F90000
Size:	4096

Details

Name:	00000011.00000002.816054557.00007FF54FF4A000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54FF4A000
Size:	4096

Details

Name:	00000013.00000002.577583597.00007FF534F07000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF534F07000
Size:	8192

Details

Name:	00000004.00000003.475694121.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000016.00000003.657177729.000002455BB67000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB67000
Size:	90112

Details

Name:	00000012.00000002.564737842.00007FF53D2C7000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53D2C7000
Size:	4096

Details

Name:	0000000A.00000002.489755388.00007FF5BAB74000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BAB74000
Size:	20480

Details

Name:	00000000.00000002.816244355.0000000000E70000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	E70000
Size:	69632

Details

Name:	00000003.00000002.816580838.0000000002E8D000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E8D000
Size:	24576

Details

Name:	00000017.00000002.661107839.00007FF5045FD000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5045FD000
Size:	4096

Details

Name:	00000016.00000002.672735783.0000005788FFF000.00000004.00000010.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5788FFF000
Size:	4096

Details

Name:	00000005.00000002.815328915.000000000220F000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	220F000
Size:	16384

Details

Name:	00000016.00000002.673909638.00007FF5318FF000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5318FF000
Size:	4096

Details

Name:	00000004.00000003.465504577.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000000.00000003.432506138.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000016.00000003.661972569.000002455BB6B000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB6B000
Size:	65536

Details

Name:	00000004.00000003.479497240.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000004.00000003.764049464.0000000005751000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5751000
Size:	466944

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	0000000A.00000002.486085089.00007FF5BAA87000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BAA87000
Size:	4096

Details

Name:	00000004.00000002.815286488.00000000021BB000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	21BB000
Size:	12288

Details

Name:	00000005.00000002.815598641.00000000027A6000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	27A6000
Size:	8192

Details

Name:	00000000.00000003.427581140.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000000.00000002.815543787.0000000000817000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	817000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000003.764119503.0000000002BF9000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2BF9000
Size:	28672

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000003.480530760.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000016.00000002.673158389.000002455B780000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2455B780000
Size:	4096

Details

Name:	00000017.00000002.660977274.00007DF512362000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF512362000
Size:	4096

Details

Name:	00000004.00000002.815958270.0000000002960000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2960000
Size:	4096

Details

Name:	00000004.00000003.495233364.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	0000000A.00000002.485181154.00007FF5BA310000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BA310000
Size:	16384

Details

Name:	00000000.00000003.466237430.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000014.00000002.611629324.00007FF5A6591000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A6591000
Size:	20480

Details

Name:	00000000.00000002.815318817.000000000078C000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	78C000
Size:	45056

Details

Name:	00000016.00000003.672430850.000002455B256000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455B256000
Size:	106496

Details

Name:	00000000.00000003.420714296.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000017.00000002.660828155.0000022B32B00000.00000004.00000020.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	22B32B00000
Size:	40960

Details

Name:	00000016.00000003.660751059.000002455C002000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455C002000
Size:	159744

Details

Name:	00000005.00000002.815017921.0000000002128000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2128000
Size:	8192

Details

Name:	00000017.00000002.661272983.00007FF5046E1000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5046E1000
Size:	12288

Details

Name:	00000000.00000003.456902260.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000003.00000002.816597134.0000000002E95000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E95000
Size:	4096

Details

Name:	00000003.00000002.815141377.00000000008A0000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	8A0000
Size:	20480

Details

Name:	00000005.00000003.672743913.0000000004E7B000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4E7B000
Size:	4096

Details

Name:	00000000.00000003.472659659.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000004.00000003.475304145.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000000.00000003.418833528.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000016.00000000.647419243.000002455B0C0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2455B0C0000
Size:	102400

Details

Name:	00000003.00000002.815447401.0000000000A5A000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	A5A000
Size:	4096

Details

Name:	00000016.00000000.647483470.00007FF531BA1000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531BA1000
Size:	16384

Details

Name:	00000012.00000002.564699499.00007FF53D225000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53D225000
Size:	20480

Details

Name:	0000000A.00000002.485339722.00007FF5BA941000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BA941000
Size:	8192

Details

Name:	0000000A.00000003.483022027.00000195BA680000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	195BA680000
Size:	36864

Details

Name:	00000014.00000002.611899881.00007FF5A6A27000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A6A27000
Size:	8192

Details

Name:	00000000.00000002.816214424.0000000000C70000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	C70000
Size:	36864

Details

Name:	00000005.00000003.494129019.0000000002950000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2950000
Size:	4096

Details

Name:	00000000.00000003.744342921.000000000080F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	80F000
Size:	40960

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000A.00000002.485073722.00007DF5C87F0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5C87F0000
Size:	4096

Details

Name:	00000004.00000002.815209088.000000000219B000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	219B000
Size:	12288

Details

Name:	00000016.00000002.673346634.000002455BB00000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB00000
Size:	53248

Details

Name:	00000016.00000003.654129226.000002455BB91000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB91000
Size:	32768

Details

Name:	00000000.00000003.433173247.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000003.00000003.463517401.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000000.00000003.439390293.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000005.00000002.815714982.0000000002920000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2920000
Size:	4096

Details

Name:	0000000A.00000002.484931753.00000195BA800000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	195BA800000
Size:	4096

Details

Name:	0000000A.00000002.483687881.00000195BA629000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	195BA629000
Size:	73728

Details

Name:	00000000.00000003.487885502.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000003.00000002.814900605.00000000006A0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	6A0000
Size:	8192

Details

Name:	00000000.00000003.442478554.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000000.00000003.433432685.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000005.00000002.815319889.000000000220B000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	220B000
Size:	12288

Details

Name:	00000003.00000003.466097328.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000016.00000002.672903475.000002455B255000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2455B255000
Size:	4096

Details

Name:	00000016.00000002.673136065.000002455B600000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2455B600000
Size:	12288

Details

Name:	00000013.00000000.565385171.00007FF534F91000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF534F91000
Size:	16384

Details

Name:	00000004.00000003.457253656.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000000.00000003.484670800.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000000.00000003.429657042.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000016.00000003.660795611.000002455BB93000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB93000
Size:	12288

Details

Name:	00000017.00000002.660857715.0000022B32B27000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22B32B27000
Size:	36864

Details

Name:	00000000.00000003.743340898.000000000081E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	81E000
Size:	4096

Details

Name:	00000004.00000002.816046795.0000000002990000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2990000
Size:	8192

Details

Name:	00000000.00000003.453337914.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000003.00000003.454149812.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000003.00000002.818019146.000000007F0E2000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F0E2000
Size:	4096

Details

Name:	00000012.00000002.564497553.0000024AD1508000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24AD1508000
Size:	24576

Details

Name:	00000000.00000003.450154046.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000003.00000002.816998879.0000000002FB7000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2FB7000
Size:	12288

Details

Name:	00000012.00000002.564883015.00007FF53D32E000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53D32E000
Size:	4096

Details

Name:	00000016.00000003.659561284.000002455BB1B000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB1B000
Size:	36864

Details

Name:	00000000.00000003.426919200.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000004.00000002.815297920.00000000021CC000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	21CC000
Size:	8192

Details

Name:	00000000.00000003.431266267.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000000.00000002.816742789.0000000002B3D000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2B3D000
Size:	12288

Details

Name:	00000011.00000002.815808437.00007DF55E3A0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55E3A0000
Size:	4096

Details

Name:	00000003.00000003.455298696.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000004.00000003.455378822.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000004.00000002.814947860.000000000207D000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	207D000
Size:	24576

Details

Name:	00000003.00000003.468438332.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000016.00000003.659609639.000002455BB80000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB80000
Size:	20480

Details

Name:	00000012.00000002.564753716.00007FF53D2DF000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53D2DF000
Size:	12288

Details

Name:	00000000.00000003.437929808.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000003.00000003.691211342.0000000000A96000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A96000
Size:	155648

Details

Name:	00000016.00000003.657161509.000002455BB61000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB61000
Size:	114688

Details

Name:	00000013.00000002.577521025.00007FF534E9D000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF534E9D000
Size:	4096

Details

Name:	00000000.00000003.787975926.0000000000817000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	817000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000014.00000000.596167703.00007DF5B4720000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5B4720000
Size:	4096

Details

Name:	00000013.00000002.577483012.00007FF534DEB000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF534DEB000
Size:	24576

Details

Name:	00000005.00000002.816933884.0000000004280000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4280000
Size:	4096

Details

Name:	00000016.00000002.674276339.00007FF531B72000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531B72000
Size:	12288

Details

Name:	00000000.00000003.475695477.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000005.00000003.719381317.0000000002A70000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2A70000
Size:	61440

Details

Name:	00000000.00000003.414216078.0000000000C10000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C10000
Size:	4096

Details

Name:	00000000.00000003.474870195.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000003.00000002.816764709.0000000002F6F000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2F6F000
Size:	20480

Details

Name:	00000016.00000003.661947966.000002455BB61000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB61000
Size:	106496

Details

Name:	00000011.00000002.816358845.00007FF550653000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF550653000
Size:	12288

Details

Name:	00000004.00000003.719299642.0000000002BEC000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2BEC000
Size:	143360

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.440712889.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000004.00000003.465961002.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000016.00000002.674074396.00007FF531A7A000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531A7A000
Size:	8192

Details

Name:	00000014.00000002.611163933.0000018EB5E70000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	18EB5E70000
Size:	102400

Details

Name:	00000012.00000002.564812933.00007FF53D2FE000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53D2FE000
Size:	28672

Details

Name:	00000016.00000002.673956271.00007FF531959000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531959000
Size:	4096

Details

Name:	00000000.00000003.475851034.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000000.00000003.790358337.00000000007F3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7F3000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000016.00000002.673667032.00007DF53F800000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF53F800000
Size:	4096

Details

Name:	0000000A.00000002.490036745.00007FF5BAB8A000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BAB8A000
Size:	4096

Details

Name:	00000003.00000003.736684649.0000000000A7D000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A7D000
Size:	94208

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.816805053.000000000331E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	331E000
Size:	8192

Details

Name:	00000005.00000000.290984754.00000000024A0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	24A0000
Size:	102400

Details

Name:	00000004.00000002.816853706.0000000002BE6000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2BE6000
Size:	8192

Details

Name:	00000003.00000003.466571291.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000003.00000003.735776752.0000000000A7A000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A7A000
Size:	106496

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000002.817386950.000000000304B000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	304B000
Size:	36864

Details

Name:	00000000.00000003.413055337.0000000000C10000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C10000
Size:	4096

Details

Name:	00000003.00000003.692641213.0000000005541000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5541000
Size:	462848

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000002.818001289.000000007F0E0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F0E0000
Size:	4096

Details

Name:	00000016.00000002.673674495.00007DF53F802000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF53F802000
Size:	4096

Details

Name:	00000000.00000003.483282849.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000016.00000002.673124007.000002455B400000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2455B400000
Size:	4096

Details

Name:	00000012.00000002.564256430.000000D05EC77000.00000004.00000010.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	D05EC77000
Size:	36864

Details

Name:	00000004.00000002.817966114.000000000520D000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	520D000
Size:	12288

Details

Name:	00000004.00000003.719325708.0000000002B9F000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2B9F000
Size:	81920

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000A.00000002.487723170.00007FF5BAAB3000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BAAB3000
Size:	12288

Details

Name:	00000000.00000003.492652300.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000011.00000000.547380859.000002008B200000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2008B200000
Size:	102400

Details

Name:	00000004.00000003.713970685.0000000002AB0000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2AB0000
Size:	4096

Details

Name:	00000016.00000003.657681449.000002455BB93000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB93000
Size:	32768

Details

Name:	00000016.00000003.655139858.000002455BBA3000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BBA3000
Size:	90112

Details

Name:	00000016.00000003.658973390.000002455BB8A000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB8A000
Size:	61440

Details

Name:	00000000.00000003.466878634.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000012.00000002.564642312.00007FF53D055000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53D055000
Size:	8192

Details

Name:	00000016.00000002.674142897.00007FF531AC0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531AC0000
Size:	4096

Details

Name:	00000017.00000003.660483017.0000022B32B31000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22B32B31000
Size:	49152

Details

Name:	00000004.00000002.815662788.000000000254B000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	254B000
Size:	20480

Details

Name:	00000004.00000002.816961849.0000000002C10000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C10000
Size:	36864

Details

Name:	00000005.00000002.814900120.0000000002056000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2056000
Size:	20480

Details

Name:	00000016.00000003.654830835.000002455BB78000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB78000
Size:	8192

Details

Name:	00000016.00000003.661345687.000002455C002000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455C002000
Size:	794624

Details

Name:	00000011.00000002.815409849.000002008B470000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2008B470000
Size:	12288

