Automated Malware Analysis IOC Report for

Details

Name:	00000008.00000000.702441264.0000000000400000.00000040.00000001.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	331776

Signature Hits	Behavior Group	Mitre Attack
Yara detected WebBrowserPassView password recovery tool	Stealing of Sensitive Information
Found strings which match to known social media urls	Networking
SQL strings found in memory and binary data	System Summary
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000005.00000002.933455184.0000000007E95000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7E95000
Size:	745472

Signature Hits	Behavior Group	Mitre Attack
Yara detected MailPassView	Stealing of Sensitive Information
Yara detected WebBrowserPassView password recovery tool	Stealing of Sensitive Information
Found strings which match to known social media urls	Networking
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000000.00000002.733884470.00000000047C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	47C0000
Size:	3969024

Signature Hits	Behavior Group	Mitre Attack
Detected HawkEye Rat	Remote Access Functionality	Remote Access Software
Malicious sample detected (through community Yara rule)	System Summary
Yara detected HawkEye Keylogger	Key, Mouse, Clipboard, Microphone and Screen Capturing, Stealing of Sensitive Information, Remote Access Functionality
Sample file is different than original file name gathered from version info	System Summary
Yara signature match	System Summary
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000000.689728198.0000000000402000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	402000
Size:	565248

Signature Hits	Behavior Group	Mitre Attack
Detected HawkEye Rat	Remote Access Functionality	Remote Access Software
Malicious sample detected (through community Yara rule)	System Summary
Yara detected HawkEye Keylogger	Key, Mouse, Clipboard, Microphone and Screen Capturing, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000000.702281950.00000000047C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	47C0000
Size:	3969024

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected HawkEye Keylogger	Key, Mouse, Clipboard, Microphone and Screen Capturing, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000000.00000000.703620754.0000000005AF1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	5AF1000
Size:	1695744

Signature Hits	Behavior Group	Mitre Attack
Detected HawkEye Rat	Remote Access Functionality	Remote Access Software
Malicious sample detected (through community Yara rule)	System Summary
Yara detected HawkEye Keylogger	Key, Mouse, Clipboard, Microphone and Screen Capturing, Stealing of Sensitive Information, Remote Access Functionality
Sample file is different than original file name gathered from version info	System Summary
Yara signature match	System Summary
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000002.930832405.0000000000402000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	402000
Size:	569344

Signature Hits	Behavior Group	Mitre Attack
Detected HawkEye Rat	Remote Access Functionality	Remote Access Software
Malicious sample detected (through community Yara rule)	System Summary
Yara detected HawkEye Keylogger	Key, Mouse, Clipboard, Microphone and Screen Capturing, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000002.933674801.0000000009480000.00000004.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	9480000
Size:	466944

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected MailPassView	Stealing of Sensitive Information
Yara detected WebBrowserPassView password recovery tool	Stealing of Sensitive Information
Yara signature match	System Summary
Found strings which match to known social media urls	Networking
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000012.00000000.843177172.0000000000400000.00000040.00000001.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	98304

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected MailPassView	Stealing of Sensitive Information
Yara signature match	System Summary
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000005.00000000.690486770.0000000000402000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	402000
Size:	569344

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected HawkEye Keylogger	Key, Mouse, Clipboard, Microphone and Screen Capturing, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000012.00000000.842827239.0000000000400000.00000040.00000001.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	98304

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected MailPassView	Stealing of Sensitive Information
Yara signature match	System Summary

Details

Name:	00000005.00000002.933041044.0000000006FAE000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6FAE000
Size:	114688

Signature Hits	Behavior Group	Mitre Attack
Yara detected MailPassView	Stealing of Sensitive Information
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000008.00000000.702788844.0000000000400000.00000040.00000001.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	339968

Signature Hits	Behavior Group	Mitre Attack
Yara detected WebBrowserPassView password recovery tool	Stealing of Sensitive Information
Found strings which match to known social media urls	Networking
SQL strings found in memory and binary data	System Summary
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000008.00000000.704117458.0000000000400000.00000040.00000001.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	339968

Signature Hits	Behavior Group	Mitre Attack
Yara detected WebBrowserPassView password recovery tool	Stealing of Sensitive Information

Details

Name:	00000005.00000003.692797770.0000000008705000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	8705000
Size:	466944

Signature Hits	Behavior Group	Mitre Attack
Yara detected MailPassView	Stealing of Sensitive Information
Yara detected WebBrowserPassView password recovery tool	Stealing of Sensitive Information
Found strings which match to known social media urls	Networking
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000012.00000000.842483097.0000000000400000.00000040.00000001.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	94208

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected MailPassView	Stealing of Sensitive Information
Yara signature match	System Summary
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000005.00000000.690115034.0000000000402000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	402000
Size:	569344

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected HawkEye Keylogger	Key, Mouse, Clipboard, Microphone and Screen Capturing, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000005.00000002.932528508.0000000006EA1000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6EA1000
Size:	577536

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected HawkEye Keylogger	Key, Mouse, Clipboard, Microphone and Screen Capturing, Stealing of Sensitive Information, Remote Access Functionality
Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)	Malware Analysis System Evasion	Security Software Discovery
Yara detected WebBrowserPassView password recovery tool	Stealing of Sensitive Information
Yara signature match	System Summary
Found strings which match to known social media urls	Networking
URLs found in memory or binary data	Networking
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000008.00000002.715632355.0000000000400000.00000040.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	372736

Signature Hits	Behavior Group	Mitre Attack
Yara detected WebBrowserPassView password recovery tool	Stealing of Sensitive Information
Found strings which match to known social media urls	Networking
SQL strings found in memory and binary data	System Summary
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000012.00000000.843631196.0000000000400000.00000040.00000001.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	98304

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected MailPassView	Stealing of Sensitive Information
Yara signature match	System Summary

Details

Name:	00000000.00000002.738563781.0000000005AF1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5AF1000
Size:	1695744

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected HawkEye Keylogger	Key, Mouse, Clipboard, Microphone and Screen Capturing, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000000.00000000.711229338.00000000047C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	47C0000
Size:	3969024

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected HawkEye Keylogger	Key, Mouse, Clipboard, Microphone and Screen Capturing, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000000.00000000.712572110.0000000005AF1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	5AF1000
Size:	1695744

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected HawkEye Keylogger	Key, Mouse, Clipboard, Microphone and Screen Capturing, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000005.00000000.691070548.0000000000402000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	402000
Size:	569344

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected HawkEye Keylogger	Key, Mouse, Clipboard, Microphone and Screen Capturing, Stealing of Sensitive Information, Remote Access Functionality
Yara signature match	System Summary

Details

Name:	00000008.00000000.703279347.0000000000400000.00000040.00000001.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	339968

Signature Hits	Behavior Group	Mitre Attack
Yara detected WebBrowserPassView password recovery tool	Stealing of Sensitive Information

Details

Name:	00000012.00000002.844335097.0000000000400000.00000040.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	98304

Signature Hits	Behavior Group	Mitre Attack
Malicious sample detected (through community Yara rule)	System Summary
Yara detected MailPassView	Stealing of Sensitive Information
Yara signature match	System Summary
URLs found in memory or binary data	Networking
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	0000000C.00000002.743927862.00007FF5920BF000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5920BF000
Size:	16384

Details

Name:	0000000B.00000000.718183308.0000000002AE0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AE0000
Size:	8192

Details

Name:	0000000D.00000002.778411316.00007FF4EB2CF000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4EB2CF000
Size:	8192

Details

Name:	0000000F.00000002.814053779.000002C32ADC0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C32ADC0000
Size:	8192

Details

Name:	00000005.00000002.931231880.0000000002981000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2981000
Size:	8192

Details

Name:	00000000.00000000.708689156.0000000000F02000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	F02000
Size:	4096

Details

Name:	00000000.00000000.696292201.0000000000BCB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	BCB000
Size:	4096

Details

Name:	0000000F.00000003.798880914.000002C32B785000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B785000
Size:	4096

Details

Name:	00000008.00000003.714103694.0000000000605000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	605000
Size:	4096

Details

Name:	00000008.00000003.711737578.00000000021F9000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	21F9000
Size:	12288

Details

Name:	00000000.00000002.731377611.00000000012DE000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	12DE000
Size:	8192

Details

Name:	0000000D.00000003.775570821.000001F86AC47000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F86AC47000
Size:	4096

Details

Name:	00000004.00000003.698308867.000001D99C263000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1D99C263000
Size:	36864

Details

Name:	00000000.00000002.739935359.0000000007AFF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7AFF000
Size:	167936

Details

Name:	00000008.00000003.711924734.00000000022B6000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22B6000
Size:	4096

Details

Name:	00000008.00000000.704078706.0000000000040000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000008.00000003.712604364.00000000022BE000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22BE000
Size:	4096

Details

Name:	00000000.00000000.704900732.00000000076E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	76E0000
Size:	20480

Details

Name:	0000000D.00000002.777286715.000001F86AB90000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F86AB90000
Size:	16384

Details

Name:	0000000F.00000002.813788092.000000DB37CFC000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DB37CFC000
Size:	16384

Details

Name:	00000004.00000002.699087559.000001D99C300000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D99C300000
Size:	4096

Details

Name:	00000000.00000000.712323318.0000000005164000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	5164000
Size:	4096

Details

Name:	0000000C.00000002.744008322.00007FF592106000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF592106000
Size:	8192

Details

Name:	00000000.00000000.710968381.000000000459A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	459A000
Size:	1773568

Details

Name:	00000005.00000000.688645007.00000000FF160000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF160000
Size:	12288

Details

Name:	00000000.00000002.730316290.0000000000E74000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E74000
Size:	4096

Details

Name:	00000000.00000002.730512667.0000000000EB1000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	EB1000
Size:	36864

Details

Name:	00000005.00000002.931328009.00000000029D3000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29D3000
Size:	28672

Details

Name:	00000000.00000000.696582889.0000000000E7D000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	E7D000
Size:	4096

Details

Name:	00000008.00000003.711912842.00000000022AF000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22AF000
Size:	16384

Details

Name:	00000008.00000000.701430909.0000000000040000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000012.00000000.840775591.000000007FFB0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000004.00000002.698899524.000001D99C213000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D99C213000
Size:	86016

Details

Name:	00000008.00000003.705539037.00000000021F1000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	21F1000
Size:	90112

Details

Name:	00000005.00000002.934033182.0000000009E10000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	9E10000
Size:	12288

Details

Name:	00000005.00000003.693446447.0000000006C80000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C80000
Size:	24576

Details

Name:	00000000.00000002.740411263.00000000081E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	81E0000
Size:	40960

Details

Name:	00000006.00000002.931752654.00007FF4F1701000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F1701000
Size:	20480

Details

Name:	00000000.00000000.705298866.0000000007960000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	7960000
Size:	4096

Details

Name:	00000008.00000003.713227341.00000000022C1000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22C1000
Size:	12288

Details

Name:	00000008.00000003.714659639.00000000022A6000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A6000
Size:	28672

Details

Name:	00000008.00000000.702173573.000000007FFD0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	0000000F.00000003.799819370.000002C32B798000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B798000
Size:	147456

Details

Name:	0000000F.00000003.802628610.000002C32B794000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B794000
Size:	4096

Details

Name:	00000000.00000003.663617069.0000000002C40000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C40000
Size:	32768

Details

Name:	00000010.00000002.804456753.00000002FC27A000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2FC27A000
Size:	24576

Details

Name:	00000008.00000003.712157009.00000000022B6000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22B6000
Size:	4096

Details

Name:	0000000D.00000002.778488291.00007FF4EB361000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4EB361000
Size:	20480

Details

Name:	0000000B.00000000.718137042.0000000002A30000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A30000
Size:	102400

Details

Name:	0000000C.00000002.744053914.00007FF59217A000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59217A000
Size:	12288

Details

Name:	00000005.00000003.693426241.0000000006C80000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C80000
Size:	24576

Details

Name:	00000005.00000002.931205704.00000000028B9000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28B9000
Size:	8192

Details

Name:	0000000C.00000002.743956832.00007FF5920DA000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5920DA000
Size:	20480

Details

Name:	0000000C.00000002.743130739.000001AC4F213000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1AC4F213000
Size:	86016

Details

Name:	00000012.00000000.842875498.000000007FFD0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	0000000F.00000002.816819224.00007FF5478DA000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5478DA000
Size:	8192

Details

Name:	00000000.00000000.696321832.0000000000BD7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	BD7000
Size:	4096

Details

Name:	00000000.00000000.695937772.000000000094C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	94C000
Size:	16384

Details

Name:	00000012.00000000.842427659.0000000000040000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000005.00000003.696668274.0000000009570000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9570000
Size:	16384

Details

Name:	00000005.00000002.934181482.00000000FF150000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF150000
Size:	4096

Details

Name:	00000005.00000003.693552920.0000000006D40000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6D40000
Size:	8192

Details

Name:	00000000.00000000.699058931.00000000012FA000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap private
Protect:	page read and write
Base address:	12FA000
Size:	20480

Details

Name:	0000000F.00000002.817078298.00007FF5479C4000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5479C4000
Size:	20480

Details

Name:	00000006.00000002.930857462.000000B64E9FE000.00000004.00000010.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	B64E9FE000
Size:	8192

Details

Name:	00000000.00000003.675324472.00000000076F0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	76F0000
Size:	53248

Details

Name:	00000005.00000000.691315004.00000000FF152000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF152000
Size:	4096

Details

Name:	00000005.00000003.695542280.0000000009560000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9560000
Size:	16384

Details

Name:	00000010.00000000.792910638.00007DF5962B0000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5962B0000
Size:	4096

Details

Name:	00000005.00000002.932821878.0000000006F70000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F70000
Size:	4096