Details

Name:	00000016.00000003.672478917.000002455B249000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455B249000
Size:	4096

Details

Name:	00000014.00000002.611806561.00007FF5A69C3000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A69C3000
Size:	28672

Details

Name:	00000003.00000002.815038647.0000000000850000.00000004.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	850000
Size:	4096

Details

Name:	00000005.00000001.291623647.0000000010000000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	10000000
Size:	4096

Details

Name:	00000016.00000000.647460731.00007DF53F820000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF53F820000
Size:	12288

Details

Name:	00000014.00000002.611839562.00007FF5A69D7000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A69D7000
Size:	16384

Details

Name:	00000016.00000002.673179076.000002455B890000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2455B890000
Size:	8192

Details

Name:	00000017.00000002.661056779.00007FF5043EB000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5043EB000
Size:	4096

Details

Name:	00000005.00000002.815864996.0000000002990000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2990000
Size:	20480

Details

Name:	00000016.00000003.661918057.000002455BB7B000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB7B000
Size:	8192

Details

Name:	00000000.00000003.485910204.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000000.00000003.479497711.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000016.00000002.673903256.00007FF5318F1000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5318F1000
Size:	4096

Details

Name:	00000000.00000003.788032129.00000000007C8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7C8000
Size:	180224

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.425716869.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000016.00000002.674096974.00007FF531A97000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531A97000
Size:	4096

Details

Name:	00000013.00000003.576614814.000001B0F1E59000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B0F1E59000
Size:	24576

Details

Name:	00000004.00000003.453070443.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000017.00000002.660899922.0000022B32D00000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	22B32D00000
Size:	36864

Details

Name:	00000005.00000002.816570915.0000000002AB1000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2AB1000
Size:	110592

Details

Name:	00000000.00000003.481176394.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000011.00000002.816522565.00007FF55071A000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55071A000
Size:	12288

Details

Name:	00000005.00000002.817953637.00000000053D0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	53D0000
Size:	40960

Details

Name:	00000000.00000003.423726379.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000000.00000003.477046145.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000011.00000002.815762274.00007DF55E390000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55E390000
Size:	4096

Details

Name:	00000004.00000002.814863271.000000000204F000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	204F000
Size:	4096

Details

Name:	00000017.00000002.661285980.00007FF5046E5000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5046E5000
Size:	16384

Details

Name:	00000013.00000002.577127090.000001B0F1E2A000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B0F1E2A000
Size:	69632

Details

Name:	00000004.00000003.459000008.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000011.00000002.815524049.000002008B9C0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2008B9C0000
Size:	12288

Details

Name:	0000000A.00000002.485079746.00007DF5C87F2000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5C87F2000
Size:	4096

Details

Name:	00000004.00000003.463482477.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	0000000A.00000002.485029412.00007DF4C66C0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4C66C0000
Size:	20480

Details

Name:	00000012.00000002.564946871.00007FF53D3D1000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53D3D1000
Size:	16384

Details

Name:	00000004.00000002.818107158.000000000534F000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	534F000
Size:	4096

Details

Name:	00000004.00000003.454798554.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000013.00000002.577047769.000001B0F1C60000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0F1C60000
Size:	4096

Details

Name:	00000000.00000003.470449549.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000000.00000003.467367228.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	0000000A.00000002.483637088.00000195BA550000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	195BA550000
Size:	16384

Details

Name:	00000005.00000002.816389930.0000000002A80000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2A80000
Size:	172032

Details

Name:	00000000.00000003.437009777.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000000.00000003.495978976.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000000.00000003.699401943.0000000002EC9000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	2EC9000
Size:	471040

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000014.00000002.611671991.00007FF5A67AD000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A67AD000
Size:	4096

Details

Name:	00000000.00000003.744355377.000000000081E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	81E000
Size:	4096

Details

Name:	00000000.00000003.470012982.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000000.00000003.478470941.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000016.00000002.674132118.00007FF531AB3000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531AB3000
Size:	28672

Details

Name:	00000016.00000002.672761914.000000578927F000.00000004.00000010.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	578927F000
Size:	4096

Details

Name:	00000004.00000003.471020958.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	0000000A.00000002.485344378.00007FF5BA95D000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BA95D000
Size:	4096

Details

Name:	00000012.00000002.564914799.00007FF53D3A9000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53D3A9000
Size:	12288

Details

Name:	0000000A.00000002.484689369.00000195BA653000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	195BA653000
Size:	110592

Details

Name:	00000004.00000002.815732651.00000000025B0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	25B0000
Size:	8192

Details

Name:	0000000A.00000002.485008534.00000195BAE02000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	195BAE02000
Size:	4096

Details

Name:	00000005.00000002.816540036.0000000002AAC000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2AAC000
Size:	12288

Details

Name:	00000016.00000003.662020229.000002455BB91000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB91000
Size:	8192

Details

Name:	00000014.00000002.611262666.0000018EB6000000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18EB6000000
Size:	4096

Details

Name:	00000017.00000002.661204286.00007FF504643000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF504643000
Size:	24576

Details

Name:	00000004.00000002.818910599.000000007F4E2000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F4E2000
Size:	4096

Details

Name:	00000004.00000003.473710642.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000013.00000002.577579504.00007FF534EEE000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF534EEE000
Size:	4096

Details

Name:	00000016.00000002.672743682.00000057890F9000.00000004.00000010.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	57890F9000
Size:	28672

Details

Name:	00000000.00000003.434044759.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000016.00000003.661042447.000002455BB93000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB93000
Size:	397312

Details

Name:	00000000.00000003.426987826.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000016.00000003.650306046.000002455B2E5000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455B2E5000
Size:	4096

Details

Name:	00000013.00000002.577075166.000001B0F1E02000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B0F1E02000
Size:	65536

Details

Name:	00000005.00000003.720479333.0000000005751000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5751000
Size:	909312

Details

Name:	0000000A.00000002.485332424.00007FF5BA916000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BA916000
Size:	16384

Details

Name:	00000003.00000003.782661936.0000000004D6F000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4D6F000
Size:	475136

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000003.763087607.0000000002BF3000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2BF3000
Size:	32768

Details

Name:	00000005.00000003.492752807.0000000002950000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2950000
Size:	4096

Details

Name:	00000011.00000002.816345063.00007FF550650000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF550650000
Size:	4096

Details

Name:	00000014.00000002.611768512.00007FF5A69A7000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A69A7000
Size:	4096

Details

Name:	00000000.00000003.429355731.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000014.00000002.611320090.0000018EB6029000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18EB6029000
Size:	73728

Details

Name:	00000013.00000000.565353775.00007DF542C10000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF542C10000
Size:	12288

Details

Name:	0000000A.00000002.489729218.00007FF5BAB69000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BAB69000
Size:	12288

Details

Name:	00000000.00000002.815081931.0000000000710000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	710000
Size:	8192

Details

Name:	00000012.00000002.564888003.00007FF53D347000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53D347000
Size:	8192

Details

Name:	00000005.00000002.815387102.000000000222B000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	222B000
Size:	36864

Details

Name:	00000003.00000003.464319308.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000000.00000003.420045722.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000016.00000003.654113165.000002455BB80000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB80000
Size:	53248

Details

Name:	00000011.00000002.815694215.000002008C140000.00000002.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page readonly
Base address:	2008C140000
Size:	4096

Details

Name:	00000016.00000002.674357589.00007FF531B91000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531B91000
Size:	32768

Details

Name:	00000003.00000003.782484404.0000000005541000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5541000
Size:	475136

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000016.00000002.674043277.00007FF531A25000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531A25000
Size:	4096

Details

Name:	0000000A.00000002.490045522.00007FF5BAB91000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BAB91000
Size:	16384

Details

Name:	00000003.00000003.466238311.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000004.00000000.290388080.000000007F4D0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F4D0000
Size:	4096

Details

Name:	00000005.00000003.494293206.0000000002950000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2950000
Size:	4096

Details

Name:	00000003.00000002.816406047.0000000002E36000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E36000
Size:	20480

Details

Name:	00000000.00000002.815006148.0000000000578000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	578000
Size:	4096

Details

Name:	00000016.00000003.650120739.000002455B930000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455B930000
Size:	4096

Details

Name:	00000011.00000002.816581938.00007FF550725000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF550725000
Size:	16384

Details

Name:	00000004.00000003.465817856.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000000.00000002.815657153.0000000000A4C000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A4C000
Size:	16384

Details

Name:	00000012.00000000.550915413.00007DF54B050000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF54B050000
Size:	12288

Details

Name:	00000003.00000003.454717134.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000016.00000002.674018705.00007FF5319FB000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5319FB000
Size:	24576

Details

Name:	00000011.00000002.815573800.000002008BEF0000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2008BEF0000
Size:	49152

Details

Name:	00000000.00000003.466733221.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000016.00000002.674183264.00007FF531AD7000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531AD7000
Size:	49152

Details

Name:	00000005.00000002.815544173.0000000002550000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2550000
Size:	4096

Details

Name:	00000000.00000003.422395797.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000013.00000002.577383515.00007FF5347B2000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5347B2000
Size:	4096

Details

Name:	00000005.00000000.291130649.000000007F5A0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F5A0000
Size:	12288

Details

Name:	00000004.00000002.815254188.00000000021AD000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	21AD000
Size:	32768

Details

Name:	00000005.00000003.764684480.0000000002AB1000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AB1000
Size:	69632

Details

Name:	00000012.00000002.564653394.00007FF53D181000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53D181000
Size:	8192

Details

Name:	00000000.00000002.815337803.000000000079E000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	79E000
Size:	32768

Details

Name:	0000000A.00000002.486078577.00007FF5BAA15000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BAA15000
Size:	4096

Details

Name:	00000012.00000002.564304551.0000024AD11A0000.00000004.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	24AD11A0000
Size:	4096

Details

Name:	00000005.00000002.818416482.0000000005750000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5750000
Size:	356352

Details

Name:	00000014.00000002.611970716.00007FF5A6AB1000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A6AB1000
Size:	16384

Details

Name:	00000000.00000003.455125771.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000016.00000002.674066379.00007FF531A62000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531A62000
Size:	4096

Details

Name:	00000011.00000003.562487674.000002008C1B0000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2008C1B0000
Size:	20480

Details

Name:	00000004.00000003.481172012.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000004.00000002.816167282.00000000029E0000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	29E0000
Size:	4096

Details

Name:	00000013.00000002.577247489.000001B0F1F13000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B0F1F13000
Size:	20480

Details

Name:	00000004.00000003.494902156.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000003.00000002.817779996.0000000004CDF000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4CDF000
Size:	4096

Details

Name:	00000000.00000003.481851838.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000011.00000002.815625503.000002008C130000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2008C130000
Size:	65536

Details

Name:	00000004.00000003.719222424.0000000005751000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5751000
Size:	462848

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000000.291029748.000000007F582000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F582000
Size:	4096

Details

Name:	00000003.00000003.468874269.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000003.00000002.816666369.0000000002F4B000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2F4B000
Size:	4096

Details

Name:	00000003.00000003.781441639.0000000000ABC000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	ABC000
Size:	32768

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000000.290934749.0000000002248000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2248000
Size:	16384

Details

Name:	00000004.00000002.815043286.0000000002143000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2143000
Size:	8192

Details

Name:	00000016.00000003.655312957.000002455BBAD000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BBAD000
Size:	73728

Details

Name:	00000017.00000002.660943355.00007DF410220000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF410220000
Size:	20480

Details

Name:	00000005.00000003.763832395.0000000002AAE000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AAE000
Size:	4096

Details

Name:	00000011.00000002.816036071.00007FF54FF48000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54FF48000
Size:	4096

Details

Name:	00000003.00000002.816229295.0000000001040000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1040000
Size:	4096

Details

Name:	00000004.00000002.815354143.000000000221F000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	221F000
Size:	16384

Details

Name:	0000000A.00000000.471592930.00000195BA420000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	195BA420000
Size:	102400

Details

Name:	00000000.00000003.470716041.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000014.00000002.611340009.0000018EB603C000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18EB603C000
Size:	61440

Details

Name:	00000005.00000003.763754139.0000000002AC2000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AC2000
Size:	40960

Details

Name:	00000016.00000003.657974890.000002455BB88000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB88000
Size:	4096

Details

Name:	0000000A.00000002.485235044.00007FF5BA316000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BA316000
Size:	4096

Details

Name:	00000013.00000002.576966860.0000008B10D7E000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8B10D7E000
Size:	8192

Details

Name:	00000016.00000003.650106088.000002455B930000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455B930000
Size:	4096

Details

Name:	00000005.00000003.719456382.0000000002A70000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2A70000
Size:	61440

Details

Name:	00000003.00000003.692408283.0000000005441000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5441000
Size:	786432