Details

Name:	00000005.00000002.933064339.0000000006FCB000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6FCB000
Size:	8192

Details

Name:	00000000.00000000.709046115.000000000117E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	117E000
Size:	8192

Details

Name:	00000000.00000000.707069943.0000000008530000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	8530000
Size:	24576

Details

Name:	00000000.00000000.700933454.0000000003C91000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	3C91000
Size:	4096

Details

Name:	00000005.00000002.932676335.0000000006F48000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F48000
Size:	4096

Details

Name:	00000008.00000003.712412142.000000000229A000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229A000
Size:	28672

Details

Name:	00000000.00000003.691374957.0000000001280000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1280000
Size:	16384

Details

Name:	0000000C.00000002.743569707.00007FF5917C7000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5917C7000
Size:	20480

Details

Name:	00000000.00000000.695979828.0000000000960000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	960000
Size:	4096

Details

Name:	00000005.00000000.689478730.00000000FF142000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF142000
Size:	4096

Details

Name:	00000005.00000002.932885419.0000000006F84000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F84000
Size:	4096

Details

Name:	00000000.00000000.698715119.0000000001180000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	1180000
Size:	40960

Details

Name:	00000000.00000000.696308999.0000000000BD4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	BD4000
Size:	4096

Details

Name:	00000004.00000000.687141379.00007DF535530000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF535530000
Size:	12288

Details

Name:	00000000.00000003.676473045.0000000001260000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1260000
Size:	45056

Details

Name:	0000000B.00000002.719276897.00000000024F3000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24F3000
Size:	28672

Details

Name:	00000000.00000002.729924037.0000000000950000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	950000
Size:	16384

Details

Name:	00000010.00000002.804526717.00000154AC810000.00000004.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	154AC810000
Size:	4096

Details

Name:	00000005.00000003.696701281.0000000009570000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9570000
Size:	12288

Details

Name:	00000000.00000000.698690402.000000000107F000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	107F000
Size:	4096

Details

Name:	00000010.00000002.804919599.00007FF581130000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF581130000
Size:	16384

Details

Name:	00000004.00000002.699419932.00007FF5203E4000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5203E4000
Size:	4096

Details

Name:	00000006.00000002.931050641.0000020C12028000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20C12028000
Size:	61440

Details

Name:	00000000.00000003.663511940.0000000002C20000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C20000
Size:	32768

Details

Name:	00000008.00000000.700454622.000000007FFC2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000000.00000000.703324962.00000000051A0000.00000040.00000040.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	51A0000
Size:	4096

Details

Name:	00000000.00000002.739465950.0000000007700000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	7700000
Size:	61440

Details

Name:	00000005.00000003.693631245.0000000006C90000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C90000
Size:	32768

Details

Name:	00000005.00000003.693585833.0000000006C90000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C90000
Size:	65536

Details

Name:	00000000.00000000.707121556.000000007F750000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F750000
Size:	20480

Details

Name:	00000000.00000002.730725164.0000000000F02000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	F02000
Size:	4096

Details

Name:	00000008.00000003.712767519.00000000022AF000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22AF000
Size:	12288

Details

Name:	0000000F.00000002.816994185.00007FF54793F000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54793F000
Size:	8192

Details

Name:	00000008.00000000.704216479.000000007FFB0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	0000000B.00000000.718610643.000000007FBA0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBA0000
Size:	4096

Details

Name:	00000012.00000000.841488403.000000007FFD0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000000.00000000.715428550.00000000081EB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	81EB000
Size:	98304

Details

Name:	00000000.00000000.696224612.0000000000BC7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	BC7000
Size:	8192

Details

Name:	0000000F.00000003.798747172.000002C32B7A7000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B7A7000
Size:	61440

Details

Name:	00000000.00000000.696437882.0000000000E4E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	E4E000
Size:	8192

Details

Name:	0000000F.00000003.813338839.000002C32AE69000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32AE69000
Size:	16384

Details

Name:	00000000.00000000.715243661.00000000081A9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	81A9000
Size:	126976

Details

Name:	00000000.00000000.707193063.000000007F862000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F862000
Size:	4096

Details

Name:	00000010.00000002.804636703.00000154AC9C8000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	154AC9C8000
Size:	32768

Details

Name:	00000008.00000003.711755026.00000000021F8000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	21F8000
Size:	4096

Details

Name:	00000005.00000002.930964548.00000000009B0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	9B0000
Size:	102400

Details

Name:	0000000F.00000003.802016376.000002C32B765000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B765000
Size:	28672

Details

Name:	00000008.00000003.711367915.0000000002848000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2848000
Size:	962560

Details

Name:	00000000.00000003.663781158.00000000051C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C0000
Size:	20480

Details

Name:	00000010.00000002.804716984.00000154ACC15000.00000004.00000040.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	154ACC15000
Size:	8192

Details

Name:	0000000C.00000000.725295550.00007DF5A7220000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A7220000
Size:	12288

Details

Name:	00000005.00000000.688897498.0000000002AA3000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AA3000
Size:	16384

Details

Name:	00000008.00000003.712317286.00000000022B7000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22B7000
Size:	20480

Details

Name:	00000004.00000002.698868002.000001D99C1A0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1D99C1A0000
Size:	16384

Details

Name:	00000008.00000003.712390571.00000000022AF000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22AF000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000F.00000003.801468488.000002C32B798000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B798000
Size:	397312

Details

Name:	0000000F.00000002.816619574.00007FF547716000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547716000
Size:	4096

Details

Name:	00000010.00000002.805001652.00007FF58119E000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58119E000
Size:	16384

Details

Name:	00000000.00000000.709520493.0000000001262000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	1262000
Size:	12288

Details

Name:	0000000D.00000002.778296635.00007FF4EB26E000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4EB26E000
Size:	4096

Details

Name:	0000000C.00000002.743548281.00007DF5A7220000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A7220000
Size:	12288

Details

Name:	00000008.00000003.714111924.0000000000604000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	604000
Size:	8192

Details

Name:	0000000D.00000003.775530440.000001F86AC4F000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F86AC4F000
Size:	110592

Details

Name:	0000000C.00000002.743455520.000001AC4FA02000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1AC4FA02000
Size:	4096

Details

Name:	00000000.00000000.699263474.0000000002C60000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap private
Protect:	page read and write
Base address:	2C60000
Size:	32768

Details

Name:	00000000.00000003.663341810.0000000002C20000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C20000
Size:	24576

Details

Name:	0000000F.00000002.816166542.000002C32B450000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C32B450000
Size:	4096

Details

Name:	00000008.00000003.712255563.00000000022B6000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22B6000
Size:	4096

Details

Name:	00000000.00000002.730063452.0000000000BCB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	BCB000
Size:	4096

Details

Name:	00000000.00000002.731050394.0000000001196000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	1196000
Size:	8192

Details

Name:	0000000B.00000002.719592343.0000000003330000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	3330000
Size:	4096

Details

Name:	00000005.00000003.696469308.0000000009560000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9560000
Size:	20480

Details

Name:	00000005.00000002.932183340.0000000005650000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	5650000
Size:	65536

Details

Name:	00000012.00000000.840464276.000000007FFB0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000000.00000002.729949642.00000000009B0000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	9B0000
Size:	24576

Details

Name:	00000008.00000003.711156951.0000000002771000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2771000
Size:	1339392

Details

Name:	00000005.00000003.691740485.0000000006C90000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C90000
Size:	28672

Details

Name:	00000012.00000000.842869550.000000007FFC2000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000000.00000000.699021035.00000000012E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	12E0000
Size:	28672

Details

Name:	0000000F.00000002.816319143.000002C32B76E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B76E000
Size:	53248

Details

Name:	00000008.00000003.710865743.0000000002771000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2771000
Size:	1130496

Details

Name:	00000005.00000000.691065225.0000000000400000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	4096

Details

Name:	0000000F.00000002.816513823.00007FF5474A0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5474A0000
Size:	20480

Details

Name:	00000008.00000000.701158938.000000007FFB2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000008.00000000.702110872.000000007FFB0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000005.00000002.931713376.0000000004E30000.00000004.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	4E30000
Size:	4096

Details

Name:	00000006.00000002.931668271.00007FF4F1664000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F1664000
Size:	16384

Details

Name:	0000000F.00000002.816347428.000002C32BC00000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32BC00000
Size:	8192

Details

Name:	0000000F.00000002.816235811.000002C32B700000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B700000
Size:	118784

Details

Name:	00000005.00000002.931524511.0000000002A71000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A71000
Size:	12288

Details

Name:	0000000F.00000002.816981404.00007FF547934000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547934000
Size:	20480

Details

Name:	00000005.00000002.933157781.0000000006FE3000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6FE3000
Size:	4096

Details

Name:	0000000C.00000002.743695551.00007FF591F71000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF591F71000
Size:	4096

Details

Name:	00000000.00000002.739401616.00000000076E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	76E0000
Size:	20480

Details

Name:	00000000.00000000.698830080.00000000011A2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	11A2000
Size:	4096

Details

Name:	00000000.00000000.716327360.000000000848D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	848D000
Size:	299008

Details

Name:	00000005.00000002.932765986.0000000006F61000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F61000
Size:	8192

Details

Name:	00000005.00000003.695650928.0000000009560000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9560000
Size:	12288

Details

Name:	0000000F.00000002.816018647.000002C32AEB3000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32AEB3000
Size:	36864

Details

Name:	00000004.00000003.698358173.000001D99C248000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1D99C248000
Size:	4096

Details

Name:	0000000D.00000000.764216591.000001F86AA60000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F86AA60000
Size:	102400

Details

Name:	00000005.00000000.691321714.00000000FF160000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF160000
Size:	12288

Details

Name:	00000000.00000000.703228704.0000000005185000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	5185000
Size:	4096

Details

Name:	00000005.00000003.696410094.0000000009570000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9570000
Size:	65536

Details

Name:	0000000B.00000000.718963258.000000007FBB2000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBB2000
Size:	4096

Details

Name:	00000000.00000003.663998741.00000000051C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C0000
Size:	65536

Details

Name:	00000004.00000002.699174203.00007DF535522000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF535522000
Size:	4096

Details

Name:	00000004.00000000.687137901.00007DF535522000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF535522000
Size:	4096

Details

Name:	00000008.00000003.712187285.00000000022B7000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22B7000
Size:	20480

Details

Name:	0000000B.00000002.719331792.000000000252A000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	252A000
Size:	16384

Details

Name:	0000000F.00000002.813651367.000000DB377FB000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DB377FB000
Size:	20480

Details

Name:	0000000C.00000002.743050456.000001AC4F190000.00000004.00000020.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1AC4F190000
Size:	8192

Details

Name:	00000005.00000003.698872011.0000000009E40000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9E40000
Size:	65536

Details

Name:	00000000.00000002.731390205.00000000012E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	12E0000
Size:	28672

Details

Name:	00000005.00000000.691301765.00000000FF142000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF142000
Size:	4096

Details

Name:	00000005.00000003.695691507.0000000009C10000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9C10000
Size:	65536

Details

Name:	00000005.00000002.933938923.0000000009D50000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	9D50000
Size:	733184

Details

Name:	00000005.00000003.693646442.0000000006C90000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C90000
Size:	24576

Details

Name:	00000000.00000000.705321823.0000000007977000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	7977000
Size:	1015808

Details

Name:	00000005.00000003.694354252.0000000009350000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9350000
Size:	49152

Details

Name:	0000000F.00000003.796938376.000002C32B794000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B794000
Size:	147456

Details

Name:	00000000.00000002.730878127.0000000000F71000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	F71000
Size:	57344

Details

Name:	00000000.00000002.730344864.0000000000E7D000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	E7D000
Size:	4096

Details

Name:	0000000C.00000002.743652128.00007FF591EE1000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF591EE1000
Size:	12288

Details

Name:	00000000.00000000.662291328.000000007F862000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F862000
Size:	4096

Details

Name:	00000005.00000002.932632999.0000000006F3B000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F3B000
Size:	4096

Details

Name:	00000000.00000002.739496024.0000000007720000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7720000
Size:	4096

Details

Name:	0000000F.00000003.798726046.000002C32B7B6000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B7B6000
Size:	61440

Details

Name:	00000000.00000000.713785696.000000000776C000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	776C000
Size:	16384

Details

Name:	00000000.00000000.713576799.00000000076E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	76E0000
Size:	20480

Details

Name:	00000000.00000000.709608419.00000000012E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	12E0000
Size:	28672

Details

Name:	00000005.00000002.932932115.0000000006F93000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F93000
Size:	4096

Details

Name:	0000000B.00000000.718221796.0000000002AF0000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	2AF0000
Size:	4096

Details

Name:	00000005.00000000.690241267.00000000FF160000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF160000
Size:	12288

Details

Name:	0000000B.00000002.719270995.00000000024EC000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24EC000
Size:	12288

Details

Name:	00000000.00000002.736833316.000000000518C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	518C000
Size:	4096

Details

Name:	0000000C.00000002.743782598.00007FF59207C000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59207C000
Size:	8192

Details

Name:	00000012.00000000.841792167.00000000001B0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000008.00000003.712115315.00000000022B6000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22B6000
Size:	4096

Details

Name:	00000000.00000000.715025532.0000000008145000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	8145000
Size:	126976

Details

Name:	00000005.00000000.689451767.00000000009D0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	9D0000
Size:	16384

Details

Name:	00000005.00000000.689822170.00000000009E0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	9E0000
Size:	4096

Details

Name:	00000004.00000002.698621981.0000007A38CFB000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	7A38CFB000
Size:	20480

Details

Name:	00000008.00000000.700101933.00000000001C0000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	1C0000
Size:	4096

Details

Name:	0000000D.00000002.778436481.00007FF4EB2E6000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4EB2E6000
Size:	8192

Details

Name:	00000008.00000003.711904546.00000000022B6000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22B6000
Size:	4096

Details

Name:	00000000.00000002.740913444.00000000084D7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	84D7000
Size:	176128

Details

Name:	00000000.00000000.708709556.0000000000F07000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	F07000
Size:	4096

Details

Name:	00000008.00000003.711770403.00000000022B7000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22B7000
Size:	16384

Details

Name:	00000008.00000003.714410958.00000000022A5000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A5000
Size:	40960

Details

Name:	00000012.00000000.840175074.000000007FFC0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000004.00000002.698658994.0000007A38F77000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	7A38F77000
Size:	36864

Details

Name:	00000000.00000000.708259578.0000000000E4E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	E4E000
Size:	8192

Details

Name:	00000012.00000000.841824380.000000007FFB2000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000000.00000003.676084207.00000000084AD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	84AD000
Size:	147456

Details

Name:	00000000.00000003.663922877.00000000051C8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C8000
Size:	24576

Details

Name:	00000008.00000003.711834681.00000000022B7000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22B7000
Size:	12288

Details

Name:	00000000.00000002.730964993.0000000001180000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1180000
Size:	40960

Details

Name:	00000004.00000002.699248904.00007FF5201F1000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5201F1000
Size:	12288

Details

Name:	0000000C.00000002.743705582.00007FF591F8B000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF591F8B000
Size:	8192

Details

Name:	00000012.00000000.841800570.0000000000400000.00000040.00000001.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	4096

Details

Name:	00000005.00000002.931932943.00000000053CD000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	53CD000
Size:	4096

Details

Name:	0000000D.00000002.777956954.00007DF5003E0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5003E0000
Size:	4096

Details

Name:	00000006.00000002.930951537.0000020C12002000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20C12002000
Size:	40960

Details

Name:	00000008.00000003.712341279.00000000022A2000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A2000
Size:	73728

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000002.933291469.0000000006FFB000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6FFB000
Size:	4096

Details

Name:	00000005.00000002.932439300.0000000006D28000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6D28000
Size:	4096

Details

Name:	0000000C.00000002.743476162.00007DF5A7200000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A7200000
Size:	4096

Details

Name:	00000012.00000002.844558575.0000000000D60000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	D60000
Size:	65536

Details

Name:	00000012.00000000.842502498.000000007FFB0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000008.00000000.700117889.000000007FFB2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000000.00000000.696200809.00000000009F0000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page read and write
Base address:	9F0000
Size:	4096

Details

Name:	00000008.00000003.713869558.0000000000604000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	604000
Size:	8192

Details

Name:	00000000.00000000.709666751.0000000001300000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1300000
Size:	32768

Details

Name:	00000000.00000000.708991492.0000000000F71000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	F71000
Size:	57344

Details

Name:	0000000C.00000002.742843366.000000792550E000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	792550E000
Size:	8192

Details

Name:	0000000D.00000000.764267472.00007DF5003F0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5003F0000
Size:	4096

Details

Name:	0000000C.00000002.743093051.000001AC4F200000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1AC4F200000
Size:	4096

Details

Name:	00000000.00000003.663471265.0000000002C20000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C20000
Size:	16384

Details

Name:	00000000.00000002.731285549.0000000001256000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1256000
Size:	4096

Details

Name:	00000000.00000003.676570696.0000000001240000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1240000
Size:	65536

Details

Name:	00000005.00000003.693558779.0000000006C90000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C90000
Size:	16384

Details

Name:	00000000.00000000.698820960.000000000119A000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	119A000
Size:	4096

Details

Name:	00000000.00000002.730084882.0000000000BD7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	BD7000
Size:	4096

Details

Name:	00000008.00000000.700765782.000000007FFB2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000000.00000000.705232373.0000000007950000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7950000
Size:	45056

Details

Name:	0000000B.00000000.718294219.000000007FBB0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBB0000
Size:	4096

Details

Name:	00000000.00000002.729788436.00000000008E0000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	8E0000
Size:	4096

Details

Name:	0000000F.00000002.817004438.00007FF547948000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547948000
Size:	12288

Details

Name:	0000000B.00000003.719122936.0000000002F20000.00000004.00000040.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	heap private
Protect:	page read and write
Base address:	2F20000
Size:	4096

Details

Name:	0000000F.00000003.795015791.000002C32B76E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B76E000
Size:	131072

Details

Name:	00000005.00000000.688916928.00000000FF152000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF152000
Size:	4096

Details

Name:	00000004.00000002.699336974.00007FF52038C000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52038C000
Size:	8192

Details

Name:	0000000D.00000002.776874568.0000003ED797E000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3ED797E000
Size:	8192

Details

Name:	0000000B.00000000.718599736.0000000002AE0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AE0000
Size:	8192

Details

Name:	00000004.00000003.698329926.000001D99C24E000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1D99C24E000
Size:	86016

Details

Name:	00000010.00000002.804942369.00007FF58115C000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58115C000
Size:	4096

Details

Name:	00000000.00000000.707052160.0000000008505000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	8505000
Size:	4096

Details

Name:	00000000.00000000.709630284.00000000012F0000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap private
Protect:	page read and write
Base address:	12F0000
Size:	32768

Details

Name:	00000006.00000002.930964477.0000020C1200D000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20C1200D000
Size:	4096

Details

Name:	00000000.00000000.709149513.00000000011A2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	11A2000
Size:	4096

Details

Name:	00000000.00000000.708728803.0000000000F10000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	F10000
Size:	94208

Details

Name:	00000005.00000003.695672753.0000000009C20000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9C20000
Size:	40960

Details

Name:	00000000.00000000.707495771.00000000007F0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F0000
Size:	4096

Details

Name:	00000000.00000002.731331888.0000000001271000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1271000
Size:	20480

Details

Name:	0000000D.00000002.777919476.00007DF3FE2B0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF3FE2B0000
Size:	20480

Details

Name:	0000000F.00000003.802590305.000002C32B77E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B77E000
Size:	86016

Details

Name:	0000000F.00000002.816936924.00007FF547917000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547917000
Size:	28672

Details

Name:	00000000.00000000.715996178.00000000082BF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	82BF000
Size:	32768

Details

Name:	0000000F.00000002.816454539.00007FF547233000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547233000
Size:	8192

Details

Name:	00000000.00000000.705865353.0000000007B70000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	7B70000
Size:	4096

Details

Name:	00000005.00000002.933245714.0000000006FF2000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6FF2000
Size:	8192

Details

Name:	00000000.00000002.729795798.00000000008F0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	8F0000
Size:	102400

Details

Name:	00000008.00000003.714691437.00000000022B1000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22B1000
Size:	4096

Details

Name:	00000005.00000000.688890323.00000000009E0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	9E0000
Size:	4096

Details

Name:	00000000.00000000.708068934.00000000009C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	9C0000
Size:	8192

Details

Name:	00000010.00000002.804726724.00000154ACC20000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	154ACC20000
Size:	32768

Details

Name:	00000005.00000003.698739457.0000000009D40000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D40000
Size:	16384

Details

Name:	00000005.00000002.932812668.0000000006F6E000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F6E000
Size:	4096

Details

Name:	0000000F.00000003.793758083.000002C32AEEA000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32AEEA000
Size:	32768

Details

Name:	00000008.00000003.711696003.00000000022AF000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22AF000
Size:	86016

Details

Name:	00000000.00000000.705119419.0000000007770000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	7770000
Size:	65536

Details

Name:	00000005.00000002.932938375.0000000006F95000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F95000
Size:	4096

Details

Name:	00000000.00000000.706092057.00000000081A9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	81A9000
Size:	126976

Details

Name:	00000000.00000000.703429223.00000000051D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	51D0000
Size:	65536

Details

Name:	00000005.00000000.688603538.00000000009D0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	9D0000
Size:	16384

Details

Name:	0000000B.00000002.719631310.000000007FBB2000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBB2000
Size:	4096

Details

Name:	0000000B.00000002.719517772.0000000002CF0000.00000004.00000020.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2CF0000
Size:	24576

Details

Name:	00000005.00000000.688908574.00000000FF142000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF142000
Size:	4096

Details

Name:	0000000C.00000002.743662782.00007FF591F33000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF591F33000
Size:	8192

Details

Name:	00000000.00000000.713864804.0000000007920000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page read and write
Base address:	7920000
Size:	4096

Details

Name:	00000012.00000002.844297949.00000000001A0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000005.00000000.690584583.00000000FF152000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF152000
Size:	4096

Details

Name:	00000006.00000002.931499076.00007FF4F14A0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F14A0000
Size:	12288

Details

Name:	00000008.00000002.715506466.0000000000195000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	195000
Size:	24576

Details

Name:	00000000.00000003.664283611.00000000076E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	76E0000
Size:	16384

Details

Name:	00000006.00000002.931593681.00007FF4F161B000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F161B000
Size:	20480

Details

Name:	00000000.00000003.687422624.0000000001260000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1260000
Size:	45056

Details

Name:	00000005.00000002.932871831.0000000006F7F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F7F000
Size:	4096

Details

Name:	00000000.00000000.716121883.00000000082D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	82D0000
Size:	4096

Details

Name:	00000008.00000002.716358250.0000000002299000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2299000
Size:	4096

Details

Name:	00000000.00000000.709902444.0000000002C60000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap private
Protect:	page read and write
Base address:	2C60000
Size:	32768

Details

Name:	00000005.00000003.692419650.0000000007EB6000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7EB6000
Size:	327680

Details

Name:	00000005.00000003.695567869.0000000009560000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9560000
Size:	65536

Details

Name:	00000000.00000000.699115256.0000000001690000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1690000
Size:	303104

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	00000000.00000002.737012798.00000000051E0000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	51E0000
Size:	4096

Details

Name:	00000000.00000000.712384915.0000000005191000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	5191000
Size:	8192

Details

Name:	0000000D.00000002.778385507.00007FF4EB2B4000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4EB2B4000
Size:	4096

Details

Name:	00000000.00000000.716564009.000000007F750000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F750000
Size:	20480

Details

Name:	00000012.00000000.841481888.000000007FFC2000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000000.00000000.695841084.00000000008F0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	8F0000
Size:	102400

Details

Name:	0000000C.00000000.725279856.00007DF5A7202000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A7202000
Size:	4096

Details

Name:	00000000.00000003.675964077.0000000007B24000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7B24000
Size:	4096

Details

Name:	00000008.00000003.712199419.00000000022A2000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A2000
Size:	73728

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000008.00000000.704100167.00000000001A0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000000.00000003.663930397.00000000051C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C0000
Size:	24576

Details

Name:	0000000C.00000002.743878884.00007FF59209B000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59209B000
Size:	45056

Details

Name:	00000008.00000003.712735134.00000000022B7000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22B7000
Size:	20480

Details

Name:	00000000.00000000.712407855.00000000051A0000.00000040.00000040.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	51A0000
Size:	4096

Details

Name:	00000012.00000000.841161843.000000007FFB2000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000012.00000000.841187318.000000007FFD0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000008.00000000.700444438.000000007FFC0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	0000000D.00000002.777729251.000001F86AD00000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F86AD00000
Size:	4096

Details

Name:	00000010.00000002.804979545.00007FF581184000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF581184000
Size:	20480

Details

Name:	00000005.00000002.931982111.00000000053E6000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	53E6000
Size:	8192

Details

Name:	00000008.00000000.702496202.000000007FFB2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000000.00000000.698999454.0000000001280000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	1280000
Size:	4096

Details

Name:	0000000F.00000002.813832686.000000DB37E7B000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DB37E7B000
Size:	20480

Details

Name:	00000005.00000002.932487999.0000000006D80000.00000040.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	6D80000
Size:	4096

Details

Name:	00000000.00000000.712133083.00000000050B0000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page read and write
Base address:	50B0000
Size:	679936

Details

Name:	00000005.00000002.932371437.0000000006CFE000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	6CFE000
Size:	8192

Details

Name:	0000000B.00000000.718164275.0000000002AD0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AD0000
Size:	16384

Details

Name:	00000010.00000003.804248926.00000154AC9D3000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	154AC9D3000
Size:	4096

Details

Name:	00000005.00000000.690218991.00000000FF142000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF142000
Size:	4096

Details

Name:	00000000.00000002.740950855.0000000008505000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8505000
Size:	4096

Details

Name:	00000006.00000002.931216029.0000020C12313000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20C12313000
Size:	16384

Details

Name:	00000008.00000003.714503912.00000000022BD000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22BD000
Size:	36864

Details

Name:	00000006.00000002.931651077.00007FF4F165A000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F165A000
Size:	20480

Details

Name:	0000000D.00000002.777877479.000001F86AE00000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F86AE00000
Size:	4096

Details

Name:	00000012.00000000.843650333.0000000000419000.00000040.00000001.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	419000
Size:	12288

Details

Name:	00000000.00000000.708132101.0000000000BC7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	BC7000
Size:	8192

Details

Name:	00000004.00000002.699445494.00007FF5203FF000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5203FF000
Size:	8192

Details

Name:	00000004.00000003.698344896.000001D99C249000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1D99C249000
Size:	20480

Details

Name:	00000000.00000000.700199641.0000000002FCA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	2FCA000
Size:	1728512

Details

Name:	00000004.00000002.699157089.00007DF535510000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF535510000
Size:	4096

Details

Name:	00000005.00000003.695599483.0000000009560000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9560000
Size:	16384

Details

Name:	00000008.00000002.715607987.00000000003AA000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3AA000
Size:	8192

Details

Name:	00000008.00000003.715205707.00000000022C3000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22C3000
Size:	12288

Details

Name:	00000000.00000000.662153122.00000000007F2000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F2000
Size:	733184

Details

Name:	00000000.00000002.729973874.00000000009C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	9C0000
Size:	8192