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000012.00000002.564834168.00007FF53D307000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53D307000
Size:	49152

Details

Name:	00000005.00000003.493958538.0000000002950000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2950000
Size:	4096

Details

Name:	00000016.00000002.674312460.00007FF531B79000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531B79000
Size:	12288

Details

Name:	00000012.00000002.564399225.0000024AD1413000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24AD1413000
Size:	90112

Details

Name:	00000005.00000002.815556178.00000000025A0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	25A0000
Size:	8192

Details

Name:	00000000.00000003.474736645.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000005.00000002.818655695.000000007F580000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F580000
Size:	4096

Details

Name:	00000017.00000002.660838007.0000022B32B0B000.00000004.00000020.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	22B32B0B000
Size:	24576

Details

Name:	00000016.00000003.655421972.000002455BB80000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB80000
Size:	147456

Details

Name:	00000000.00000003.421439982.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000004.00000003.493699328.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000000.00000003.788072603.000000000081E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	81E000
Size:	4096

Details

Name:	00000003.00000000.289988636.000000007F0E2000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F0E2000
Size:	4096

Details

Name:	00000013.00000002.577026639.000001B0F1C30000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0F1C30000
Size:	102400

Details

Name:	00000004.00000003.719340674.0000000002BB4000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2BB4000
Size:	180224

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000012.00000002.564384357.0000024AD1400000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24AD1400000
Size:	73728

Details

Name:	00000011.00000002.816619189.00007FF550731000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF550731000
Size:	16384

Details

Name:	00000000.00000003.435203408.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000016.00000003.659197262.000002455C002000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455C002000
Size:	851968

Details

Name:	00000016.00000003.656806453.000002455BB82000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB82000
Size:	32768

Details

Name:	0000000A.00000002.487881549.00007FF5BAABE000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BAABE000
Size:	28672

Details

Name:	0000000A.00000002.487490151.00007FF5BAA99000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BAA99000
Size:	8192

Details

Name:	00000005.00000002.816963418.000000000433E000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	433E000
Size:	8192

Details

Name:	00000014.00000002.611564311.00007DF5B4730000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5B4730000
Size:	12288

Details

Name:	00000005.00000003.765902754.00000000057EE000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57EE000
Size:	466944

Details

Name:	00000000.00000003.492122545.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000011.00000002.816324530.00007FF550646000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF550646000
Size:	16384

Details

Name:	00000005.00000003.719371492.0000000002A6B000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2A6B000
Size:	12288

Details

Name:	00000005.00000002.814772313.000000000200D000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	200D000
Size:	12288

Details

Name:	00000004.00000002.815118513.0000000002176000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2176000
Size:	8192

Details

Name:	00000004.00000003.470896478.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000000.00000003.458166090.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000004.00000002.816025034.000000000297D000.00000004.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	297D000
Size:	8192

Details

Name:	00000011.00000002.815732187.000002008C160000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2008C160000
Size:	4096

Details

Name:	00000000.00000002.816549086.0000000002470000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2470000
Size:	4096

Details

Name:	00000016.00000003.659581357.000002455BB61000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB61000
Size:	90112

Details

Name:	00000016.00000002.673945439.00007FF531955000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531955000
Size:	12288

Details

Name:	0000000A.00000002.489426694.00007FF5BAAE3000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BAAE3000
Size:	24576

Details

Name:	0000000A.00000002.483653865.00000195BA602000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	195BA602000
Size:	65536

Details

Name:	00000003.00000002.818030498.000000007F0F0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F0F0000
Size:	4096

Details

Name:	00000003.00000002.816138986.0000000000C90000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	C90000
Size:	36864

Details

Name:	00000011.00000002.815556224.000002008BEE0000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2008BEE0000
Size:	4096

Details

Name:	00000003.00000002.818057215.000000007F0F2000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F0F2000
Size:	4096

Details

Name:	00000004.00000002.817920266.00000000051CA000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	51CA000
Size:	24576

Details

Name:	00000014.00000002.611878878.00007FF5A69FB000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A69FB000
Size:	12288

Details

Name:	00000000.00000003.495234538.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000004.00000002.818899191.000000007F4E0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F4E0000
Size:	4096

Details

Name:	00000011.00000002.815170769.000002008B260000.00000004.00000020.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2008B260000
Size:	28672

Details

Name:	00000003.00000002.816919671.0000000002FA5000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2FA5000
Size:	16384

Details

Name:	00000005.00000002.815533921.0000000002540000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2540000
Size:	16384

Details

Name:	00000016.00000002.674150492.00007FF531AC3000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531AC3000
Size:	12288

Details

Name:	00000003.00000003.449835220.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000011.00000002.816285148.00007FF55063F000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55063F000
Size:	12288

Details

Name:	0000000A.00000002.485292852.00007FF5BA677000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BA677000
Size:	32768

Details

Name:	00000016.00000003.654067017.000002455BB78000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB78000
Size:	8192

Details

Name:	00000000.00000003.428487291.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000012.00000002.564311182.0000024AD11B0000.00000004.00000040.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	24AD11B0000
Size:	4096

Details

Name:	00000016.00000002.672866608.000002455B23C000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2455B23C000
Size:	53248

Details

Name:	00000000.00000003.485280961.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000016.00000002.673923422.00007FF531905000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531905000
Size:	4096

Details

Name:	00000004.00000003.495065207.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000004.00000003.453642239.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000014.00000003.610817978.0000018EB604F000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18EB604F000
Size:	20480

Details

Name:	00000016.00000002.673009252.000002455B2DF000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2455B2DF000
Size:	24576

Details

Name:	00000005.00000003.716380519.0000000002A5A000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2A5A000
Size:	36864

Details

Name:	00000000.00000003.425505422.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000017.00000000.648552908.00007DF512352000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF512352000
Size:	4096

Details

Name:	00000000.00000002.815599281.0000000000860000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	860000
Size:	4096

Details

Name:	00000003.00000002.816648350.0000000002F48000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2F48000
Size:	8192

Details

Name:	00000003.00000003.467075799.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000014.00000002.611824732.00007FF5A69D3000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A69D3000
Size:	12288

Details

Name:	00000005.00000002.816736553.0000000002E70000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E70000
Size:	364544

Details

Name:	00000012.00000002.564448414.0000024AD1452000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24AD1452000
Size:	4096

Details

Name:	00000000.00000003.465566804.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000003.00000003.689312452.0000000000920000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	920000
Size:	4096

Details

Name:	00000000.00000003.455712314.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000004.00000003.764096752.0000000002C00000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C00000
Size:	4096

Details

Name:	00000000.00000003.475507005.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000000.00000003.744270597.0000000003D61000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3D61000
Size:	471040

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery
URLs found in memory or binary data	Networking

Details

Name:	00000016.00000003.661995420.000002455BB80000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB80000
Size:	4096

Details

Name:	00000014.00000002.611126950.0000003F718FF000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3F718FF000
Size:	4096

Details

Name:	00000003.00000002.815110020.000000000085F000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	85F000
Size:	4096

Details

Name:	00000004.00000002.814988113.0000000002087000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2087000
Size:	12288

Details

Name:	00000000.00000003.467076470.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000000.00000003.465933960.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000012.00000002.564274692.000000D05ED7E000.00000004.00000010.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	D05ED7E000
Size:	8192

Details

Name:	00000012.00000002.564556315.00007DF54B032000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF54B032000
Size:	4096

Details

Name:	00000000.00000003.458730883.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000016.00000003.655290292.000002455BB80000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB80000
Size:	36864

Details

Name:	00000013.00000002.577619894.00007FF534F81000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF534F81000
Size:	32768

Details

Name:	00000013.00000002.577399224.00007FF534A77000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF534A77000
Size:	32768

Details

Name:	00000016.00000003.661218749.000002455BB93000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB93000
Size:	397312

Details

Name:	00000011.00000002.816116785.00007FF54FFBE000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54FFBE000
Size:	4096

Details

Name:	00000012.00000002.564535425.0000024AD1A02000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24AD1A02000
Size:	4096

Details

Name:	00000004.00000003.541194245.0000000002B83000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2B83000
Size:	36864

Details

Name:	00000003.00000002.818085260.000000007F100000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F100000
Size:	12288

Details

Name:	00000011.00000000.547485128.00007DF55E3A2000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55E3A2000
Size:	4096

Details

Name:	00000016.00000002.672909325.000002455B258000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2455B258000
Size:	98304

Details

Name:	00000004.00000003.494730646.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000005.00000002.815437796.0000000002242000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2242000
Size:	8192

Details

Name:	00000005.00000003.765714949.0000000005751000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5751000
Size:	974848

Details

Name:	00000013.00000002.577439119.00007FF534D9F000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF534D9F000
Size:	8192

Details

Name:	00000014.00000002.611151656.0000018EB5E60000.00000004.00000040.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	18EB5E60000
Size:	4096

Details

Name:	00000004.00000003.462951163.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000000.00000003.493198973.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000005.00000003.763823255.0000000002AAC000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AAC000
Size:	4096

Details

Name:	00000005.00000002.817697304.0000000004A1D000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4A1D000
Size:	12288

Details

Name:	00000011.00000002.814911978.000002008B1E0000.00000004.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2008B1E0000
Size:	4096

Details

Name:	00000005.00000003.763789778.0000000002A80000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2A80000
Size:	172032

Details

Name:	00000014.00000002.611782669.00007FF5A69BD000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A69BD000
Size:	4096

Details

Name:	00000000.00000002.815908758.0000000000A90000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000016.00000003.656847772.000002455BBC3000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BBC3000
Size:	69632

Details

Name:	00000012.00000003.563916303.0000024AD147C000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24AD147C000
Size:	36864

Details

Name:	00000000.00000002.816900955.000000000379D000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	379D000
Size:	12288

Details

Name:	00000005.00000002.814878380.000000000203B000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	203B000
Size:	8192

Details

Name:	00000004.00000003.484670194.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000004.00000002.818059920.00000000052CF000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	52CF000
Size:	4096

Details

Name:	00000014.00000000.596177739.00007DF5B4730000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5B4730000
Size:	12288

Details

Name:	00000003.00000003.458891826.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000003.00000002.817430473.000000000305C000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	305C000
Size:	4096

Details

Name:	00000017.00000002.660717604.0000008EB850F000.00000004.00000010.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8EB850F000
Size:	4096

Details

Name:	00000003.00000002.816082370.0000000000C80000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	C80000
Size:	20480

Details

Name:	00000003.00000003.692232136.0000000005441000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5441000
Size:	737280

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000013.00000002.577613921.00007FF534F7A000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF534F7A000
Size:	12288

Details

Name:	00000004.00000003.468472684.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000000.00000002.814986429.0000000000574000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	574000
Size:	8192

Details

Name:	00000017.00000002.660822061.0000022B32AD0000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22B32AD0000
Size:	8192

Details

Name:	0000000A.00000002.489566440.00007FF5BAAEE000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BAAEE000
Size:	4096

Details

Name:	00000000.00000002.817155542.0000000010005000.00000040.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute and read and write
Base address:	10005000
Size:	40960

Details

Name:	00000005.00000002.815145406.0000000002166000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2166000
Size:	8192

Details

Name:	00000000.00000003.420439872.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000012.00000002.564709152.00007FF53D22B000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53D22B000
Size:	24576

Details

Name:	00000003.00000003.782473818.00000000050EB000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	50EB000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.815715928.0000000000A71000.00000020.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	A71000
Size:	45056

Details

Name:	00000012.00000002.564434201.0000024AD143C000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24AD143C000
Size:	73728

Details

Name:	0000000A.00000000.471624327.00007DF5C87F2000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5C87F2000
Size:	4096

Details

Name:	00000005.00000003.809483618.00000000056D5000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	56D5000
Size:	282624

Details

Name:	00000005.00000002.815476859.00000000024A0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24A0000
Size:	102400

Details

Name:	00000005.00000002.818270758.00000000056D4000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	56D4000
Size:	286720

Details

Name:	00000000.00000003.744260777.0000000002F4B000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	2F4B000
Size:	8192

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000002.815005119.0000000002138000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2138000
Size:	8192

Details

Name:	00000003.00000002.817458397.0000000003068000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3068000
Size:	16384

Details

Name:	00000004.00000002.815808298.0000000002699000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2699000
Size:	4096

Details

Name:	00000014.00000002.611270727.0000018EB6002000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18EB6002000
Size:	65536

Details

Name:	00000000.00000003.787993649.00000000007AF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7AF000
Size:	98304

Details

Name:	00000014.00000000.596172597.00007DF5B4722000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5B4722000
Size:	4096

Details

Name:	00000012.00000002.564941942.00007FF53D3CA000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53D3CA000
Size:	4096

Details

Name:	00000005.00000002.817722347.0000000004A5A000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4A5A000
Size:	24576

Details

Name:	00000004.00000002.816700041.0000000002B9D000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2B9D000
Size:	90112

Details

Name:	00000012.00000002.564375903.0000024AD13E0000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24AD13E0000
Size:	4096

Details

Name:	00000004.00000003.495417028.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000000.00000003.744324895.0000000003DDD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3DDD000
Size:	4096

Details

Name:	0000000A.00000002.483622875.00000195BA450000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	195BA450000
Size:	4096

Details

Name:	00000003.00000002.816056458.0000000000C70000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	C70000
Size:	4096

Details

Name:	00000004.00000002.815707192.0000000002550000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2550000
Size:	16384

Details

Name:	00000016.00000003.655299385.000002455BB91000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB91000
Size:	32768

Details

Name:	00000004.00000003.478472206.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000005.00000002.816944747.00000000042FD000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	42FD000
Size:	12288

Details

Name:	00000012.00000003.563935482.0000024AD1453000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24AD1453000
Size:	114688

Details

Name:	00000000.00000003.449503700.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000003.00000002.816719920.0000000002F5E000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2F5E000
Size:	8192

Details

Name:	00000000.00000003.789890749.0000000000808000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	808000
Size:	94208

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000002.815420984.0000000000A53000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	A53000
Size:	12288

Details

Name:	00000013.00000002.577054256.000001B0F1C80000.00000004.00000020.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1B0F1C80000
Size:	8192

Details

Name:	00000004.00000002.816828019.0000000002BE1000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2BE1000
Size:	12288

Details

Name:	00000013.00000003.576569047.000001B0F1E5F000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B0F1E5F000
Size:	122880

Details

Name:	00000016.00000002.672936808.000002455B28A000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2455B28A000
Size:	159744

Details

Name:	00000016.00000002.673831545.00007FF531867000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531867000
Size:	12288

Details

Name:	00000000.00000003.424464775.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000003.00000002.814886037.000000000069B000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	69B000
Size:	20480

Details

Name:	00000013.00000002.577492870.00007FF534DFC000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF534DFC000
Size:	4096

Details

Name:	00000000.00000002.815636359.0000000000875000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	875000
Size:	16384

Details

Name:	00000000.00000002.815614586.0000000000870000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	870000
Size:	16384

Details

Name:	00000000.00000003.468940352.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000005.00000002.815096823.0000000002141000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2141000
Size:	16384

Details

Name:	00000005.00000002.818594573.0000000010005000.00000040.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute and read and write
Base address:	10005000
Size:	40960

Details

Name:	00000000.00000002.815568023.000000000081E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	81E000
Size:	4096

Details

Name:	00000000.00000003.742366067.0000000003D61000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3D61000
Size:	512000

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000003.494533346.0000000002950000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2950000
Size:	4096

Details

Name:	00000000.00000003.479994595.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000011.00000002.815201495.000002008B268000.00000004.00000020.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2008B268000
Size:	389120

Details

Name:	0000000A.00000002.485900854.00007FF5BA9EB000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BA9EB000
Size:	24576

Details

Name:	00000000.00000003.463449116.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000012.00000002.564606785.00007FF53CB0C000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53CB0C000
Size:	16384

Details

Name:	00000016.00000002.673172174.000002455B870000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2455B870000
Size:	4096

Details

Name:	00000005.00000002.817746486.0000000004A80000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4A80000
Size:	4096

Details

Name:	0000000A.00000002.483548231.00000195BA400000.00000004.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	195BA400000
Size:	4096

Details

Name:	00000004.00000003.467201727.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000014.00000002.611755502.00007FF5A6931000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A6931000
Size:	12288

Details

Name:	00000016.00000002.673989821.00007FF5319AF000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5319AF000
Size:	8192

Details

Name:	00000016.00000003.654044021.000002455BB6E000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB6E000
Size:	4096

Details

Name:	00000012.00000002.564732493.00007FF53D255000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53D255000
Size:	4096

Details

Name:	00000016.00000003.653086921.000002455BBA0000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BBA0000
Size:	131072

Details

Name:	00000004.00000002.814814838.0000000002047000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2047000
Size:	4096

Details

Name:	00000004.00000003.494059338.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000003.00000003.735735696.0000000000ABC000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	ABC000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000016.00000002.673768461.00007FF531681000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531681000
Size:	20480

Details

Name:	00000000.00000003.417383844.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000016.00000002.674112265.00007FF531AAD000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531AAD000
Size:	4096

Details

Name:	00000004.00000002.818207504.000000000558E000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	558E000
Size:	8192

Details

Name:	00000005.00000003.716662650.0000000004350000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	4350000
Size:	4096

Details

Name:	00000000.00000003.468038584.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000016.00000003.660506840.000002455BB96000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB96000
Size:	49152

Details

Name:	00000000.00000003.479196126.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000003.00000003.737675636.0000000005441000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5441000
Size:	700416

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000000.289996853.000000007F100000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F100000
Size:	12288

Details

Name:	00000003.00000003.462814502.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000012.00000002.564564073.00007DF54B040000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF54B040000
Size:	4096

Details

Name:	00000003.00000002.815258950.00000000009FA000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	9FA000
Size:	356352

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000002.816325632.0000000002A70000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2A70000
Size:	61440

Details

Name:	00000000.00000003.744363033.00000000007A8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7A8000
Size:	126976

Details

Name:	00000016.00000003.657708357.000002455BBA4000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BBA4000
Size:	61440

Details

Name:	00000016.00000002.673048370.000002455B2F6000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2455B2F6000
Size:	45056

Details

Name:	00000016.00000002.673866230.00007FF53189B000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53189B000
Size:	8192

Details

Name:	00000000.00000000.288322670.000000007FFA0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFA0000
Size:	4096

Details

Name:	00000004.00000003.763097192.0000000002BFD000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2BFD000
Size:	12288

Details

Name:	00000016.00000002.673194189.000002455B8C0000.00000008.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page write copy
Base address:	2455B8C0000
Size:	266240

Details

Name:	00000013.00000002.577088631.000001B0F1E13000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B0F1E13000
Size:	90112

Details

Name:	00000000.00000003.428593825.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000017.00000002.661264568.00007FF5046DA000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5046DA000
Size:	12288

Details

Name:	00000013.00000000.565347191.00007DF542C02000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF542C02000
Size:	4096

Details

Name:	0000000A.00000002.486068689.00007FF5BAA11000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BAA11000
Size:	12288

Details

Name:	00000016.00000002.673372837.000002455BB0E000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB0E000
Size:	36864

Details

Name:	00000016.00000003.659596017.000002455BB6B000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB6B000
Size:	49152

Details

Name:	00000000.00000003.427849120.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000011.00000002.814815674.000000913747F000.00000004.00000010.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	913747F000
Size:	4096

Details

Name:	00000004.00000002.816070328.00000000029A0000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	29A0000
Size:	20480

Details

Name:	00000012.00000002.564316744.0000024AD11C0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24AD11C0000
Size:	102400

Details

Name:	00000003.00000002.814788953.0000000000444000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	444000
Size:	4096

Details

Name:	00000013.00000002.577070590.000001B0F1E00000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B0F1E00000
Size:	4096

Details

Name:	00000004.00000002.818029189.000000000528E000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	528E000
Size:	8192

Details

Name:	00000013.00000002.577284769.00007DF440AC0000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF440AC0000
Size:	20480

Details

Name:	00000016.00000002.672973912.000002455B2C1000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2455B2C1000
Size:	8192

Details

Name:	00000004.00000003.474054318.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000000.00000002.817076758.0000000003D60000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3D60000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000016.00000003.656837618.000002455BB80000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB80000
Size:	8192

Details

Name:	00000004.00000002.816869907.0000000002BEF000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2BEF000
Size:	131072

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000016.00000003.672415220.000002455BB4E000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB4E000
Size:	32768

Details

Name:	00000011.00000002.815986947.00007FF54FE79000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54FE79000
Size:	4096

Details

Name:	00000012.00000002.564743037.00007FF53D2D9000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53D2D9000
Size:	8192

Details

Name:	00000004.00000003.763937583.0000000004DBB000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4DBB000
Size:	8192

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.790456200.0000000002BCF000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	2BCF000
Size:	475136

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.447399280.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000005.00000002.816728137.0000000002E60000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E60000
Size:	4096

Details

Name:	00000000.00000003.433843497.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000016.00000002.673408862.000002455BB1B000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB1B000
Size:	36864

Details

Name:	00000000.00000003.463516180.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000004.00000003.463389768.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000016.00000002.674122677.00007FF531AAF000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531AAF000
Size:	12288

Details

Name:	00000004.00000002.818086907.000000000530E000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	530E000
Size:	8192

Details

Name:	00000013.00000002.577420305.00007FF534D41000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF534D41000
Size:	8192

Details

Name:	00000013.00000002.577009554.0000008B1157F000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8B1157F000
Size:	4096

Details

Name:	0000000A.00000002.484722184.00000195BA66F000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	195BA66F000
Size:	69632

Details

Name:	00000003.00000002.816962385.0000000002FAF000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2FAF000
Size:	24576

Details

Name:	00000014.00000002.611558861.00007DF5B4722000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5B4722000
Size:	4096

Details

Name:	00000014.00000002.611941289.00007FF5A6A9A000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A6A9A000
Size:	12288

Details

Name:	00000012.00000002.564901287.00007FF53D34D000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53D34D000
Size:	8192

Details

Name:	00000000.00000003.461840690.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000000.00000003.493524775.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000016.00000002.673698937.00007DF53F812000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF53F812000
Size:	4096

Details

Name:	00000012.00000002.564568704.00007DF54B042000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF54B042000
Size:	4096

Details

Name:	00000003.00000003.466747745.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000005.00000003.720396438.0000000005651000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5651000
Size:	815104

Details

Name:	00000003.00000002.817116487.0000000002FCB000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2FCB000
Size:	12288

Details

Name:	00000005.00000002.817885500.000000000534F000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	534F000
Size:	4096

Details

Name:	00000004.00000002.815534765.00000000024A0000.00000004.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	24A0000
Size:	4096

Details

Name:	00000013.00000002.577175164.000001B0F1E64000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B0F1E64000
Size:	102400

Details

Name:	00000000.00000003.431919260.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000000.00000003.465749476.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000013.00000002.577593172.00007FF534F0D000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF534F0D000
Size:	8192

Details

Name:	00000013.00000002.577607600.00007FF534F74000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF534F74000
Size:	20480

Details

Name:	00000012.00000002.564503822.0000024AD1513000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24AD1513000
Size:	12288

Details

Name:	00000004.00000003.494395759.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000000.00000002.816138154.0000000000C0D000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	C0D000
Size:	12288

Details

Name:	00000005.00000002.816653901.0000000002AE0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AE0000
Size:	36864

Details

Name:	00000014.00000002.611774676.00007FF5A69B9000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A69B9000
Size:	8192

Details

Name:	00000004.00000002.815055573.000000000214E000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	214E000
Size:	8192

Details

Name:	00000004.00000002.818487351.0000000005750000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5750000
Size:	471040

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000002.815145554.0000000002186000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2186000
Size:	8192

Details

Name:	00000005.00000003.764604452.0000000002A64000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2A64000
Size:	4096

Details

Name:	00000004.00000003.764102443.0000000002C02000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C02000
Size:	53248

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	0000000A.00000002.487555875.00007FF5BAA9D000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BAA9D000
Size:	4096

Details

Name:	00000003.00000003.465567881.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000005.00000002.815614081.00000000028D0000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	28D0000
Size:	16384

Details

Name:	00000011.00000002.816227640.00007FF55059C000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55059C000
Size:	16384

Details

Name:	00000016.00000002.673334199.000002455BA02000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BA02000
Size:	4096

Details

Name:	00000003.00000002.816458332.0000000002E5B000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E5B000
Size:	8192

Details

Name:	00000004.00000002.818873612.000000007F4D2000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F4D2000
Size:	4096

Details

Name:	00000012.00000002.564573376.00007DF54B050000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF54B050000
Size:	12288

Details

Name:	00000012.00000002.564361585.0000024AD1210000.00000004.00000020.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	24AD1210000
Size:	8192

Details

Name:	00000011.00000002.815838432.00007DF55E3B0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55E3B0000
Size:	12288

Details

Name:	00000000.00000003.464959299.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000004.00000003.460323828.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000014.00000000.596226132.00007FF5A6AB1000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A6AB1000
Size:	16384

Details

Name:	00000000.00000003.477824516.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000005.00000003.809611525.0000000002A66000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2A66000
Size:	102400

Details

Name:	0000000A.00000002.483501938.00000050ACDFF000.00000004.00000010.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	50ACDFF000
Size:	4096