Details

Name:	00000000.00000002.733095475.0000000003C71000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3C71000
Size:	126976

Signature Hits	Behavior Group	Mitre Attack
Sample file is different than original file name gathered from version info	System Summary
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	00000006.00000003.724144284.0000020C12039000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20C12039000
Size:	184320

Details

Name:	00000005.00000002.931925480.00000000053C4000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	53C4000
Size:	4096

Details

Name:	00000000.00000002.731599330.0000000002C1E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2C1E000
Size:	8192

Details

Name:	0000000C.00000002.743593808.00007FF591C50000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF591C50000
Size:	20480

Details

Name:	00000008.00000003.711527319.0000000002771000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2771000
Size:	503808

Details

Name:	0000000B.00000000.718271222.000000007FBA2000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBA2000
Size:	4096

Details

Name:	00000005.00000002.931746745.0000000004E60000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	4E60000
Size:	32768

Details

Name:	00000000.00000000.713877073.0000000007930000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page read and write
Base address:	7930000
Size:	4096

Details

Name:	00000008.00000000.700436969.000000007FFB2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000012.00000000.842776440.0000000000040000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000005.00000002.934149126.00000000FF140000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF140000
Size:	4096

Details

Name:	00000004.00000002.698516926.0000007A388BB000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7A388BB000
Size:	20480

Details

Name:	00000008.00000002.716292447.0000000000A2A000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A2A000
Size:	4096

Details

Name:	00000005.00000000.688614262.00000000009F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	9F0000
Size:	4096

Details

Name:	00000005.00000002.930817250.0000000000400000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	4096

Details

Name:	00000000.00000000.698618176.0000000000F57000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	F57000
Size:	102400

Details

Name:	00000004.00000002.699397863.00007FF5203CC000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5203CC000
Size:	4096

Details

Name:	0000000B.00000002.719412465.000000000297C000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	297C000
Size:	8192

Details

Name:	00000000.00000000.698663486.0000000000F71000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	F71000
Size:	57344

Details

Name:	00000000.00000003.663307922.0000000002C20000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C20000
Size:	16384

Details

Name:	00000000.00000002.739613400.0000000007977000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7977000
Size:	1015808

Details

Name:	00000000.00000003.664262886.00000000076E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	76E0000
Size:	65536

Details

Name:	00000004.00000002.699355856.00007FF5203A0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5203A0000
Size:	16384

Details

Name:	0000000F.00000003.796028467.000002C32B794000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B794000
Size:	184320

Details

Name:	0000000F.00000003.798737275.000002C32B796000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B796000
Size:	32768

Details

Name:	00000008.00000000.701148095.000000007FFB0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000005.00000000.690180790.00000000009B0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	9B0000
Size:	102400

Details

Name:	00000000.00000002.739968686.0000000007B70000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7B70000
Size:	4096

Details

Name:	00000008.00000000.703271553.00000000001B0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	0000000C.00000002.743535578.00007DF5A7212000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A7212000
Size:	4096

Details

Name:	00000005.00000000.688262795.00000000009B0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	9B0000
Size:	102400

Details

Name:	00000000.00000003.663360652.0000000002C20000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C20000
Size:	20480

Details

Name:	00000005.00000002.933081230.0000000006FD0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6FD0000
Size:	4096

Details

Name:	00000000.00000000.709165449.00000000011A7000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	11A7000
Size:	4096

Details

Name:	0000000F.00000002.816447465.00007FF5471E2000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5471E2000
Size:	4096

Details

Name:	00000012.00000000.842545969.000000007FFD0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000000.00000000.699200175.0000000002BDE000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	2BDE000
Size:	8192

Details

Name:	00000005.00000003.698860800.0000000009E50000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9E50000
Size:	28672

Details

Name:	0000000C.00000002.743390484.000001AC4F313000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1AC4F313000
Size:	12288

Details

Name:	00000000.00000000.696335085.0000000000BDA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	BDA000
Size:	4096

Details

Name:	00000010.00000002.804520221.00000002FC57F000.00000004.00000010.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2FC57F000
Size:	4096

Details

Name:	00000000.00000003.663348718.0000000002C20000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C20000
Size:	20480

Details

Name:	0000000C.00000002.743998887.00007FF5920FE000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5920FE000
Size:	16384

Details

Name:	00000005.00000002.932691093.0000000006F4C000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F4C000
Size:	4096

Details

Name:	00000012.00000002.844630962.000000007FFB2000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	0000000D.00000002.778112036.00007FF4EAFE7000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4EAFE7000
Size:	8192

Details

Name:	0000000B.00000002.719374645.0000000002596000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2596000
Size:	8192

Details

Name:	00000010.00000002.804552748.00000154AC850000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	154AC850000
Size:	12288

Details

Name:	0000000D.00000002.777738872.000001F86AD02000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F86AD02000
Size:	12288

Details

Name:	00000005.00000002.932879111.0000000006F82000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F82000
Size:	4096

Details

Name:	0000000F.00000003.813397048.000002C32AE5C000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32AE5C000
Size:	4096

Details

Name:	00000000.00000002.730784016.0000000000F28000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	F28000
Size:	188416

Details

Name:	0000000F.00000002.814039094.000002C32AD90000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32AD90000
Size:	4096

Details

Name:	00000005.00000002.932698719.0000000006F4E000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F4E000
Size:	4096

Details

Name:	00000008.00000003.714023819.0000000000604000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	604000
Size:	8192

Details

Name:	00000010.00000002.804741022.00000154ACE20000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	154ACE20000
Size:	65536

Details

Name:	00000005.00000002.933095951.0000000006FD4000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6FD4000
Size:	4096

Details

Name:	00000005.00000000.691268077.00000000009D0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	9D0000
Size:	16384

Details

Name:	00000000.00000003.675726089.0000000007B80000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7B80000
Size:	49152

Details

Name:	00000012.00000000.843215663.000000007FFB2000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000012.00000002.844612383.000000007FFB0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	0000000D.00000002.776985610.000001F86AA80000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F86AA80000
Size:	12288

Details

Name:	0000000D.00000002.777247131.000001F86AA90000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F86AA90000
Size:	4096

Details

Name:	0000000D.00000002.777306603.000001F86AC00000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F86AC00000
Size:	73728

Details

Name:	00000004.00000002.699293997.00007FF52029E000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52029E000
Size:	4096

Details

Name:	00000000.00000003.676512571.0000000001244000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1244000
Size:	49152

Details

Name:	00000005.00000000.689723579.0000000000400000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	4096

Details

Name:	0000000D.00000002.778036763.00007FF4EA9AD000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4EA9AD000
Size:	4096

Details

Name:	0000000B.00000002.719469515.0000000002AE0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AE0000
Size:	8192

Details

Name:	00000000.00000003.664343828.00000000076E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	76E0000
Size:	16384

Details

Name:	00000010.00000002.805008569.00007FF5811A9000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5811A9000
Size:	12288

Details

Name:	00000000.00000000.716582042.000000007F850000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F850000
Size:	4096

Details

Name:	00000012.00000002.844276852.000000000009D000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	9D000
Size:	12288

Details

Name:	00000012.00000000.840476868.000000007FFC0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000005.00000002.933219549.0000000006FEE000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6FEE000
Size:	4096

Details

Name:	00000006.00000002.931439733.00007FF4F0E61000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F0E61000
Size:	4096

Details

Name:	00000005.00000002.932458869.0000000006D31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6D31000
Size:	8192

Details

Name:	0000000F.00000003.794924044.000002C32B7D1000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B7D1000
Size:	126976

Details

Name:	00000008.00000002.716113089.000000000056E000.00000004.00000010.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	56E000
Size:	8192

Details

Name:	0000000F.00000003.794787234.000002C32B755000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B755000
Size:	16384

Details

Name:	00000000.00000003.687537336.0000000001280000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1280000
Size:	53248

Details

Name:	00000000.00000000.699217663.0000000002C20000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page read and write
Base address:	2C20000
Size:	110592

Signature Hits	Behavior Group	Mitre Attack
Sample file is different than original file name gathered from version info	System Summary
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)	Malware Analysis System Evasion	Security Software Discovery

Details

Name:	00000000.00000000.709086378.0000000001190000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	1190000
Size:	4096

Details

Name:	00000012.00000000.840784932.000000007FFB2000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000005.00000003.696641035.0000000009570000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9570000
Size:	32768

Details

Name:	00000000.00000000.708006262.0000000000950000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	950000
Size:	16384

Details

Name:	00000005.00000002.933188150.0000000006FEA000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6FEA000
Size:	4096

Details

Name:	00000005.00000003.694540066.0000000009352000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9352000
Size:	57344

Details

Name:	00000004.00000002.699214089.00007FF51FF60000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51FF60000
Size:	20480

Details

Name:	00000010.00000002.804971145.00007FF58117A000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58117A000
Size:	20480

Details

Name:	00000000.00000000.699108859.0000000001680000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1680000
Size:	4096

Details

Name:	00000000.00000002.740340059.00000000081A9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	81A9000
Size:	126976

Details

Name:	0000000F.00000002.816636351.00007FF547731000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547731000
Size:	12288

Details

Name:	0000000D.00000002.777272129.000001F86AAB0000.00000004.00000020.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1F86AAB0000
Size:	8192

Details

Name:	00000000.00000000.710728551.0000000003C71000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	3C71000
Size:	126976

Details

Name:	00000000.00000000.709034974.000000000107F000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	107F000
Size:	4096

Details

Name:	00000008.00000003.712142150.00000000022A2000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A2000
Size:	73728

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000003.663532540.0000000002C20000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C20000
Size:	16384

Details

Name:	0000000C.00000002.743075458.000001AC4F1C0000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1AC4F1C0000
Size:	4096

Details

Name:	00000008.00000002.716315094.0000000000C30000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	C30000
Size:	65536

Details

Name:	0000000F.00000002.813862557.000000DB37F7F000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DB37F7F000
Size:	4096

Details

Name:	00000012.00000002.844370547.000000000052E000.00000004.00000010.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	52E000
Size:	8192

Details

Name:	00000000.00000000.712438763.00000000051D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	51D0000
Size:	65536

Details

Name:	00000005.00000003.699088879.0000000009EB0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9EB0000
Size:	65536

Details

Name:	00000010.00000002.804581777.00000154AC990000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	154AC990000
Size:	8192

Details

Name:	00000012.00000000.842857419.000000007FFB2000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000012.00000000.840798024.000000007FFC2000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000000.00000002.730179736.0000000000E50000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	E50000
Size:	12288

Details

Name:	00000005.00000002.932513182.0000000006E91000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6E91000
Size:	61440

Details

Name:	0000000B.00000002.719445926.0000000002A8D000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2A8D000
Size:	12288

Details

Name:	0000000C.00000000.725289328.00007DF5A7212000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A7212000
Size:	4096

Details

Name:	00000005.00000003.696691783.0000000009570000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9570000
Size:	16384

Details

Name:	00000000.00000000.699240229.0000000002C50000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	2C50000
Size:	65536

Details

Name:	00000005.00000002.931375034.00000000029F5000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29F5000
Size:	4096

Details

Name:	00000008.00000003.713310041.0000000002970000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2970000
Size:	688128

Details

Name:	00000005.00000000.689460875.00000000009E0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	9E0000
Size:	4096

Details

Name:	00000005.00000002.931009801.00000000009D0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	9D0000
Size:	16384

Details

Name:	00000008.00000000.700087353.00000000001A0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000000.00000002.739575181.0000000007940000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	7940000
Size:	4096

Details

Name:	00000000.00000000.698486557.0000000000F28000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	F28000
Size:	188416

Details

Name:	00000005.00000002.932837120.0000000006F75000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F75000
Size:	4096

Details

Name:	00000010.00000002.804900006.00007FF580A87000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF580A87000
Size:	4096

Details

Name:	00000005.00000002.931723960.0000000004E40000.00000004.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	4E40000
Size:	4096

Details

Name:	00000000.00000002.736769878.0000000005177000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5177000
Size:	4096

Details

Name:	00000005.00000002.933125649.0000000006FDD000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6FDD000
Size:	4096

Details

Name:	00000005.00000003.695915231.0000000009560000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9560000
Size:	8192

Details

Name:	00000000.00000002.740774972.00000000082BF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	82BF000
Size:	32768

Details

Name:	00000000.00000003.675932567.0000000007B22000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7B22000
Size:	12288

Details

Name:	00000008.00000000.701008840.0000000000040000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	0000000F.00000002.816735182.00007FF547833000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547833000
Size:	24576

Details

Name:	00000008.00000003.713165209.00000000022BD000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22BD000
Size:	28672

Details

Name:	0000000F.00000002.813813569.000000DB37D7E000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DB37D7E000
Size:	8192

Details

Name:	00000000.00000002.740721299.000000000828C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	828C000
Size:	4096

Details

Name:	00000008.00000003.712674713.000000000229E000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229E000
Size:	12288

Details

Name:	00000000.00000000.716135209.00000000082D2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	82D2000
Size:	8192

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000008.00000000.703710773.000000007FFB2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000008.00000002.716507354.000000007FFC0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	0000000D.00000002.778392850.00007FF4EB2BA000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4EB2BA000
Size:	20480

Details

Name:	00000000.00000000.699080731.0000000001500000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1500000
Size:	65536

Details

Name:	00000005.00000003.696475912.0000000009566000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9566000
Size:	40960

Details

Name:	00000005.00000002.933882138.0000000009C30000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	9C30000
Size:	65536

Details

Name:	00000008.00000000.702780670.00000000001B0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000000.00000003.664035013.00000000051C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C0000
Size:	28672

Details

Name:	00000008.00000003.713707218.0000000002671000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2671000
Size:	176128

Details

Name:	00000008.00000003.714580158.00000000022C1000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22C1000
Size:	20480