Details

Name:	00000003.00000003.465294985.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000016.00000002.673089827.000002455B308000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2455B308000
Size:	28672

Details

Name:	00000013.00000002.577280449.000001B0F2602000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B0F2602000
Size:	4096

Details

Name:	00000000.00000003.434189748.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	0000000A.00000002.487613994.00007FF5BAA9F000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BAA9F000
Size:	12288

Details

Name:	00000004.00000003.468938127.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000000.00000002.815511082.00000000007F5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7F5000
Size:	77824

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.466061688.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000003.00000002.817607312.000000000471F000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	471F000
Size:	4096

Details

Name:	00000016.00000003.658914575.000002455BB9B000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB9B000
Size:	4096

Details

Name:	00000000.00000003.418112426.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000013.00000002.577391609.00007FF534A71000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF534A71000
Size:	20480

Details

Name:	00000004.00000002.815916712.0000000002910000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2910000
Size:	4096

Details

Name:	00000000.00000002.817236646.000000007FFA0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFA0000
Size:	4096

Details

Name:	00000016.00000002.673801784.00007FF531777000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531777000
Size:	4096

Details

Name:	00000005.00000002.815263475.00000000021A6000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	21A6000
Size:	16384

Details

Name:	00000000.00000003.474035102.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000016.00000003.650311805.000002455B2E8000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455B2E8000
Size:	32768

Details

Name:	00000017.00000002.660954930.00007DF512350000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF512350000
Size:	4096

Details

Name:	00000000.00000002.816158305.0000000000C4E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	C4E000
Size:	8192

Details

Name:	00000017.00000002.661155052.00007FF504606000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF504606000
Size:	16384

Details

Name:	00000013.00000002.577066058.000001B0F1D80000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B0F1D80000
Size:	4096

Details

Name:	00000016.00000002.673431495.000002455BB25000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB25000
Size:	167936

Details

Name:	00000005.00000002.815607864.00000000027AA000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	27AA000
Size:	4096

Details

Name:	00000011.00000002.815822532.00007DF55E3A2000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55E3A2000
Size:	4096

Details

Name:	00000000.00000003.474348734.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000016.00000003.656824942.000002455BB9E000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB9E000
Size:	65536

Details

Name:	00000013.00000002.577572147.00007FF534EE3000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF534EE3000
Size:	24576

Details

Name:	00000003.00000002.816841520.0000000002F96000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2F96000
Size:	8192

Details

Name:	00000004.00000003.475849862.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000012.00000002.564541141.00007DF448F00000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF448F00000
Size:	20480

Details

Name:	00000005.00000002.815288785.00000000021BC000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	21BC000
Size:	8192

Details

Name:	00000000.00000003.426689660.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000014.00000002.611525034.00007DF5B4710000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5B4710000
Size:	4096

Details

Name:	00000003.00000002.816195327.0000000000F0C000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	F0C000
Size:	16384

Details

Name:	00000011.00000000.547433780.00007DF55E390000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55E390000
Size:	4096

Details

Name:	0000000A.00000002.483542411.00000050AD0FF000.00000004.00000010.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	50AD0FF000
Size:	4096

Details

Name:	00000014.00000002.611905116.00007FF5A6A2A000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A6A2A000
Size:	8192

Details

Name:	00000004.00000003.459635652.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000003.00000002.816443308.0000000002E57000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E57000
Size:	4096

Details

Name:	00000005.00000002.815349569.000000000221A000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	221A000
Size:	24576

Details

Name:	00000004.00000003.764150248.0000000004BBC000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4BBC000
Size:	475136

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000012.00000002.564933663.00007FF53D3C1000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53D3C1000
Size:	32768

Details

Name:	0000000A.00000002.489899312.00007FF5BAB7A000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BAB7A000
Size:	12288

Details

Name:	00000000.00000003.425052562.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000016.00000003.672447544.000002455B253000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455B253000
Size:	12288

Details

Name:	00000004.00000002.815069448.0000000002151000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2151000
Size:	16384

Details

Name:	00000003.00000002.815050473.0000000000851000.00000020.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	851000
Size:	45056

Details

Name:	00000000.00000003.419177324.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000003.00000002.816509742.0000000002E7C000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E7C000
Size:	12288

Details

Name:	00000000.00000002.814932997.00000000003A0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3A0000
Size:	4096

Details

Name:	00000000.00000003.460659031.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	0000000A.00000002.487714343.00007FF5BAAB0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BAAB0000
Size:	4096

Details

Name:	00000000.00000003.744455408.0000000002D4C000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	2D4C000
Size:	475136

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery
URLs found in memory or binary data	Networking

Details

Name:	0000000A.00000002.483708420.00000195BA63C000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	195BA63C000
Size:	45056

Details

Name:	00000014.00000002.611133453.0000018EB5E50000.00000004.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	18EB5E50000
Size:	4096

Details

Name:	00000013.00000002.577015778.000001B0F1C10000.00000004.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1B0F1C10000
Size:	4096

Details

Name:	00000016.00000003.654846727.000002455BB78000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB78000
Size:	8192

Details

Name:	00000013.00000002.577510321.00007FF534E87000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF534E87000
Size:	4096

Details

Name:	00000016.00000000.647451458.00007DF53F810000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF53F810000
Size:	4096

Details

Name:	00000016.00000003.657878385.000002455BB84000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB84000
Size:	4096

Details

Name:	0000000A.00000002.489920669.00007FF5BAB81000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BAB81000
Size:	32768

Details

Name:	00000000.00000003.417769706.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000000.00000003.440285085.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000016.00000002.674157490.00007FF531AC7000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531AC7000
Size:	16384

Details

Name:	00000000.00000003.414608262.0000000000C10000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C10000
Size:	4096

Details

Name:	00000005.00000002.815582412.00000000025E0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25E0000
Size:	4096

Details

Name:	00000003.00000003.466420689.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000017.00000002.660882092.0000022B32C10000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	22B32C10000
Size:	16384

Details

Name:	00000016.00000002.673929111.00007FF531926000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531926000
Size:	16384

Details

Name:	00000017.00000002.661230695.00007FF50466D000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50466D000
Size:	8192

Details

Name:	00000000.00000003.432887408.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000011.00000002.816425903.00007FF5506AA000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5506AA000
Size:	8192

Details

Name:	00000000.00000003.428048985.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000016.00000003.672461743.000002455B24E000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455B24E000
Size:	4096

Details

Name:	00000013.00000002.577468371.00007FF534DE5000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF534DE5000
Size:	20480

Details

Name:	00000016.00000003.659573874.000002455BB77000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB77000
Size:	24576

Details

Name:	00000004.00000003.461564574.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000004.00000003.479197160.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000000.00000000.288332373.000000007FFB0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000004.00000002.815081398.000000000215F000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	215F000
Size:	20480

Details

Name:	00000005.00000002.818698613.000000007F592000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F592000
Size:	4096

Details

Name:	00000000.00000003.416405479.0000000000C10000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C10000
Size:	4096

Details

Name:	00000005.00000002.815043100.000000000212F000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	212F000
Size:	8192

Details

Name:	00000004.00000003.472265462.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000016.00000002.674105306.00007FF531AA9000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531AA9000
Size:	8192

Details

Name:	00000016.00000002.673498728.000002455BB57000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB57000
Size:	45056

Details

Name:	00000000.00000003.433944158.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000012.00000002.564772031.00007FF53D2E3000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53D2E3000
Size:	28672

Details

Name:	00000000.00000000.288340505.000000007FFC0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	12288

Details

Name:	0000000A.00000002.484791819.00000195BA68A000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	195BA68A000
Size:	28672

Details

Name:	00000012.00000002.564722246.00007FF53D251000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53D251000
Size:	12288

Details

Name:	00000000.00000003.473066842.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000000.00000003.428709331.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000012.00000002.564786656.00007FF53D2F0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53D2F0000
Size:	4096

Details

Name:	00000016.00000002.673882030.00007FF5318E4000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5318E4000
Size:	4096

Details

Name:	00000003.00000003.448933249.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000000.00000002.816172892.0000000000C60000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	C60000
Size:	20480

Details

Name:	00000012.00000000.550909161.00007DF54B042000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF54B042000
Size:	4096

Details

Name:	00000011.00000002.815515580.000002008B7C0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2008B7C0000
Size:	4096

Details

Name:	00000011.00000002.816501424.00007FF550714000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF550714000
Size:	20480

Details

Name:	00000000.00000003.472266162.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000005.00000002.817864212.000000000530E000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	530E000
Size:	8192

Details

Name:	00000016.00000002.674330369.00007FF531B84000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531B84000
Size:	20480

Details

Name:	00000016.00000002.673756836.00007FF53150B000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53150B000
Size:	4096

Details

Name:	00000004.00000002.815557780.00000000024B0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24B0000
Size:	102400

Details

Name:	00000004.00000003.471626183.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000005.00000002.817903238.000000000538E000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	538E000
Size:	8192

Details

Name:	00000017.00000002.661223884.00007FF50466A000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF50466A000
Size:	8192

Details

Name:	00000000.00000002.815980218.0000000000B90000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	B90000
Size:	8192

Details

Name:	00000011.00000002.816466216.00007FF550702000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF550702000
Size:	12288

Details

Name:	00000016.00000003.659797000.000002455BB96000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB96000
Size:	32768

Details

Name:	00000005.00000003.716436135.0000000002A56000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2A56000
Size:	16384

Details

Name:	00000016.00000002.674232250.00007FF531B17000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531B17000
Size:	8192

Details

Name:	00000011.00000002.815359081.000002008B2C8000.00000004.00000020.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2008B2C8000
Size:	24576

Details

Name:	00000004.00000003.716859956.0000000002BDF000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2BDF000
Size:	4096

Details

Name:	00000003.00000002.816871239.0000000002F99000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2F99000
Size:	32768

Details

Name:	00000004.00000002.815374303.0000000002224000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2224000
Size:	8192

Details

Name:	00000005.00000002.814954407.0000000002069000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2069000
Size:	8192

Details

Name:	00000000.00000003.419529194.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000005.00000002.815637140.00000000028E0000.00000040.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page execute and read and write
Base address:	28E0000
Size:	4096

Details

Name:	00000005.00000003.494863174.0000000002950000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2950000
Size:	4096

Details

Name:	00000004.00000003.808581505.0000000004DBB000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4DBB000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000003.493791016.0000000002950000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2950000
Size:	4096

Details

Name:	00000016.00000002.672780688.000002455B0C0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2455B0C0000
Size:	102400

Details

Name:	00000004.00000002.816121940.00000000029B0000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	29B0000
Size:	16384

Details

Name:	00000004.00000003.476044716.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000004.00000002.818175100.000000000540E000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	540E000
Size:	8192

Details

Name:	00000003.00000000.289967804.0000000000600000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	600000
Size:	102400

Details

Name:	00000003.00000002.814947068.0000000000800000.00000040.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page execute and read and write
Base address:	800000
Size:	4096

Details

Name:	00000016.00000002.673601073.000002455BB80000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB80000
Size:	8192

Details

Name:	00000004.00000003.719367265.0000000002B97000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2B97000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000003.494697620.0000000002950000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2950000
Size:	4096

Details

Name:	0000000A.00000002.485149433.00007DF5C8810000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5C8810000
Size:	12288

Details

Name:	00000003.00000002.816324943.00000000011CF000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	11CF000
Size:	4096

Details

Name:	00000000.00000003.476044263.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000016.00000002.672710491.0000005788EF7000.00000004.00000010.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5788EF7000
Size:	36864

Details

Name:	00000004.00000002.814753090.0000000001F4B000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F4B000
Size:	8192

Details

Name:	00000003.00000002.817762727.0000000004C9E000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4C9E000
Size:	8192

Details

Name:	00000016.00000002.674031218.00007FF531A21000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531A21000
Size:	12288

Details

Name:	00000003.00000002.815215397.00000000009BE000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	9BE000
Size:	8192

Details

Name:	00000000.00000003.464319620.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000003.00000002.814757707.00000000003F0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3F0000
Size:	16384

Details

Name:	00000011.00000000.547551613.00007FF550731000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF550731000
Size:	16384

Details

Name:	00000016.00000003.656760748.000002455BBB4000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BBB4000
Size:	65536

Details

Name:	00000017.00000000.648558264.00007DF512360000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF512360000
Size:	4096

Details

Name:	00000003.00000002.815622698.0000000000A96000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	A96000
Size:	299008

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000016.00000002.672755064.00000057891FB000.00000004.00000010.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	57891FB000
Size:	20480

Details

Name:	00000004.00000003.478720926.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000000.00000003.430521238.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000000.00000002.817325501.000000007FFC0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	12288