Details

Name:	00000004.00000002.698597962.0000007A3893D000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	7A3893D000
Size:	12288

Details

Name:	00000000.00000000.662294495.000000007F870000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F870000
Size:	12288

Details

Name:	00000005.00000002.931404363.00000000029FF000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29FF000
Size:	8192

Details

Name:	0000000D.00000000.764274653.00007DF5003F2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5003F2000
Size:	4096

Details

Name:	00000008.00000003.712058224.00000000022B7000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22B7000
Size:	20480

Details

Name:	0000000B.00000002.719263329.00000000024E5000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	24E5000
Size:	8192

Details

Name:	00000008.00000003.712895311.00000000022AF000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22AF000
Size:	20480

Details

Name:	0000000F.00000002.816369055.00007DF55CA50000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55CA50000
Size:	4096

Details

Name:	0000000B.00000002.719295158.000000000251D000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	251D000
Size:	4096

Details

Name:	00000005.00000002.933109357.0000000006FD8000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6FD8000
Size:	8192

Details

Name:	00000012.00000000.840718231.0000000000040000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000008.00000000.700788512.000000007FFD0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	0000000F.00000002.817112140.00007FF5479D1000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5479D1000
Size:	20480

Details

Name:	00000000.00000003.663959586.00000000076E1000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	76E1000
Size:	61440

Details

Name:	00000000.00000000.706355588.0000000008288000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	8288000
Size:	4096

Details

Name:	00000005.00000002.931413996.0000000002A03000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A03000
Size:	12288

Details

Name:	00000008.00000002.716488906.000000007FFB0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000012.00000000.841476186.000000007FFC0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000000.00000000.696518296.0000000000E73000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	E73000
Size:	4096

Details

Name:	0000000C.00000002.742813130.000000792548B000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	792548B000
Size:	20480

Details

Name:	00000006.00000002.931584666.00007FF4F1610000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F1610000
Size:	16384

Details

Name:	0000000B.00000002.719404972.00000000025C3000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25C3000
Size:	16384

Details

Name:	00000000.00000000.708425735.0000000000E8A000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	E8A000
Size:	155648

Details

Name:	0000000C.00000002.743920207.00007FF5920BC000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5920BC000
Size:	4096

Details

Name:	0000000C.00000002.743307943.000001AC4F27E000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1AC4F27E000
Size:	4096

Details

Name:	00000005.00000002.932593356.0000000006F31000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F31000
Size:	4096

Details

Name:	00000005.00000002.933023587.0000000006FAA000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6FAA000
Size:	4096

Details

Name:	00000005.00000000.690548972.00000000009B0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	9B0000
Size:	102400

Details

Name:	00000000.00000002.731006424.0000000001190000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1190000
Size:	4096

Details

Name:	00000005.00000002.934165335.00000000FF142000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF142000
Size:	4096

Details

Name:	00000000.00000002.731263600.0000000001250000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1250000
Size:	20480

Details

Name:	00000008.00000003.712657182.00000000022BD000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22BD000
Size:	12288

Details

Name:	0000000B.00000002.719481838.0000000002B70000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2B70000
Size:	4096

Details

Name:	00000005.00000002.931019748.00000000009E0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	9E0000
Size:	4096

Details

Name:	00000000.00000003.719076969.00000000012B0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12B0000
Size:	4096

Details

Name:	00000008.00000002.716421684.00000000022B6000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22B6000
Size:	8192

Details

Name:	00000000.00000000.708538685.0000000000EBF000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	EBF000
Size:	28672

Details

Name:	00000005.00000003.696430311.0000000009560000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9560000
Size:	65536

Details

Name:	00000012.00000000.841131778.00000000001A0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000000.00000000.708400520.0000000000E80000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	E80000
Size:	36864

Details

Name:	00000000.00000000.708210872.0000000000CF4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	CF4000
Size:	49152

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000008.00000003.713254662.00000000022A2000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A2000
Size:	53248

Details

Name:	00000000.00000000.699005777.00000000012B0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	12B0000
Size:	4096

Details

Name:	00000004.00000002.699403739.00007FF5203CF000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5203CF000
Size:	16384

Details

Name:	0000000B.00000002.719637434.000000007FBC0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBC0000
Size:	12288

Details

Name:	00000008.00000003.712636860.00000000022B7000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22B7000
Size:	20480

Details

Name:	0000000F.00000002.816383056.00007DF55CA60000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55CA60000
Size:	4096

Details

Name:	00000012.00000000.842145302.00000000001B0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	0000000F.00000003.798887559.000002C32B78C000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B78C000
Size:	20480

Details

Name:	00000000.00000000.716149183.00000000082D5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	82D5000
Size:	73728

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000012.00000000.841469153.000000007FFB2000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000000.00000002.731664961.0000000002C50000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C50000
Size:	65536

Details

Name:	00000008.00000000.702421888.00000000001A0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000000.00000000.696025051.00000000009B0000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	9B0000
Size:	24576

Details

Name:	00000005.00000002.934202678.00000000FF160000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF160000
Size:	12288

Details

Name:	0000000D.00000002.777904372.000001F86B180000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F86B180000
Size:	4096

Details

Name:	00000012.00000000.840805136.000000007FFD0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000000.00000000.706433652.00000000082D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	82D0000
Size:	4096

Details

Name:	00000000.00000000.706254647.0000000008204000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	8204000
Size:	114688

Details

Name:	0000000C.00000002.744027542.00007FF59210D000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59210D000
Size:	16384

Details

Name:	00000000.00000003.663312242.0000000002C25000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C25000
Size:	8192

Details

Name:	00000000.00000000.716496380.0000000008503000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	8503000
Size:	4096

Details

Name:	0000000F.00000003.802614236.000002C32B783000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B783000
Size:	65536

Details

Name:	0000000B.00000002.719362465.0000000002591000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2591000
Size:	12288

Details

Name:	00000000.00000000.714810493.0000000007B70000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	7B70000
Size:	4096

Details

Name:	00000008.00000000.701127234.00000000001B0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000000.00000002.733372119.000000000459A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	459A000
Size:	1773568

Details

Name:	0000000F.00000002.815762330.000002C32AE6A000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32AE6A000
Size:	12288

Details

Name:	00000012.00000000.840187500.000000007FFD0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000008.00000003.712293496.00000000022A2000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A2000
Size:	73728

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000012.00000002.844653490.000000007FFD0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000005.00000002.933867129.0000000009AAE000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	9AAE000
Size:	8192

Details

Name:	00000005.00000000.688310089.00000000FF152000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF152000
Size:	4096

Details

Name:	0000000D.00000002.778224016.00007FF4EB16E000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4EB16E000
Size:	4096

Details

Name:	00000010.00000003.804224032.00000154AC9ED000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	154AC9ED000
Size:	8192

Details

Name:	00000008.00000000.701604115.000000007FFC0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000000.00000000.703139292.000000000516F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	516F000
Size:	4096

Details

Name:	00000000.00000000.709563929.0000000001277000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	1277000
Size:	12288

Details

Name:	0000000F.00000003.813164066.000002C32AE6D000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32AE6D000
Size:	90112

Details

Name:	00000008.00000003.714621950.000000000229A000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229A000
Size:	45056

Details

Name:	00000006.00000002.931488451.00007FF4F0F12000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F0F12000
Size:	4096

Details

Name:	00000008.00000002.716186520.0000000000605000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	605000
Size:	4096

Details

Name:	00000005.00000002.932905438.0000000006F8A000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F8A000
Size:	4096

Details

Name:	0000000F.00000002.816526878.00007FF5474A6000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5474A6000
Size:	32768

Details

Name:	0000000F.00000003.794826234.000002C32B77F000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B77F000
Size:	32768

Details

Name:	0000000F.00000002.816542306.00007FF5474B5000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5474B5000
Size:	4096

Details

Name:	00000000.00000000.703505492.00000000051E0000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap private
Protect:	page read and write
Base address:	51E0000
Size:	4096

Details

Name:	00000000.00000000.714726159.0000000007AFF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	7AFF000
Size:	167936

Details

Name:	0000000C.00000002.743755647.00007FF591FF4000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF591FF4000
Size:	4096

Details

Name:	00000000.00000003.663820010.00000000051C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C0000
Size:	53248

Details

Name:	00000000.00000000.709749986.0000000001690000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1690000
Size:	303104

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	00000005.00000002.932467716.0000000006D34000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6D34000
Size:	36864

Details

Name:	00000008.00000003.714555044.00000000022A6000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A6000
Size:	28672

Details

Name:	00000000.00000000.713547351.0000000007440000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	7440000
Size:	8192

Details

Name:	0000000F.00000002.816263323.000002C32B721000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B721000
Size:	36864

Details

Name:	00000000.00000000.709061880.0000000001180000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	1180000
Size:	40960

Details

Name:	00000005.00000000.689474462.00000000FF140000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF140000
Size:	4096

Details

Name:	00000008.00000003.712779806.00000000022B6000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22B6000
Size:	4096

Details

Name:	0000000F.00000002.816839074.00007FF5478E5000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5478E5000
Size:	12288

Details

Name:	00000008.00000003.710674318.0000000002241000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2241000
Size:	380928

Details

Name:	00000008.00000003.714436899.00000000022BD000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22BD000
Size:	32768

Details

Name:	00000005.00000000.690564731.00000000009E0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	9E0000
Size:	4096

Details

Name:	00000008.00000000.701550325.0000000000400000.00000040.00000001.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	4096

Details

Name:	00000005.00000002.931871636.0000000004F21000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4F21000
Size:	237568

Details

Name:	0000000F.00000002.816126512.000002C32AF13000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32AF13000
Size:	8192

Details

Name:	0000000C.00000002.743903378.00007FF5920A7000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5920A7000
Size:	49152

Details

Name:	00000000.00000000.716610061.000000007F860000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F860000
Size:	4096

Details

Name:	00000010.00000002.804826088.00007DF5962B2000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5962B2000
Size:	4096

Details

Name:	00000000.00000003.664200648.00000000076E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	76E0000
Size:	16384

Details

Name:	00000008.00000003.712592038.00000000022B7000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22B7000
Size:	12288

Details

Name:	00000000.00000002.731615036.0000000002C20000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2C20000
Size:	110592

Details

Name:	00000005.00000000.691294431.00000000FF140000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF140000
Size:	4096

Details

Name:	00000005.00000000.689167220.00000000009D0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	9D0000
Size:	16384

Details

Name:	00000008.00000002.716466218.0000000002770000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2770000
Size:	4096

Details

Name:	00000005.00000002.931286996.00000000029C5000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29C5000
Size:	20480

Details

Name:	00000000.00000002.740485760.0000000008204000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8204000
Size:	114688

Details

Name:	00000006.00000002.931072369.0000020C12038000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20C12038000
Size:	4096

Details

Name:	00000000.00000000.709541060.0000000001271000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	1271000
Size:	20480

Details

Name:	00000005.00000002.932668880.0000000006F46000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F46000
Size:	4096

Details

Name:	00000012.00000002.844379815.000000000056E000.00000004.00000010.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	56E000
Size:	8192

Details

Name:	0000000F.00000002.816358813.00007DF45A920000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF45A920000
Size:	20480

Details

Name:	00000000.00000002.731573437.0000000002B9E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2B9E000
Size:	8192

Details

Name:	00000000.00000000.706374768.0000000008290000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	8290000
Size:	4096

Details

Name:	00000000.00000002.736955886.00000000051D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	51D0000
Size:	65536

Details

Name:	00000000.00000000.696158802.00000000009D0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	9D0000
Size:	16384

Details

Name:	00000000.00000000.698969394.0000000001271000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	1271000
Size:	20480

Details

Name:	0000000B.00000002.719618320.000000007FBA2000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBA2000
Size:	4096

Details

Name:	00000005.00000002.932648195.0000000006F3F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F3F000
Size:	4096

Details

Name:	00000004.00000002.699370219.00007FF5203AB000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5203AB000
Size:	45056

Details

Name:	0000000F.00000003.794838707.000002C32B790000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B790000
Size:	4096

Details

Name:	00000010.00000002.804926362.00007FF581135000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF581135000
Size:	12288

Details

Name:	00000005.00000002.931384695.00000000029F7000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29F7000
Size:	12288

Details

Name:	00000010.00000002.804499152.00000002FC47A000.00000004.00000010.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2FC47A000
Size:	24576

Details

Name:	00000000.00000000.698879114.0000000001210000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	1210000
Size:	65536

Details

Name:	00000004.00000002.699258039.00007FF520243000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF520243000
Size:	8192

Details

Name:	00000000.00000003.663774660.00000000051C6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C6000
Size:	20480

Details

Name:	0000000D.00000002.776749761.0000003ED76FB000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3ED76FB000
Size:	20480

Details

Name:	00000000.00000000.698856229.00000000011AB000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	11AB000
Size:	4096

Details

Name:	00000008.00000002.716153746.00000000005C0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	5C0000
Size:	16384

Details

Name:	00000004.00000002.699234892.00007FF520117000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF520117000
Size:	8192

Details

Name:	00000005.00000002.931851359.0000000004ED2000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	4ED2000
Size:	57344

Details

Name:	0000000F.00000002.816586890.00007FF54769B000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54769B000
Size:	12288

Details

Name:	0000000F.00000002.816035057.000002C32AEBF000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32AEBF000
Size:	32768

Details

Name:	0000000F.00000003.797055571.000002C32BC02000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32BC02000
Size:	147456

Details

Name:	0000000F.00000002.814023612.000002C32AD70000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C32AD70000
Size:	16384

Details

Name:	00000005.00000000.688296978.00000000FF142000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF142000
Size:	4096

Details

Name:	00000008.00000003.712791775.00000000022BD000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22BD000
Size:	12288

Details

Name:	00000000.00000002.741012348.000000007F852000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F852000
Size:	4096

Details

Name:	00000000.00000002.736875434.00000000051A0000.00000040.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	51A0000
Size:	4096

Details

Name:	00000004.00000000.687128199.00007DF535510000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF535510000
Size:	4096

Details

Name:	00000006.00000002.931538221.00007FF4F15D3000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F15D3000
Size:	4096

Details

Name:	00000000.00000000.698954069.000000000125C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	125C000
Size:	16384

Details

Name:	0000000D.00000002.776910826.000001F86AA40000.00000004.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1F86AA40000
Size:	4096

Details

Name:	00000000.00000000.709265397.0000000001210000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	1210000
Size:	65536

Details

Name:	0000000F.00000003.797006288.000002C32B7D5000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B7D5000
Size:	147456

Details

Name:	00000008.00000002.716457850.0000000002670000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2670000
Size:	4096

Details

Name:	00000010.00000003.804175950.00000154AC9D5000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	154AC9D5000
Size:	24576

Details

Name:	0000000B.00000002.719527805.0000000002CF8000.00000004.00000020.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2CF8000
Size:	65536

Details

Name:	00000000.00000000.699282696.0000000002C6A000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap private
Protect:	page read and write
Base address:	2C6A000
Size:	4096

Details

Name:	00000000.00000002.733127718.0000000003C91000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3C91000
Size:	4096

Details

Name:	00000012.00000002.844604142.000000007FEB0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FEB0000
Size:	20480

Details

Name:	00000010.00000002.805030621.00007FF58121A000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58121A000
Size:	12288

Details

Name:	0000000F.00000002.814007432.000002C32AD60000.00000004.00000020.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2C32AD60000
Size:	12288

Details

Name:	00000008.00000003.711045113.0000000002826000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2826000
Size:	823296

Details

Name:	00000004.00000002.699270000.00007FF520261000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF520261000
Size:	8192

Details

Name:	00000000.00000000.707167109.000000007F852000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F852000
Size:	4096

Details

Name:	00000005.00000000.690581524.00000000FF150000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF150000
Size:	4096

Details

Name:	0000000F.00000003.794890077.000002C32B7D1000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B7D1000
Size:	126976

Details

Name:	00000000.00000002.731295818.0000000001259000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1259000
Size:	8192

Details

Name:	00000000.00000000.705164129.000000000791D000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	791D000
Size:	12288

Details

Name:	00000005.00000002.932706216.0000000006F50000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F50000
Size:	4096

Details

Name:	00000000.00000000.698984134.0000000001277000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	1277000
Size:	12288

Details

Name:	00000000.00000003.687526789.0000000001290000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1290000
Size:	65536

Details

Name:	00000008.00000000.700406246.00000000001A0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000005.00000003.695730094.0000000009C00000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9C00000
Size:	65536

Details

Name:	0000000B.00000000.718924080.0000000002AE0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AE0000
Size:	8192

Details

Name:	00000005.00000002.931616698.0000000002A92000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A92000
Size:	12288

Details

Name:	0000000D.00000002.777887136.000001F86B000000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F86B000000
Size:	12288

Details

Name:	00000000.00000000.714820631.00000000080E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	80E0000
Size:	131072

Details

Name:	00000000.00000000.709587626.0000000001280000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	1280000
Size:	4096

Details

Name:	00000008.00000003.713884313.0000000000604000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	604000
Size:	8192

Details

Name:	00000005.00000000.688303307.00000000FF150000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF150000
Size:	4096

Details

Name:	00000005.00000003.693610291.0000000006C90000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C90000
Size:	12288

Details

Name:	00000005.00000002.933666384.0000000009370000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	9370000
Size:	4096

Details

Name:	00000000.00000002.736857895.0000000005194000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5194000
Size:	36864

Details

Name:	0000000C.00000003.742433324.000001AC4F27F000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1AC4F27F000
Size:	40960

Details

Name:	00000000.00000002.729994450.00000000009D0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	9D0000
Size:	16384

Details

Name:	00000000.00000003.664073808.00000000051C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C0000
Size:	20480

Details

Name:	00000006.00000000.692235263.00007DF506782000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF506782000
Size:	4096

Details

Name:	0000000F.00000002.816397547.00007DF55CA70000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55CA70000
Size:	12288

Details

Name:	00000006.00000002.931150471.0000020C12202000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20C12202000
Size:	20480

Details

Name:	00000005.00000002.931085799.0000000000CB0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	CB0000
Size:	16384

Details

Name:	00000004.00000002.699299681.00007FF5202ED000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5202ED000
Size:	20480

Details

Name:	00000000.00000000.709838742.0000000002B9E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	2B9E000
Size:	8192

Details

Name:	00000008.00000000.700057852.0000000000040000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	0000000F.00000002.816495977.00007FF54744E000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54744E000
Size:	12288

Details

Name:	00000005.00000003.699061972.0000000009ED0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9ED0000
Size:	65536

Details

Name:	00000004.00000002.698973328.000001D99C24B000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D99C24B000
Size:	12288

Details

Name:	00000000.00000000.712118670.0000000004D6D000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	4D6D000
Size:	12288

Details

Name:	0000000D.00000002.778375705.00007FF4EB2A7000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4EB2A7000
Size:	28672

Details

Name:	00000000.00000003.663835685.00000000051C5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C5000
Size:	12288

Details

Name:	00000000.00000003.664027928.00000000051C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C0000
Size:	20480

Details

Name:	00000005.00000002.932721946.0000000006F55000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F55000
Size:	4096

Details

Name:	00000008.00000003.712266170.00000000022B7000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22B7000
Size:	20480

Details

Name:	00000008.00000003.713968251.0000000000604000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	604000
Size:	8192

Details

Name:	00000012.00000000.841461157.000000007FFB0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000012.00000002.844646678.000000007FFC2000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000005.00000000.689493945.00000000FF160000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF160000
Size:	12288

Details

Name:	00000000.00000003.663458795.0000000002C30000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C30000
Size:	40960

Details

Name:	00000000.00000000.709923346.0000000002C71000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	2C71000
Size:	3506176

Signature Hits	Behavior Group	Mitre Attack
Sample file is different than original file name gathered from version info	System Summary

Details

Name:	00000010.00000002.804841753.00007DF5962C0000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5962C0000
Size:	12288

Details

Name:	0000000F.00000003.793665760.000002C32B580000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B580000
Size:	4096

Details

Name:	00000000.00000003.663502388.0000000002C20000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C20000
Size:	28672

Details

Name:	0000000B.00000000.718915132.0000000002AD0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AD0000
Size:	16384

Details

Name:	00000005.00000002.932924934.0000000006F91000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F91000
Size:	4096

Details

Name:	00000008.00000003.713999709.0000000000605000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	605000
Size:	4096

Details

Name:	00000000.00000000.695956027.0000000000950000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	950000
Size:	16384

Details

Name:	00000000.00000000.705982523.0000000008145000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	8145000
Size:	126976

Details

Name:	00000000.00000000.710754657.0000000003C93000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	3C93000
Size:	1081344

Details

Name:	00000006.00000000.692229233.00007DF506780000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF506780000
Size:	4096

Details

Name:	00000010.00000003.804261923.00000154AC9D5000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	154AC9D5000
Size:	24576

Details

Name:	0000000C.00000002.743986090.00007FF5920EF000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5920EF000
Size:	8192

Details

Name:	00000012.00000003.844048251.0000000000B5D000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	B5D000
Size:	4096

Details

Name:	00000005.00000002.931594330.0000000002A8C000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A8C000
Size:	12288

Details

Name:	00000000.00000000.709693813.0000000001500000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1500000
Size:	65536

Details

Name:	00000000.00000003.687483822.0000000001271000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1271000
Size:	61440

Details

Name:	0000000F.00000002.816562990.00007FF5475BA000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5475BA000
Size:	4096

Details

Name:	0000000D.00000002.776710948.0000003ED747E000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3ED747E000
Size:	8192

Details

Name:	0000000D.00000002.776888522.0000003ED7A7F000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3ED7A7F000
Size:	4096

Details

Name:	0000000C.00000002.743828240.00007FF592090000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF592090000
Size:	16384

Details

Name:	00000005.00000000.690569535.0000000002AA3000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AA3000
Size:	16384

Details

Name:	00000008.00000002.715560522.000000000019C000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	19C000
Size:	16384

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000010.00000002.804817354.00007DF5962B0000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5962B0000
Size:	4096

Details

Name:	00000000.00000003.675915654.0000000007AFC000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7AFC000
Size:	143360

Details

Name:	00000008.00000002.716278532.0000000000A20000.00000004.00000040.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	A20000
Size:	16384

Details

Name:	00000012.00000000.843106999.0000000000040000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000005.00000000.690578278.00000000FF142000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF142000
Size:	4096

Details

Name:	00000000.00000003.662762636.0000000002BE0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2BE0000
Size:	49152

Details

Name:	00000000.00000003.664247742.00000000076F0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	76F0000
Size:	40960

Details

Name:	00000005.00000000.688904971.00000000FF140000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF140000
Size:	4096

Details

Name:	00000000.00000000.709383685.0000000001240000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page read and write
Base address:	1240000
Size:	20480

Signature Hits	Behavior Group	Mitre Attack
Sample file is different than original file name gathered from version info	System Summary

Details

Name:	0000000F.00000002.816215807.000002C32B590000.00000004.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2C32B590000
Size:	8192

Details

Name:	00000000.00000003.664045382.00000000051C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C0000
Size:	40960

Details

Name:	00000012.00000000.842802539.00000000001A0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000000.00000003.664169248.00000000076E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	76E0000
Size:	32768

Details

Name:	0000000F.00000002.816710192.00007FF5477E3000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5477E3000
Size:	8192

Details

Name:	00000008.00000003.711713002.000000000229A000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229A000
Size:	86016

Details

Name:	00000000.00000000.698865047.00000000011C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	11C0000
Size:	4096

Details

Name:	0000000D.00000002.776932197.000001F86AA60000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1F86AA60000
Size:	102400

Details

Name:	00000005.00000002.932109580.0000000005420000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5420000
Size:	28672

Details

Name:	00000005.00000002.932758892.0000000006F5F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F5F000
Size:	4096

Details

Name:	00000008.00000000.701627905.000000007FFD0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000000.00000000.715860144.0000000008294000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	8294000
Size:	4096

Details

Name:	00000004.00000002.699149071.00007DF4333E0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4333E0000
Size:	20480

Details

Name:	00000005.00000002.931545649.0000000002A75000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A75000
Size:	32768

Details

Name:	00000012.00000000.842512779.000000007FFB2000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000005.00000000.691308595.00000000FF150000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF150000
Size:	4096

Details

Name:	00000012.00000000.843168640.00000000001B0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000005.00000002.931394848.00000000029FD000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29FD000
Size:	4096

Details

Name:	00000005.00000002.932752229.0000000006F5D000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F5D000
Size:	4096

Details

Name:	00000000.00000002.731305252.000000000125C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	125C000
Size:	16384

Details

Name:	00000000.00000002.740820118.00000000083E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	83E0000
Size:	376832

Details

Name:	00000000.00000000.698290756.0000000000EB1000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	EB1000
Size:	36864

Details

Name:	00000005.00000002.932216392.00000000057E0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	57E0000
Size:	303104

Signature Hits	Behavior Group	Mitre Attack
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery

Details

Name:	00000008.00000000.702041365.00000000001A0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000000.00000000.715469900.0000000008204000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	8204000
Size:	114688

Details

Name:	00000005.00000002.932796246.0000000006F6A000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F6A000
Size:	4096

Details

Name:	00000000.00000002.740248139.0000000008145000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8145000
Size:	126976

Details

Name:	00000000.00000000.712340796.0000000005174000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	5174000
Size:	4096

Details

Name:	0000000C.00000002.743003939.000001AC4F160000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1AC4F160000
Size:	12288

Details

Name:	00000005.00000002.931761182.0000000004E6A000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	4E6A000
Size:	135168

Details

Name:	00000000.00000003.663478999.0000000002C25000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C25000
Size:	12288

Details

Name:	00000012.00000000.841421467.0000000000040000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000006.00000000.692262815.00007DF5067A0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5067A0000
Size:	12288

Details

Name:	00000005.00000002.931339428.00000000029DB000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29DB000
Size:	12288

Details

Name:	00000000.00000002.740672573.0000000008278000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8278000
Size:	4096

Details

Name:	00000000.00000000.708238560.0000000000E0E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	E0E000
Size:	8192

Details

Name:	00000004.00000002.698923948.000001D99C229000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D99C229000
Size:	73728

Details

Name:	00000005.00000002.934192004.00000000FF152000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF152000
Size:	4096

Details

Name:	00000000.00000002.736940807.00000000051C0000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	51C0000
Size:	4096

Details

Name:	00000008.00000002.716193385.000000000070C000.00000004.00000010.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	70C000
Size:	16384

Details

Name:	0000000D.00000002.778309613.00007FF4EB275000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4EB275000
Size:	12288

Details

Name:	00000005.00000002.932328258.0000000006C80000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6C80000
Size:	65536

Details

Name:	00000008.00000003.712462189.00000000022AF000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22AF000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000003.695950937.0000000009560000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9560000
Size:	12288

Details

Name:	0000000D.00000002.778060757.00007FF4EAE30000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4EAE30000
Size:	20480

Details

Name:	00000000.00000000.710489311.0000000002FCA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	2FCA000
Size:	1728512

Details

Name:	00000000.00000002.730555494.0000000000EBC000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	EBC000
Size:	4096

Details

Name:	00000005.00000003.698717669.0000000009570000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9570000
Size:	8192

Details

Name:	00000005.00000002.933922233.0000000009D40000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	9D40000
Size:	20480

Details

Name:	0000000F.00000002.816390347.00007DF55CA62000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55CA62000
Size:	4096