Details

Name:	00000005.00000002.818030539.000000000564F000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	564F000
Size:	4096

Details

Name:	00000004.00000003.455967123.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	0000000A.00000003.483064075.00000195BA647000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	195BA647000
Size:	28672

Details

Name:	00000004.00000002.816035458.000000000297F000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	297F000
Size:	4096

Details

Name:	00000003.00000003.463242239.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000011.00000003.548016885.000002008B2B1000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2008B2B1000
Size:	4096

Details

Name:	00000016.00000002.673682316.00007DF53F810000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF53F810000
Size:	4096

Details

Name:	00000000.00000003.698464038.00000000007C8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7C8000
Size:	167936

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000014.00000002.611710421.00007FF5A689B000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A689B000
Size:	8192

Details

Name:	00000016.00000003.655327986.000002455C002000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455C002000
Size:	73728

Details

Name:	00000005.00000002.817761585.0000000004E78000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4E78000
Size:	12288

Details

Name:	00000013.00000002.577041812.000001B0F1C50000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0F1C50000
Size:	12288

Details

Name:	00000000.00000002.816869541.000000000359F000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	359F000
Size:	4096

Details

Name:	00000003.00000003.691164475.0000000000A96000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A96000
Size:	155648

Details

Name:	00000003.00000003.464020765.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000014.00000003.610769300.0000018EB607D000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18EB607D000
Size:	40960

Details

Name:	00000000.00000003.625379896.0000000000797000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	797000
Size:	36864

Details

Name:	00000013.00000002.577499202.00007FF534E11000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF534E11000
Size:	12288

Details

Name:	00000003.00000002.816173072.0000000000ECC000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	ECC000
Size:	16384

Details

Name:	00000005.00000003.493289284.0000000002950000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2950000
Size:	4096

Details

Name:	00000012.00000000.550898650.00007DF54B040000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF54B040000
Size:	4096

Details

Name:	00000016.00000003.659786147.000002455BB93000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB93000
Size:	4096

Details

Name:	00000005.00000003.763766489.0000000002A64000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2A64000
Size:	110592

Details

Name:	00000012.00000002.564895582.00007FF53D34A000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53D34A000
Size:	8192

Details

Name:	00000004.00000003.460937837.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000005.00000002.815932985.00000000029EA000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	29EA000
Size:	364544

Details

Name:	00000000.00000002.817104171.0000000003DDD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3DDD000
Size:	4096

Details

Name:	00000003.00000002.816344869.000000000120E000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	120E000
Size:	8192

Details

Name:	00000000.00000003.790301779.00000000007F5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7F5000
Size:	77824

Details

Name:	00000003.00000003.457019157.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000004.00000003.465366870.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000014.00000000.596162497.00007DF5B4712000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5B4712000
Size:	4096

Details

Name:	00000005.00000000.291121649.000000007F590000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F590000
Size:	4096

Details

Name:	00000005.00000003.763839603.0000000002AB1000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AB1000
Size:	69632

Details

Name:	00000005.00000002.817577392.00000000048FC000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	48FC000
Size:	16384

Details

Name:	00000012.00000002.564145888.000000D05EB7B000.00000004.00000010.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	D05EB7B000
Size:	20480

Details

Name:	00000016.00000002.672703197.0000005788DFE000.00000004.00000010.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5788DFE000
Size:	8192

Details

Name:	00000004.00000003.494228185.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000004.00000003.464537466.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000000.00000002.816721151.0000000002AFE000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2AFE000
Size:	8192

Details

Name:	00000000.00000003.418545281.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000000.00000003.742515712.00000000007C8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7C8000
Size:	262144

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000017.00000002.660982906.00007DF512370000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF512370000
Size:	12288

Details

Name:	00000004.00000003.719277353.0000000002BE0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2BE0000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000003.451875225.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000003.00000002.815459831.0000000000A5D000.00000004.00000020.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	A5D000
Size:	225280

Signature Hits	Behavior Group	Mitre Attack
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000003.473065750.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000013.00000000.565340188.00007DF542C00000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF542C00000
Size:	4096

Details

Name:	00000000.00000002.816827781.000000000335D000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	335D000
Size:	12288

Details

Name:	00000003.00000002.815158564.00000000008B0000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8B0000
Size:	4096

Details

Name:	00000016.00000002.673762625.00007FF53151C000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53151C000
Size:	4096

Details

Name:	0000000A.00000002.489635089.00007FF5BAB0A000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BAB0A000
Size:	8192

Details

Name:	00000014.00000002.611739388.00007FF5A690B000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A690B000
Size:	24576

Details

Name:	00000016.00000002.674054604.00007FF531A4F000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531A4F000
Size:	4096

Details

Name:	00000000.00000003.425654108.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000004.00000002.815105354.0000000002171000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2171000
Size:	4096

Details

Name:	0000000A.00000000.471644852.00007DF5C8810000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5C8810000
Size:	12288

Details

Name:	00000011.00000002.816024041.00007FF54FF3E000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54FF3E000
Size:	8192

Details

Name:	00000012.00000002.564792418.00007FF53D2F3000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53D2F3000
Size:	12288

Details

Name:	00000016.00000002.672769989.000002455B0A0000.00000004.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2455B0A0000
Size:	4096

Details

Name:	00000016.00000002.673936700.00007FF531951000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531951000
Size:	12288

Details

Name:	00000000.00000002.816967020.00000000039DF000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	39DF000
Size:	4096

Details

Name:	00000003.00000003.470191277.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000005.00000002.815775469.0000000002981000.00000020.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	2981000
Size:	45056

Details

Name:	00000000.00000003.495064241.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000016.00000002.674382043.00007FF531BA0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531BA0000
Size:	20480

Details

Name:	00000013.00000002.577003333.0000008B1147F000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8B1147F000
Size:	4096

Details

Name:	00000016.00000003.660695465.000002455BBA4000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BBA4000
Size:	4096

Details

Name:	0000000A.00000002.489359396.00007FF5BAADB000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BAADB000
Size:	12288

Details

Name:	00000005.00000002.815591943.00000000025F0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25F0000
Size:	8192

Details

Name:	00000003.00000003.469516373.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000000.00000003.697315980.0000000000A90000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000011.00000002.814752685.0000009136F7B000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	9136F7B000
Size:	20480

Details

Name:	00000013.00000002.577192031.000001B0F1E7E000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B0F1E7E000
Size:	8192

Details

Name:	00000003.00000003.461841626.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000005.00000003.720657386.0000000004DF9000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4DF9000
Size:	471040

Details

Name:	00000000.00000002.816305866.0000000001000000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1000000
Size:	364544

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	00000004.00000002.814771072.000000000201D000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	201D000
Size:	12288

Details

Name:	00000011.00000003.562395906.000002008B2CE000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2008B2CE000
Size:	4096

Details

Name:	00000003.00000002.816626034.0000000002E97000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E97000
Size:	12288

Details

Name:	00000005.00000002.816195781.0000000002A45000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2A45000
Size:	172032

Details

Name:	00000004.00000002.816209121.0000000002A10000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A10000
Size:	8192

Details

Name:	00000003.00000003.737800082.0000000005441000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5441000
Size:	724992

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.816195379.0000000000C67000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	C67000
Size:	4096

Details

Name:	00000003.00000002.817089423.0000000002FC6000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2FC6000
Size:	16384

Details

Name:	00000000.00000003.743329431.0000000000808000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	808000
Size:	32768

Details

Name:	00000004.00000003.474349429.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000004.00000003.485908670.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000016.00000003.659330082.000002455C06A000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455C06A000
Size:	425984

Details

Name:	00000017.00000002.660910111.0000022B32F00000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	22B32F00000
Size:	69632

Details

Name:	00000005.00000002.817831168.000000000528E000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	528E000
Size:	8192

Details

Name:	00000000.00000003.697309039.0000000000A90000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	A90000
Size:	4096

Details

Name:	00000000.00000003.494229202.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000005.00000002.818635399.000000007F480000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F480000
Size:	20480

Details

Name:	00000000.00000003.474593017.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000016.00000003.658920381.000002455BBAC000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BBAC000
Size:	106496

Details

Name:	00000004.00000002.816104160.00000000029A7000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	29A7000
Size:	12288

Details

Name:	00000014.00000002.611465799.0000018EB6580000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	18EB6580000
Size:	4096

Details

Name:	00000016.00000002.672806994.000002455B110000.00000004.00000020.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2455B110000
Size:	12288

Details

Name:	00000005.00000002.815415459.000000000223C000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	223C000
Size:	16384

Details

Name:	00000013.00000002.576956693.0000008B10CFB000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8B10CFB000
Size:	20480

Details

Name:	00000000.00000003.457531443.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000011.00000002.815396269.000002008B450000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2008B450000
Size:	4096

Details

Name:	00000016.00000002.672795229.000002455B0E0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2455B0E0000
Size:	12288

Details

Name:	00000016.00000002.673525110.000002455BB63000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB63000
Size:	8192

Details

Name:	00000000.00000003.473709759.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000005.00000002.817146321.0000000004800000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	4800000
Size:	733184

Details

Name:	00000016.00000002.673630560.000002455C000000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2455C000000
Size:	8192

Details

Name:	00000000.00000003.434592344.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	0000000A.00000002.484966230.00000195BAB80000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	195BAB80000
Size:	4096

Details

Name:	00000000.00000003.744431939.000000000081E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	81E000
Size:	4096

Details

Name:	00000003.00000002.816792954.0000000002F86000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2F86000
Size:	8192

Details

Name:	00000000.00000003.494059031.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000004.00000002.818145495.00000000053CA000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	53CA000
Size:	24576

Details

Name:	00000004.00000003.462142234.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000013.00000003.576608002.000001B0F1E7E000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1B0F1E7E000
Size:	8192

Details

Name:	00000003.00000003.451734812.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000005.00000003.809674581.0000000002A62000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2A62000
Size:	16384

Details

Name:	00000013.00000000.565333931.00007DF542BF2000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF542BF2000
Size:	4096

Details

Name:	00000003.00000003.465747897.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000000.00000002.815877096.0000000000A7F000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	A7F000
Size:	4096

Details

Name:	00000016.00000002.672855312.000002455B22A000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2455B22A000
Size:	69632

Details

Name:	00000000.00000002.817207811.000000007FEA0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FEA0000
Size:	20480

Details

Name:	00000012.00000002.564748860.00007FF53D2DD000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53D2DD000
Size:	4096

Details

Name:	00000016.00000003.659617555.000002455BB86000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB86000
Size:	16384

Details

Name:	00000000.00000002.815375086.00000000007AF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7AF000
Size:	98304

Details

Name:	00000000.00000002.815999792.0000000000BA0000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	BA0000
Size:	81920

Details

Name:	00000011.00000002.816082587.00007FF54FFB9000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54FFB9000
Size:	12288

Details

Name:	00000013.00000002.577222308.000001B0F1F08000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B0F1F08000
Size:	24576

Details

Name:	00000003.00000002.814912214.00000000007C0000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7C0000
Size:	8192

Details

Name:	0000000A.00000000.471634740.00007DF5C8800000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5C8800000
Size:	4096

Details

Name:	00000003.00000002.814927501.00000000007E0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7E0000
Size:	16384

Details

Name:	00000000.00000003.474203496.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000011.00000002.816443792.00007FF5506AD000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5506AD000
Size:	8192

Details

Name:	00000000.00000003.493700477.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000016.00000003.655442315.000002455BBC8000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BBC8000
Size:	147456

Details

Name:	00000003.00000002.817476417.0000000003290000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3290000
Size:	364544

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	00000004.00000002.815838263.00000000028E0000.00000040.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page execute and read and write
Base address:	28E0000
Size:	81920

Details

Name:	00000013.00000002.577602818.00007FF534F69000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF534F69000
Size:	12288

Details

Name:	00000013.00000002.577424837.00007FF534D5D000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF534D5D000
Size:	4096

Details

Name:	00000004.00000003.491858782.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000011.00000002.814771806.000000913737D000.00000004.00000010.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	913737D000
Size:	12288

Details

Name:	00000004.00000002.815746967.00000000025D0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25D0000
Size:	16384

Details

Name:	00000016.00000002.673875067.00007FF5318AB000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5318AB000
Size:	8192

Details

Name:	00000016.00000002.674084881.00007FF531A83000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531A83000
Size:	16384

Details

Name:	00000014.00000002.611856562.00007FF5A69E7000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A69E7000
Size:	49152

Details

Name:	0000000A.00000002.485378192.00007FF5BA97B000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BA97B000
Size:	8192

Details

Name:	00000004.00000003.479995826.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000000.00000003.419779327.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000000.00000003.451570795.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000005.00000002.815401887.0000000002236000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2236000
Size:	12288