Details

Name:	0000000D.00000002.778154166.00007FF4EB113000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4EB113000
Size:	8192

Details

Name:	0000000F.00000002.814104805.000002C32AE13000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32AE13000
Size:	77824

Details

Name:	00000000.00000003.687496404.0000000001270000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1270000
Size:	12288

Details

Name:	00000000.00000000.708178418.0000000000BD4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	BD4000
Size:	4096

Details

Name:	00000000.00000000.709488683.000000000125C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	125C000
Size:	16384

Details

Name:	0000000C.00000002.742941948.0000007925CFF000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	7925CFF000
Size:	4096

Details

Name:	0000000F.00000002.815644608.000002C32AE60000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32AE60000
Size:	4096

Details

Name:	0000000F.00000003.796986222.000002C32B794000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B794000
Size:	147456

Details

Name:	00000004.00000002.698711819.000001D99C060000.00000004.00000040.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1D99C060000
Size:	4096

Details

Name:	00000010.00000000.792883762.00007DF5962A2000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5962A2000
Size:	4096

Details

Name:	0000000D.00000000.764235034.00007DF5003E0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5003E0000
Size:	4096

Details

Name:	0000000B.00000000.718316591.000000007FBC0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBC0000
Size:	12288

Details

Name:	0000000B.00000002.719475924.0000000002B6E000.00000004.00000010.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2B6E000
Size:	8192

Details

Name:	00000005.00000002.932445673.0000000006D2C000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6D2C000
Size:	4096

Details

Name:	00000000.00000000.700876336.0000000003C71000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	3C71000
Size:	126976

Details

Name:	00000000.00000002.737029568.00000000052EE000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	52EE000
Size:	8192

Details

Name:	00000008.00000003.712277055.00000000022BD000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22BD000
Size:	8192

Details

Name:	00000000.00000000.716506125.0000000008505000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	8505000
Size:	4096

Details

Name:	0000000C.00000002.743325476.000001AC4F28A000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1AC4F28A000
Size:	28672

Details

Name:	00000000.00000003.664156088.00000000051C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C0000
Size:	65536

Details

Name:	00000008.00000000.701187958.000000007FFC2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000005.00000002.932351212.0000000006CAB000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6CAB000
Size:	20480

Details

Name:	00000004.00000002.699061325.000001D99C281000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D99C281000
Size:	57344

Details

Name:	00000008.00000002.716364328.00000000022A4000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22A4000
Size:	4096

Details

Name:	00000005.00000002.932612589.0000000006F35000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F35000
Size:	4096

Details

Name:	00000000.00000000.712378035.000000000518C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	518C000
Size:	4096

Details

Name:	0000000B.00000002.719283812.0000000002515000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2515000
Size:	4096

Details

Name:	00000000.00000002.740968577.00000000085E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	85E0000
Size:	4096

Details

Name:	00000000.00000002.741003501.000000007F850000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F850000
Size:	4096

Details

Name:	00000008.00000003.712829130.00000000022A2000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A2000
Size:	53248

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000C.00000002.743863070.00007FF592095000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF592095000
Size:	12288

Details

Name:	00000010.00000000.792919236.00007DF5962B2000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5962B2000
Size:	4096

Details

Name:	00000005.00000002.933002488.0000000006FA6000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6FA6000
Size:	4096

Details

Name:	0000000B.00000002.719289095.0000000002517000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2517000
Size:	12288

Details

Name:	00000008.00000000.701586128.000000007FFB2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000000.00000000.709734914.0000000001680000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1680000
Size:	4096

Details

Name:	00000005.00000002.931216635.000000000297F000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	297F000
Size:	4096

Details

Name:	00000000.00000000.698871807.000000000120E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	120E000
Size:	8192

Details

Name:	00000012.00000000.841145449.00000000001B0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000006.00000002.930927050.0000020C11E00000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	20C11E00000
Size:	4096

Details

Name:	00000010.00000002.804572902.00000154AC960000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	154AC960000
Size:	8192

Details

Name:	00000000.00000000.708047640.00000000009B0000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	9B0000
Size:	24576

Details

Name:	00000000.00000000.716590598.000000007F852000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F852000
Size:	4096

Details

Name:	00000004.00000002.698984482.000001D99C251000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D99C251000
Size:	73728

Details

Name:	00000008.00000003.712223560.00000000022B7000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22B7000
Size:	20480

Details

Name:	00000000.00000002.731144185.00000000011AB000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	11AB000
Size:	4096

Details

Name:	00000010.00000002.804766072.00000154ACFA0000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	154ACFA0000
Size:	4096

Details

Name:	00000008.00000003.713111708.00000000022AF000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22AF000
Size:	4096

Details

Name:	00000005.00000002.932736532.0000000006F59000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F59000
Size:	4096

Details

Name:	00000005.00000002.933277924.0000000006FF9000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6FF9000
Size:	4096

Details

Name:	00000005.00000002.933401913.0000000007011000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7011000
Size:	4096

Details

Name:	00000000.00000000.712356734.000000000517D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	517D000
Size:	4096

Details

Name:	00000004.00000002.699521321.00007FF52048A000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52048A000
Size:	12288

Details

Name:	00000000.00000003.687518992.00000000012A0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12A0000
Size:	24576

Details

Name:	0000000D.00000002.777965848.00007DF5003E2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5003E2000
Size:	4096

Details

Name:	00000000.00000002.740708193.0000000008288000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8288000
Size:	4096

Details

Name:	00000012.00000000.840445032.00000000001B0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000005.00000002.932957707.0000000006F9B000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F9B000
Size:	4096

Details

Name:	00000000.00000000.712370066.0000000005185000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	5185000
Size:	4096

Details

Name:	00000000.00000002.730385880.0000000000E80000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	E80000
Size:	36864

Details

Name:	00000010.00000000.792873960.00007DF5962A0000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5962A0000
Size:	4096

Details

Name:	00000012.00000000.840791613.000000007FFC0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000008.00000003.711816180.00000000022B6000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22B6000
Size:	4096

Details

Name:	00000005.00000003.698697156.0000000009570000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9570000
Size:	8192

Details

Name:	0000000C.00000002.742969357.000001AC4F140000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1AC4F140000
Size:	102400

Details

Name:	00000000.00000000.715769921.0000000008288000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	8288000
Size:	4096

Details

Name:	00000004.00000002.699026826.000001D99C26F000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D99C26F000
Size:	69632

Details

Name:	00000000.00000000.696360892.0000000000BDD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	BDD000
Size:	4096

Details

Name:	00000012.00000000.841845911.000000007FFD0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000000.00000000.705872032.00000000080E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	80E0000
Size:	131072

Details

Name:	0000000D.00000002.778129383.00007FF4EB020000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4EB020000
Size:	4096

Details

Name:	00000000.00000000.713695408.0000000007700000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap private
Protect:	page read and write
Base address:	7700000
Size:	61440

Details

Name:	0000000B.00000002.719549472.0000000002FA0000.00000004.00000040.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2FA0000
Size:	16384

Details

Name:	00000005.00000000.689436679.00000000009B0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	9B0000
Size:	102400

Details

Name:	00000005.00000003.695808105.0000000009570000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9570000
Size:	65536

Details

Name:	00000010.00000002.804965502.00007FF581174000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF581174000
Size:	4096

Details

Name:	00000012.00000000.840488780.000000007FFD0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000005.00000002.932058181.00000000053F2000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	53F2000
Size:	4096

Details

Name:	00000006.00000002.931140567.0000020C12123000.00000004.00000040.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	20C12123000
Size:	4096

Details

Name:	00000000.00000002.730750860.0000000000F10000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	F10000
Size:	94208

Details

Name:	0000000F.00000002.816951248.00007FF547924000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547924000
Size:	4096

Details

Name:	00000012.00000000.842537760.000000007FFC2000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	0000000F.00000003.813378325.000002C32AE5F000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32AE5F000
Size:	8192

Details

Name:	0000000F.00000002.816603868.00007FF5476E0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5476E0000
Size:	8192

Details

Name:	0000000C.00000002.742951907.000001AC4F120000.00000004.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1AC4F120000
Size:	4096

Details

Name:	0000000F.00000003.813389392.000002C32AE5D000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32AE5D000
Size:	8192

Details

Name:	00000005.00000003.698943671.0000000009E40000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9E40000
Size:	4096

Details

Name:	0000000F.00000002.816303460.000002C32B75A000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B75A000
Size:	45056

Details

Name:	00000004.00000002.699138765.000001D99C780000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1D99C780000
Size:	4096

Details

Name:	00000005.00000003.696195966.0000000009560000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9560000
Size:	12288

Details

Name:	00000006.00000002.930998969.0000020C12013000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20C12013000
Size:	61440

Details

Name:	00000008.00000003.705390817.0000000000604000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	604000
Size:	8192

Details

Name:	00000000.00000000.713965183.0000000007960000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	7960000
Size:	4096

Details

Name:	0000000C.00000002.743348971.000001AC4F302000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1AC4F302000
Size:	12288

Details

Name:	00000000.00000003.676207459.00000000084AD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	84AD000
Size:	147456

Details

Name:	00000005.00000002.931166927.00000000028B1000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28B1000
Size:	12288

Details

Name:	00000004.00000002.699287330.00007FF52029B000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52029B000
Size:	8192

Details

Name:	0000000B.00000002.719257733.00000000023D8000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	23D8000
Size:	8192

Details

Name:	0000000D.00000002.776768118.0000003ED777E000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3ED777E000
Size:	8192

Details

Name:	00000005.00000003.698909220.0000000009E30000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9E30000
Size:	40960

Details

Name:	00000005.00000002.931735476.0000000004E50000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4E50000
Size:	8192

Details

Name:	00000010.00000003.804273584.00000154AC9DE000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	154AC9DE000
Size:	4096

Details

Name:	00000004.00000002.699278873.00007FF520281000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF520281000
Size:	4096

Details

Name:	00000010.00000002.804669445.00000154AC9DE000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	154AC9DE000
Size:	4096

Details

Name:	0000000F.00000002.815666988.000002C32AE67000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32AE67000
Size:	8192

Details

Name:	00000005.00000000.688286676.00000000FF140000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF140000
Size:	4096

Details

Name:	00000008.00000003.712034300.00000000022B6000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22B6000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000005.00000002.931072656.0000000000CA0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	CA0000
Size:	8192

Details

Name:	0000000D.00000002.777912087.000001F86B402000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F86B402000
Size:	4096

Details

Name:	00000006.00000002.931183616.0000020C12300000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20C12300000
Size:	4096

Details

Name:	0000000F.00000002.816682376.00007FF5477C1000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5477C1000
Size:	4096

Details

Name:	00000008.00000002.716305390.0000000000A30000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	A30000
Size:	32768

Details

Name:	00000000.00000000.662259035.00000000008A6000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	8A6000
Size:	53248

Signature Hits	Behavior Group	Mitre Attack
Sample file is different than original file name gathered from version info	System Summary

Details

Name:	00000004.00000002.699498317.00007FF520484000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF520484000
Size:	20480

Details

Name:	0000000F.00000002.816717823.00007FF5477E8000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5477E8000
Size:	4096

Details

Name:	00000008.00000000.700422274.00000000001B0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000000.00000000.705899792.0000000008101000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	8101000
Size:	98304

Details

Name:	00000005.00000002.931650893.0000000002AA3000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AA3000
Size:	16384

Details

Name:	00000000.00000000.699068123.0000000001300000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1300000
Size:	32768

Details

Name:	00000000.00000002.740727807.0000000008290000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8290000
Size:	4096

Details

Name:	0000000F.00000002.815858334.000002C32AE84000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32AE84000
Size:	28672

Details

Name:	00000012.00000000.840161909.000000007FFB0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000005.00000003.693575789.0000000006C90000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C90000
Size:	16384

Details

Name:	00000000.00000000.703193205.0000000005177000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	5177000
Size:	4096

Details

Name:	00000000.00000002.736842327.0000000005191000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5191000
Size:	8192

Details

Name:	00000004.00000002.699456027.00007FF520408000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF520408000
Size:	12288

Details

Name:	0000000D.00000002.778206566.00007FF4EB16B000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4EB16B000
Size:	8192

Details

Name:	00000005.00000003.693415933.0000000006C80000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C80000
Size:	16384

Details

Name:	0000000C.00000002.744036088.00007FF592174000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF592174000
Size:	20480

Details

Name:	0000000C.00000000.725259253.000001AC4F140000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1AC4F140000
Size:	102400

Details

Name:	00000004.00000002.698882240.000001D99C200000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D99C200000
Size:	73728

Details

Name:	00000008.00000003.712494635.000000000229A000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229A000
Size:	12288

Details

Name:	00000008.00000003.711936953.00000000022B7000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22B7000
Size:	24576

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000C.00000002.743338038.000001AC4F300000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1AC4F300000
Size:	4096

Details

Name:	00000000.00000003.675954950.0000000007B22000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7B22000
Size:	12288

Details

Name:	0000000C.00000002.743112216.000001AC4F202000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1AC4F202000
Size:	65536

Details

Name:	00000000.00000000.698362792.0000000000EBF000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	EBF000
Size:	28672

Details

Name:	00000012.00000000.842174815.000000007FFB0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000008.00000003.713057874.00000000022A2000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A2000
Size:	53248

Details

Name:	00000005.00000000.689173281.00000000009E0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	9E0000
Size:	4096

Details

Name:	00000000.00000003.687471061.0000000001270000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1270000
Size:	12288

Details

Name:	00000000.00000003.663544782.0000000002C40000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C40000
Size:	20480

Details

Name:	00000000.00000000.708518984.0000000000EBC000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	EBC000
Size:	4096

Details

Name:	00000000.00000002.736805837.0000000005180000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5180000
Size:	4096