Details

Name:	00000005.00000002.815298315.00000000021C0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	21C0000
Size:	73728

Details

Name:	00000013.00000002.577558577.00007FF534EC7000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF534EC7000
Size:	49152

Details

Name:	00000000.00000003.425992236.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000011.00000002.815383055.000002008B430000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2008B430000
Size:	8192

Details

Name:	00000003.00000002.816687602.0000000002F4F000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2F4F000
Size:	8192

Details

Name:	00000004.00000003.451275996.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000012.00000002.564615115.00007FF53CB12000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53CB12000
Size:	4096

Details

Name:	00000003.00000003.452948205.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000016.00000003.654060246.000002455BB71000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB71000
Size:	12288

Details

Name:	00000004.00000002.815821836.00000000028D0000.00000040.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page execute and read and write
Base address:	28D0000
Size:	4096

Details

Name:	00000003.00000002.816529098.0000000002E85000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E85000
Size:	12288

Details

Name:	00000005.00000003.809658668.0000000002AB2000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AB2000
Size:	106496

Details

Name:	00000014.00000002.611847278.00007FF5A69DE000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A69DE000
Size:	28672

Details

Name:	00000016.00000002.673706248.00007DF53F820000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF53F820000
Size:	12288

Details

Name:	00000000.00000003.473872547.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000005.00000002.818058965.0000000005650000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5650000
Size:	294912

Details

Name:	00000016.00000003.654817529.000002455BB61000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB61000
Size:	77824

Details

Name:	00000005.00000002.815906939.00000000029E0000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	29E0000
Size:	32768

Details

Name:	00000016.00000003.657656780.000002455BBB3000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BBB3000
Size:	61440

Details

Name:	00000000.00000003.444077493.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000014.00000002.611788668.00007FF5A69BF000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A69BF000
Size:	12288

Details

Name:	00000000.00000002.816527331.000000000244E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	244E000
Size:	8192

Details

Name:	00000005.00000003.763687024.0000000005651000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5651000
Size:	290816

Details

Name:	00000000.00000003.417044077.0000000000C10000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	C10000
Size:	4096

Details

Name:	00000004.00000002.815459359.0000000002246000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2246000
Size:	12288

Details

Name:	00000004.00000003.458409520.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000004.00000002.815511697.0000000002258000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2258000
Size:	16384

Details

Name:	00000004.00000002.815931944.0000000002930000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2930000
Size:	12288

Details

Name:	00000014.00000002.611420023.0000018EB6102000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18EB6102000
Size:	16384

Details

Name:	00000004.00000003.467367544.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000016.00000002.674209234.00007FF531AF3000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531AF3000
Size:	24576

Details

Name:	00000004.00000003.716789660.0000000002BB4000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2BB4000
Size:	180224

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000003.00000002.816486019.0000000002E76000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E76000
Size:	20480

Details

Name:	00000000.00000003.789644701.0000000003D61000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	3D61000
Size:	471040

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000002.815074881.000000000213E000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	213E000
Size:	8192

Details

Name:	00000000.00000003.654244569.0000000002F4B000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	2F4B000
Size:	4096

Details

Name:	00000011.00000002.816252709.00007FF550636000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF550636000
Size:	4096

Details

Name:	00000000.00000002.815119317.0000000000720000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	720000
Size:	36864

Details

Name:	00000012.00000002.564633923.00007FF53CEB7000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53CEB7000
Size:	32768

Details

Name:	00000004.00000002.815027265.000000000213F000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	213F000
Size:	8192

Details

Name:	00000000.00000003.436163815.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000011.00000002.814789957.00000091373FA000.00000004.00000010.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	91373FA000
Size:	24576

Details

Name:	00000003.00000002.816243155.000000000108D000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	108D000
Size:	12288

Details

Name:	00000003.00000002.817626928.0000000004790000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4790000
Size:	4096

Details

Name:	00000004.00000003.492987042.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000011.00000002.815123010.000002008B230000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2008B230000
Size:	4096

Details

Name:	0000000A.00000002.483448883.00000050ACA7B000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	50ACA7B000
Size:	20480

Details

Name:	00000003.00000003.462452881.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000004.00000002.818260805.0000000005650000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5650000
Size:	479232

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000013.00000002.577626284.00007FF534F8A000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF534F8A000
Size:	4096

Details

Name:	0000000A.00000002.483649061.00000195BA600000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	195BA600000
Size:	4096

Details

Name:	00000003.00000002.816806065.0000000002F8A000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2F8A000
Size:	12288

Details

Name:	00000011.00000002.815483471.000002008B5A9000.00000004.00000040.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2008B5A9000
Size:	4096

Details

Name:	00000000.00000002.815851366.0000000000A7D000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	A7D000
Size:	8192

Details

Name:	00000011.00000003.547991477.000002008B2B1000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2008B2B1000
Size:	4096

Details

Name:	00000004.00000003.477582801.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000000.00000002.815959338.0000000000B10000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	B10000
Size:	4096

Details

Name:	00000011.00000002.815544215.000002008BB40000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2008BB40000
Size:	4096

Details

Name:	00000005.00000003.766041656.0000000004C7C000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	4C7C000
Size:	471040

Details

Name:	00000000.00000003.454540538.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000004.00000002.814878307.0000000002066000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2066000
Size:	20480

Details

Name:	00000003.00000002.815174019.0000000000930000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	930000
Size:	8192

Details

Name:	00000000.00000003.462812988.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000005.00000003.763719800.00000000056D5000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	56D5000
Size:	282624

Details

Name:	00000017.00000000.648547124.00007DF512350000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF512350000
Size:	4096

Details

Name:	00000011.00000000.547490758.00007DF55E3B0000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55E3B0000
Size:	12288

Details

Name:	00000005.00000002.815276315.00000000021AB000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	21AB000
Size:	12288

Details

Name:	00000017.00000002.661182238.00007FF504617000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF504617000
Size:	16384

Details

Name:	00000004.00000002.816228684.0000000002A5D000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2A5D000
Size:	12288

Details

Name:	00000014.00000002.611239888.0000018EB5FA0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	18EB5FA0000
Size:	16384

Details

Name:	00000004.00000002.817368124.00000000043D0000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	43D0000
Size:	4096

Details

Name:	00000011.00000002.815775875.00007DF55E392000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55E392000
Size:	4096

Details

Name:	00000014.00000002.611608193.00007FF5A61EC000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A61EC000
Size:	16384

Details

Name:	00000005.00000002.817120110.00000000047A8000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	47A8000
Size:	4096

Details

Name:	00000000.00000003.429301245.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000014.00000002.611404077.0000018EB6090000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18EB6090000
Size:	4096

Details

Name:	00000000.00000003.456312744.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000003.00000002.816700384.0000000002F53000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2F53000
Size:	8192

Details

Name:	00000003.00000002.817980026.000000007EFE0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7EFE0000
Size:	20480

Details

Name:	00000016.00000003.655341390.000002455BBA4000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BBA4000
Size:	147456

Details

Name:	00000000.00000003.494561963.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000000.00000003.743366662.00000000007C8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7C8000
Size:	262144

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000017.00000002.660847026.0000022B32B16000.00000004.00000020.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	22B32B16000
Size:	65536

Details

Name:	00000004.00000003.454210592.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000016.00000002.674165171.00007FF531ACE000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531ACE000
Size:	28672

Details

Name:	00000000.00000003.433544729.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000004.00000002.814789587.0000000002026000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2026000
Size:	20480

Details

Name:	00000000.00000003.475210723.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000004.00000003.487887180.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000003.00000003.467200377.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000014.00000002.611530610.00007DF5B4712000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5B4712000
Size:	4096

Details

Name:	00000011.00000002.814933408.000002008B1F0000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2008B1F0000
Size:	4096

Details

Name:	00000004.00000003.495568548.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000005.00000002.818674041.000000007F582000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F582000
Size:	4096

Details

Name:	00000016.00000003.662006808.000002455BB82000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB82000
Size:	36864

Details

Name:	00000004.00000002.817844218.00000000049C0000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	49C0000
Size:	4096

Details

Name:	00000016.00000002.672802342.000002455B0F0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2455B0F0000
Size:	4096

Details

Name:	0000000A.00000002.483569685.00000195BA420000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	195BA420000
Size:	102400

Details

Name:	00000012.00000002.564627722.00007FF53CEB1000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53CEB1000
Size:	20480

Details

Name:	00000000.00000003.428277988.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000017.00000002.661238003.00007FF5046C2000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5046C2000
Size:	12288

Details

Name:	00000004.00000003.469342978.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000003.00000003.466928952.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000000.00000003.427759744.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000000.00000003.742451048.00000000007AB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7AB000
Size:	114688

Details

Name:	0000000A.00000002.485124722.00007DF5C8802000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5C8802000
Size:	4096

Details

Name:	00000012.00000002.564336758.0000024AD11E0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24AD11E0000
Size:	12288

Details

Name:	00000016.00000003.659546912.000002455BB0D000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB0D000
Size:	40960

Details

Name:	0000000A.00000002.485317990.00007FF5BA815000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BA815000
Size:	8192

Details

Name:	00000004.00000003.456601278.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000011.00000002.816596826.00007FF55072A000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF55072A000
Size:	4096

Details

Name:	00000005.00000003.716778211.0000000004350000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	4350000
Size:	4096

Details

Name:	00000000.00000003.466573227.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000004.00000002.814912250.0000000002075000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2075000
Size:	12288

Details

Name:	0000000A.00000000.471617140.00007DF5C87F0000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5C87F0000
Size:	4096

Details

Name:	00000012.00000002.564926983.00007FF53D3BA000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53D3BA000
Size:	12288

Details

Name:	00000016.00000002.674343806.00007FF531B8A000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531B8A000
Size:	12288

Details

Name:	00000000.00000003.464021838.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000016.00000003.657191208.000002455BB80000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB80000
Size:	16384

Details

Name:	00000003.00000003.737888287.00000000050EB000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	50EB000
Size:	8192

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000002.814826398.000000000204B000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	204B000
Size:	8192

Details

Name:	00000004.00000003.493858296.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000016.00000002.672839922.000002455B213000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2455B213000
Size:	90112

Details

Name:	00000003.00000002.816474817.0000000002E5F000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E5F000
Size:	4096

Details

Name:	00000000.00000000.288304962.0000000000330000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	330000
Size:	102400

Details

Name:	00000013.00000002.577588442.00007FF534F0A000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF534F0A000
Size:	8192

Details

Name:	00000017.00000002.660770259.0000022B32980000.00000004.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	22B32980000
Size:	4096

Details

Name:	00000011.00000002.815080894.000002008B220000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2008B220000
Size:	12288

Details

Name:	00000014.00000002.611949963.00007FF5A6AA1000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A6AA1000
Size:	32768

Details

Name:	00000000.00000002.817275474.000000007FFB0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000005.00000002.815215385.000000000218B000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	218B000
Size:	12288

Details

Name:	00000004.00000000.290403646.000000007F4E2000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F4E2000
Size:	4096

Details

Name:	00000003.00000003.736703593.0000000000A96000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A96000
Size:	155648

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000016.00000002.673073731.000002455B302000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2455B302000
Size:	12288

Details

Name:	00000000.00000003.463242570.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000005.00000002.815157690.000000000216A000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	216A000
Size:	12288

Details

Name:	00000005.00000002.815454326.0000000002248000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2248000
Size:	16384

Details

Name:	00000004.00000002.815402177.0000000002231000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2231000
Size:	32768

Details

Name:	00000003.00000003.691139662.0000000000A84000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A84000
Size:	65536

Details

Name:	00000016.00000000.647456175.00007DF53F812000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF53F812000
Size:	4096

Details

Name:	00000003.00000002.815987397.0000000000AF0000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	AF0000
Size:	69632

Details

Name:	00000005.00000003.493423109.0000000002950000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2950000
Size:	4096

Details

Name:	00000004.00000002.818852057.000000007F4D0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F4D0000
Size:	4096

Details

Name:	00000014.00000002.611385382.0000018EB6071000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	18EB6071000
Size:	49152

Details

Name:	00000005.00000002.815337223.0000000002214000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2214000
Size:	8192

Details

Name:	00000004.00000002.817794043.000000000491C000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	491C000
Size:	16384

Details

Name:	00000004.00000002.817895643.000000000518D000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	518D000
Size:	12288

Details

Name:	00000005.00000002.816985350.00000000043B0000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	43B0000
Size:	4096

Details

Name:	00000011.00000002.815142000.000002008B250000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2008B250000
Size:	16384

Details

Name:	00000012.00000003.563959178.0000024AD144E000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	24AD144E000
Size:	20480

Details

Name:	00000004.00000003.474869110.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000004.00000003.716769869.0000000002BE1000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2BE1000
Size:	4096

Details

Name:	00000000.00000003.437581558.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000017.00000002.660888365.0000022B32CF0000.00000004.00000040.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	22B32CF0000
Size:	12288

Details

Name:	00000012.00000000.550824527.0000024AD11C0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	24AD11C0000
Size:	102400

Details

Name:	00000003.00000003.458225665.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000004.00000002.815719409.0000000002560000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2560000
Size:	4096

Details

Name:	0000000A.00000002.488020685.00007FF5BAAC7000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BAAC7000
Size:	49152

Details

Name:	00000000.00000003.431580938.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000004.00000003.716854166.0000000002BDF000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2BDF000
Size:	4096

Details

Name:	00000004.00000003.457828289.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000003.00000000.289994038.000000007F0F2000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F0F2000
Size:	4096

Details

Name:	00000012.00000000.550982960.00007FF53D3D1000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53D3D1000
Size:	16384

Details

Name:	00000003.00000002.816389455.0000000002E2D000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2E2D000
Size:	12288

Details

Name:	00000016.00000002.674009287.00007FF5319F5000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5319F5000
Size:	20480

Details

Name:	00000012.00000002.564368595.0000024AD12F0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24AD12F0000
Size:	16384

Details

Name:	00000000.00000002.815168598.000000000072B000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	72B000
Size:	389120

Details

Name:	00000000.00000003.742444586.00000000007A4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7A4000
Size:	16384

Details

Name:	00000013.00000002.577552328.00007FF534EBE000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF534EBE000
Size:	28672

Details

Name:	00000005.00000003.719498433.0000000002A6B000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2A6B000
Size:	12288

Details

Name:	00000000.00000002.815822717.0000000000A7C000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	A7C000
Size:	4096

Details

Name:	00000003.00000002.815195009.000000000097D000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	97D000
Size:	12288

Details

Name:	00000014.00000002.611218244.0000018EB5EA0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	18EB5EA0000
Size:	4096

Details

Name:	00000000.00000003.429455256.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000016.00000002.673750211.00007FF531507000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531507000
Size:	12288

Details

Name:	0000000A.00000002.489607018.00007FF5BAB07000.00000002.00020000.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5BAB07000
Size:	8192

Details

Name:	00000004.00000003.473903296.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000016.00000002.672774845.000002455B0B0000.00000004.00000040.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2455B0B0000
Size:	4096

Details

Name:	00000005.00000002.815626935.00000000028D5000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	28D5000
Size:	20480

Details

Name:	00000017.00000002.661172973.00007FF504613000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF504613000
Size:	12288

Details

Name:	00000013.00000002.577260248.000001B0F2200000.00000002.00020000.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0F2200000
Size:	12288

Details

Name:	00000004.00000002.815342407.000000000221B000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	221B000
Size:	12288

Details

Name:	00000017.00000003.660468627.0000022B32B26000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22B32B26000
Size:	40960

Details

Name:	00000005.00000003.809454330.0000000005651000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5651000
Size:	290816

Details

Name:	00000000.00000003.438518537.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000000.00000003.698424067.00000000007A4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7A4000
Size:	36864

Details

Name:	00000011.00000002.815421159.000002008B580000.00000004.00000001.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2008B580000
Size:	4096

Details

Name:	00000016.00000003.657669697.000002455BBB3000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BBB3000
Size:	61440

Details

Name:	00000004.00000003.716776787.0000000002BA3000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2BA3000
Size:	65536

Details

Name:	00000012.00000002.564662474.00007FF53D19D000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53D19D000
Size:	4096

Details

Name:	00000003.00000003.460068351.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000000.00000002.815694710.0000000000A70000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	A70000
Size:	4096

Details

Name:	00000005.00000002.815747404.0000000002970000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2970000
Size:	8192

Details

Name:	00000000.00000003.742466663.00000000007C8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7C8000
Size:	262144

Details

Name:	00000000.00000002.815442827.00000000007C8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7C8000
Size:	176128

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.476446852.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000003.00000003.735743878.0000000000AC2000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	AC2000
Size:	118784

Signature Hits	Behavior Group	Mitre Attack
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking

Details

Name:	00000016.00000002.673642018.00007DF43D6D0000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF43D6D0000
Size:	20480

Details

Name:	00000014.00000003.610826420.0000018EB604B000.00000004.00000001.sdmp
TargetID:	20
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	18EB604B000
Size:	16384

Details

Name:	00000004.00000003.472660748.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000000.00000002.816781352.0000000002F48000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2F48000
Size:	12288

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000002.817445727.0000000004820000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	4820000
Size:	733184

Details

Name:	00000014.00000002.611921071.00007FF5A6A82000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A6A82000
Size:	12288

Details

Name:	00000012.00000000.550888149.00007DF54B032000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF54B032000
Size:	4096

Details

Name:	00000005.00000003.764670500.0000000002AAC000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2AAC000
Size:	12288

Details

Name:	00000017.00000003.660369673.0000022B32B11000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22B32B11000
Size:	126976

Details

Name:	00000003.00000002.817276397.000000000302F000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	302F000
Size:	16384

Details

Name:	00000016.00000003.660801955.000002455BBA4000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BBA4000
Size:	200704

Details

Name:	00000000.00000002.814901823.0000000000390000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	390000
Size:	16384

Details

Name:	00000016.00000002.673022992.000002455B2E7000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2455B2E7000
Size:	57344

Details

Name:	00000014.00000002.611620155.00007FF5A61F2000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A61F2000
Size:	4096

Details

Name:	00000003.00000002.816277795.000000000110D000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	110D000
Size:	12288

Details

Name:	00000000.00000002.816853928.000000000349F000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	349F000
Size:	4096

Details

Name:	00000016.00000002.674263733.00007FF531B1D000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531B1D000
Size:	12288

Details

Name:	00000000.00000000.288335907.000000007FFB2000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000004.00000003.475505731.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000000.00000003.490276189.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000003.00000002.817750791.0000000004B88000.00000004.00000040.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4B88000
Size:	4096

Details

Name:	00000017.00000002.660764171.0000008EB897F000.00000004.00000010.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8EB897F000
Size:	4096

Details

Name:	00000003.00000002.817445539.0000000003062000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3062000
Size:	8192

Details

Name:	00000004.00000002.817992046.000000000524A000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	524A000
Size:	24576

Details

Name:	00000012.00000002.564486451.0000024AD1500000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	24AD1500000
Size:	4096

Details

Name:	00000000.00000003.473432635.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000014.00000002.611046101.0000003F712FF000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3F712FF000
Size:	4096

Details

Name:	00000011.00000002.815443441.000002008B5A0000.00000004.00000040.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2008B5A0000
Size:	12288

Details

Name:	00000016.00000002.674059551.00007FF531A51000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531A51000
Size:	24576

Details

Name:	00000004.00000003.483080070.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000014.00000002.611677442.00007FF5A6836000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A6836000
Size:	16384

Details

Name:	00000012.00000002.564906425.00007FF53D3A2000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53D3A2000
Size:	12288

Details

Name:	00000004.00000002.814931936.0000000002079000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2079000
Size:	8192

Details

Name:	00000014.00000002.611104735.0000003F716FF000.00000004.00000010.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3F716FF000
Size:	4096

Details

Name:	00000016.00000003.672455302.000002455B24F000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455B24F000
Size:	16384

Details

Name:	00000004.00000003.492463346.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000000.00000002.817057245.0000000003CE0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3CE0000
Size:	4096

Details

Name:	00000017.00000002.660816393.0000022B32AB0000.00000004.00000001.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22B32AB0000
Size:	4096

Details

Name:	00000005.00000002.814857304.0000000002037000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2037000
Size:	4096

Details

Name:	00000004.00000002.814894970.000000000206C000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	206C000
Size:	12288

Details

Name:	00000005.00000002.818707361.000000007F5A0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F5A0000
Size:	12288

Details

Name:	00000016.00000002.674002884.00007FF5319B7000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5319B7000
Size:	4096

Details

Name:	00000014.00000002.611698029.00007FF5A687D000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A687D000
Size:	4096

Details

Name:	00000000.00000003.450840569.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000014.00000002.611818252.00007FF5A69D0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A69D0000
Size:	4096

Details

Name:	00000004.00000003.763071001.0000000002C00000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C00000
Size:	4096

Details

Name:	00000000.00000003.790007069.00000000007C8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7C8000
Size:	180224

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000013.00000002.577216434.000001B0F1F02000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B0F1F02000
Size:	12288

Details

Name:	00000011.00000002.815924901.00007FF53C641000.00000002.00020000.sdmp
TargetID:	17
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF53C641000
Size:	8192

Details

Name:	00000000.00000003.790339111.000000000081B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	81B000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000002.816295025.0000000000FF0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF0000
Size:	4096

Details

Name:	00000013.00000002.576986805.0000008B1127E000.00000004.00000010.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8B1127E000
Size:	8192

Details

Name:	00000013.00000002.577169483.000001B0F1E5C000.00000004.00000001.sdmp
TargetID:	19
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1B0F1E5C000
Size:	12288

Details

Name:	00000000.00000003.493857969.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000004.00000002.815986040.0000000002971000.00000020.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute read
Base address:	2971000
Size:	45056

Details

Name:	00000016.00000003.659112172.000002455BB8A000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BB8A000
Size:	425984

Details

Name:	00000004.00000002.815224075.000000000219F000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	219F000
Size:	24576

Details

Name:	00000016.00000002.672821476.000002455B200000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2455B200000
Size:	73728

Details

Name:	00000005.00000003.764616759.0000000002A67000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2A67000
Size:	98304

Details

Name:	00000005.00000002.817674167.0000000004960000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4960000
Size:	4096

Details

Name:	00000000.00000003.494903155.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000016.00000003.655307750.000002455BBA2000.00000004.00000001.sdmp
TargetID:	22
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2455BBA2000
Size:	4096

Details

Name:	00000000.00000003.433067749.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000016.00000002.673726999.00007FF5312DC000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5312DC000
Size:	16384

Details

Name:	00000003.00000003.467369447.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000014.00000002.611717080.00007FF5A68BF000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5A68BF000
Size:	8192

Details

Name:	00000005.00000003.495533526.0000000002950000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2950000
Size:	4096

Details

Name:	00000005.00000003.809629273.0000000002A80000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2A80000
Size:	172032

Details

Name:	00000016.00000002.673786098.00007FF531707000.00000002.00020000.sdmp
TargetID:	22
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF531707000
Size:	4096

Details

Name:	00000004.00000003.763979283.0000000005651000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	5651000
Size:	475136

Details

Name:	00000005.00000003.810933178.00000000057F6000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	57F6000
Size:	475136

Details

Name:	00000004.00000002.817429230.00000000047C8000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	47C8000
Size:	4096

Details

Name:	00000003.00000003.451143848.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	00000000.00000003.435759945.0000000000820000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	820000
Size:	4096

Details

Name:	00000003.00000002.817411972.0000000003056000.00000002.00020000.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3056000
Size:	12288

Details

Name:	00000012.00000002.564137930.000000D05EA7B000.00000004.00000010.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	D05EA7B000
Size:	20480

Details

Name:	00000004.00000003.462746638.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000014.00000002.611486279.00007DF4B25E0000.00000002.00020000.sdmp
TargetID:	20
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4B25E0000
Size:	20480

Details

Name:	00000003.00000002.814863489.000000000065C000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	65C000
Size:	16384

Details

Name:	00000017.00000002.660781845.0000022B329A0000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	22B329A0000
Size:	102400

Details

Name:	00000003.00000003.453539098.0000000000840000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	840000
Size:	4096

Details

Name:	0000000A.00000002.483644170.00000195BA570000.00000004.00000001.sdmp
TargetID:	10
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	195BA570000
Size:	4096

Details

Name:	00000003.00000002.817591077.00000000046DE000.00000004.00000010.sdmp
TargetID:	3
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	46DE000
Size:	8192

Details

Name:	00000017.00000000.648632391.00007FF5046F1000.00000002.00020000.sdmp
TargetID:	23
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5046F1000
Size:	16384

Details

Name:	00000004.00000002.816596767.0000000002B77000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2B77000
Size:	53248

Details

Name:	00000000.00000002.816930633.000000000389A000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	389A000
Size:	24576

Details

Name:	00000005.00000002.817605418.0000000004910000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	4910000
Size:	4096

Details

Name:	00000003.00000003.689199955.0000000000A6E000.00000004.00000001.sdmp
TargetID:	3
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A6E000
Size:	32768

Details

Name:	00000004.00000003.475153896.0000000002940000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	2940000
Size:	4096

Details

Name:	00000004.00000002.818816182.000000007F3D0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F3D0000
Size:	20480

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

IOC Report

Processes

URLs

Domains

IPs

Memdumps