Details

Name:	00000012.00000002.844640308.000000007FFC0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	0000000F.00000002.816556053.00007FF5474F7000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5474F7000
Size:	4096

Details

Name:	0000000F.00000003.813369216.000002C32AE61000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32AE61000
Size:	12288

Details

Name:	00000005.00000002.932409764.0000000006D14000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6D14000
Size:	8192

Details

Name:	00000000.00000003.676541724.0000000001260000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1260000
Size:	28672

Details

Name:	0000000B.00000000.718590969.0000000002AD0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AD0000
Size:	16384

Details

Name:	00000012.00000000.843584448.0000000000040000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000008.00000003.714463033.00000000022C2000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22C2000
Size:	12288

Details

Name:	00000008.00000003.712809826.000000000229A000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229A000
Size:	12288

Details

Name:	0000000C.00000002.743715720.00007FF591F8E000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF591F8E000
Size:	4096

Details

Name:	00000000.00000002.731092558.00000000011A0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	11A0000
Size:	4096

Details

Name:	00000006.00000002.931198660.0000020C12302000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20C12302000
Size:	16384

Details

Name:	00000000.00000000.714936175.000000000811A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	811A000
Size:	28672

Details

Name:	00000004.00000002.699326154.00007FF52030C000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52030C000
Size:	8192

Details

Name:	00000005.00000002.932162007.0000000005440000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	5440000
Size:	20480

Details

Name:	0000000F.00000002.816431507.00007FF547017000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547017000
Size:	20480

Details

Name:	00000000.00000002.739559774.0000000007920000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	7920000
Size:	4096

Details

Name:	0000000F.00000003.813349208.000002C32AE65000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32AE65000
Size:	16384

Details

Name:	0000000B.00000000.718562350.00000000025C3000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	25C3000
Size:	16384

Details

Name:	00000000.00000002.739582034.0000000007950000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7950000
Size:	45056

Details

Name:	0000000F.00000003.802637004.000002C32B796000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B796000
Size:	8192

Details

Name:	00000005.00000000.690574777.00000000FF140000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF140000
Size:	4096

Details

Name:	00000005.00000003.691755757.0000000006C80000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C80000
Size:	28672

Details

Name:	0000000D.00000000.764281185.00007DF500400000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF500400000
Size:	12288

Details

Name:	0000000D.00000002.778270979.00007FF4EB1DC000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4EB1DC000
Size:	8192

Details

Name:	00000008.00000003.711745577.0000000002200000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2200000
Size:	4096

Details

Name:	0000000D.00000000.764325748.00007FF4EB362000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4EB362000
Size:	16384

Details

Name:	00000004.00000002.699179513.00007DF535530000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF535530000
Size:	12288

Details

Name:	00000000.00000000.703168145.0000000005174000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	5174000
Size:	4096

Details

Name:	00000005.00000002.931458359.0000000002A22000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A22000
Size:	8192

Details

Name:	00000000.00000000.698893384.0000000001220000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	1220000
Size:	65536

Details

Name:	00000000.00000000.706455152.00000000082D5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	82D5000
Size:	73728

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	0000000D.00000002.778365314.00007FF4EB29F000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4EB29F000
Size:	16384

Details

Name:	00000012.00000000.840437213.00000000001A0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	0000000F.00000003.793729705.000002C32AEE7000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32AEE7000
Size:	4096

Details

Name:	00000008.00000003.711958145.00000000022BE000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22BE000
Size:	4096

Details

Name:	0000000F.00000002.815990287.000002C32AEAB000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32AEAB000
Size:	28672

Details

Name:	0000000D.00000002.778264027.00007FF4EB1D4000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4EB1D4000
Size:	4096

Details

Name:	00000005.00000002.931497356.0000000002A2B000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A2B000
Size:	49152

Details

Name:	0000000B.00000000.718971730.000000007FBC0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBC0000
Size:	12288

Details

Name:	00000005.00000000.689843832.00000000FF142000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF142000
Size:	4096

Details

Name:	00000000.00000000.700961388.0000000003C93000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	3C93000
Size:	1081344

Details

Name:	00000000.00000002.733135182.0000000003C93000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3C93000
Size:	1081344

Details

Name:	00000005.00000000.688883782.00000000009D0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	9D0000
Size:	16384

Details

Name:	00000005.00000003.698818009.0000000009D50000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D50000
Size:	45056

Details

Name:	00000012.00000000.842189962.000000007FFC0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000000.00000000.696523892.0000000000E74000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	E74000
Size:	4096

Details

Name:	00000000.00000002.730230825.0000000000E70000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E70000
Size:	4096

Details

Name:	00000005.00000000.688640255.00000000FF152000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF152000
Size:	4096

Details

Name:	0000000F.00000002.813996178.000002C32AD40000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C32AD40000
Size:	4096

Details

Name:	0000000F.00000003.793649353.000002C32B580000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B580000
Size:	4096

Details

Name:	00000008.00000003.714705035.00000000022B6000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22B6000
Size:	8192

Details

Name:	00000005.00000000.689852508.00000000FF152000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF152000
Size:	4096

Details

Name:	0000000F.00000003.801105164.000002C32B7D9000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B7D9000
Size:	159744

Details

Name:	0000000B.00000002.719351540.0000000002542000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2542000
Size:	8192

Details

Name:	00000005.00000002.933150549.0000000006FE1000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6FE1000
Size:	4096

Details

Name:	0000000D.00000002.777545566.000001F86AC4A000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F86AC4A000
Size:	8192

Details

Name:	00000005.00000000.688636435.00000000FF150000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF150000
Size:	4096

Details

Name:	0000000F.00000002.816693494.00007FF5477DB000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5477DB000
Size:	8192

Details

Name:	00000000.00000002.731201963.0000000001220000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1220000
Size:	65536

Details

Name:	00000010.00000002.804948881.00007FF58115F000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58115F000
Size:	16384

Details

Name:	00000000.00000002.739552894.000000000791D000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	791D000
Size:	12288

Details

Name:	0000000F.00000002.816083483.000002C32AEE9000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32AEE9000
Size:	57344

Details

Name:	00000000.00000000.706362625.000000000828C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	828C000
Size:	4096

Details

Name:	00000005.00000000.688314866.00000000FF160000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF160000
Size:	12288

Details

Name:	00000000.00000000.698943884.0000000001259000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	1259000
Size:	8192

Details

Name:	0000000D.00000002.778188987.00007FF4EB151000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4EB151000
Size:	4096

Details

Name:	0000000F.00000002.815909799.000002C32AE8C000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32AE8C000
Size:	114688

Details

Name:	00000008.00000002.716373209.00000000022A6000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22A6000
Size:	28672

Details

Name:	00000000.00000003.676150913.00000000084AD000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	84AD000
Size:	147456

Details

Name:	00000010.00000000.792852777.00000154AC830000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	154AC830000
Size:	102400

Details

Name:	0000000C.00000002.744075880.00007FF592181000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF592181000
Size:	20480

Details

Name:	0000000D.00000002.777505013.000001F86AC3C000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F86AC3C000
Size:	45056

Details

Name:	00000008.00000000.702738982.0000000000040000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000000.00000000.696175959.00000000009E0000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page read and write
Base address:	9E0000
Size:	4096

Details

Name:	0000000B.00000002.719431129.0000000002A30000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A30000
Size:	102400

Details

Name:	00000000.00000003.663486385.0000000002C30000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C30000
Size:	16384

Details

Name:	0000000C.00000002.743629638.00007FF591E07000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF591E07000
Size:	8192

Details

Name:	00000000.00000000.703212470.0000000005180000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	5180000
Size:	4096

Details

Name:	00000005.00000000.690587985.00000000FF160000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF160000
Size:	12288

Details

Name:	00000010.00000003.804136348.00000154AC9B1000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	154AC9B1000
Size:	126976

Details

Name:	00000005.00000002.931150399.000000000288D000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	288D000
Size:	8192

Details

Name:	00000005.00000000.689199647.00000000FF152000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF152000
Size:	4096

Details

Name:	0000000F.00000000.791761377.00007DF55CA52000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55CA52000
Size:	4096

Details

Name:	00000000.00000000.706415496.00000000082C8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	82C8000
Size:	28672

Details

Name:	00000005.00000002.932779509.0000000006F66000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F66000
Size:	4096

Details

Name:	0000000F.00000002.813891596.000002C32AD00000.00000004.00000040.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2C32AD00000
Size:	4096

Details

Name:	00000000.00000002.740937275.0000000008503000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8503000
Size:	4096

Details

Name:	00000006.00000002.930934678.0000020C11E20000.00000004.00000020.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	20C11E20000
Size:	4096

Details

Name:	0000000C.00000002.743420378.000001AC4F6D0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1AC4F6D0000
Size:	12288

Details

Name:	00000008.00000002.716173358.0000000000600000.00000004.00000020.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	600000
Size:	16384

Details

Name:	0000000C.00000003.742469802.000001AC4F24D000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1AC4F24D000
Size:	139264

Details

Name:	00000004.00000002.699123320.000001D99C600000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1D99C600000
Size:	12288

Details

Name:	00000000.00000002.729557574.00000000007F0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F0000
Size:	4096

Details

Name:	0000000F.00000002.813568265.000000DB373AB000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	DB373AB000
Size:	20480

Details

Name:	0000000B.00000002.719603966.000000007FAA0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FAA0000
Size:	20480

Details

Name:	0000000F.00000002.816702501.00007FF5477DE000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5477DE000
Size:	4096

Details

Name:	00000008.00000002.716447087.0000000002320000.00000004.00000040.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2320000
Size:	8192

Details

Name:	00000004.00000002.699079963.000001D99C290000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D99C290000
Size:	8192

Details

Name:	00000005.00000002.934063429.000000000B660000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	B660000
Size:	4096

Details

Name:	00000005.00000000.689796622.00000000009B0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	9B0000
Size:	102400

Details

Name:	00000008.00000002.716351890.00000000021D0000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	21D0000
Size:	4096

Details

Name:	0000000B.00000000.718623109.000000007FBB0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBB0000
Size:	4096

Details

Name:	0000000F.00000003.794854347.000002C32B79B000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B79B000
Size:	69632

Details

Name:	00000000.00000000.714973144.0000000008122000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	8122000
Size:	139264

Details

Name:	00000006.00000000.692242113.00007DF506790000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF506790000
Size:	4096

Details

Name:	00000005.00000002.932992162.0000000006FA4000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6FA4000
Size:	4096

Details

Name:	00000000.00000003.664022017.00000000051C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C0000
Size:	16384

Details

Name:	0000000B.00000002.719382658.00000000025A4000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25A4000
Size:	28672

Details

Name:	00000008.00000003.714725531.00000000022BD000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22BD000
Size:	16384

Details

Name:	0000000C.00000002.743723792.00007FF591FDD000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF591FDD000
Size:	20480

Details

Name:	00000005.00000003.691853139.0000000006C80000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C80000
Size:	32768

Details

Name:	00000005.00000003.696350884.0000000009560000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9560000
Size:	57344

Details

Name:	00000004.00000002.699332116.00007FF52038A000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52038A000
Size:	4096

Details

Name:	00000000.00000000.695833740.00000000008E0000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page read and write
Base address:	8E0000
Size:	4096

Details

Name:	00000008.00000003.712285718.000000000229F000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229F000
Size:	8192

Details

Name:	00000005.00000002.931447521.0000000002A0F000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A0F000
Size:	4096

Details

Name:	00000000.00000000.696671820.0000000000E8A000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	E8A000
Size:	155648

Details

Name:	00000000.00000000.716617831.000000007F862000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F862000
Size:	4096

Details

Name:	00000000.00000002.740700076.0000000008280000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8280000
Size:	4096

Details

Name:	00000000.00000003.663521840.0000000002C20000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C20000
Size:	20480

Details

Name:	00000012.00000000.841746708.0000000000040000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	0000000F.00000002.816486571.00007FF547442000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547442000
Size:	4096

Details

Name:	00000008.00000003.712873692.00000000022BD000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22BD000
Size:	28672

Details

Name:	0000000B.00000000.718870844.00000000025C3000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	25C3000
Size:	16384

Details

Name:	00000004.00000002.698634340.0000007A38DFB000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	7A38DFB000
Size:	20480

Details

Name:	0000000C.00000002.742961825.000001AC4F130000.00000004.00000040.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1AC4F130000
Size:	4096

Details

Name:	00000005.00000000.691279926.00000000009E0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	9E0000
Size:	4096

Details

Name:	0000000F.00000002.816178023.000002C32B530000.00000008.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page write copy
Base address:	2C32B530000
Size:	266240

Details

Name:	0000000D.00000002.777344066.000001F86AC13000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F86AC13000
Size:	90112

Details

Name:	0000000C.00000002.743936542.00007FF5920C7000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5920C7000
Size:	28672

Details

Name:	00000005.00000003.694490089.0000000009360000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9360000
Size:	32768

Details

Name:	00000005.00000003.691762981.0000000006C88000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C88000
Size:	32768

Details

Name:	0000000D.00000002.777699832.000001F86AC83000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F86AC83000
Size:	65536

Details

Name:	0000000F.00000002.816805989.00007FF5478CA000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5478CA000
Size:	4096

Details

Name:	0000000F.00000003.798708489.000002C32B7B6000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B7B6000
Size:	61440

Details

Name:	00000000.00000000.715643278.0000000008265000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	8265000
Size:	73728

Details

Name:	0000000F.00000002.815424019.000002C32AE27000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32AE27000
Size:	81920

Details

Name:	00000000.00000000.698426862.0000000000F02000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	F02000
Size:	4096

Details

Name:	00000005.00000002.932395283.0000000006D06000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6D06000
Size:	4096

Details

Name:	00000000.00000000.709914463.0000000002C6A000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap private
Protect:	page read and write
Base address:	2C6A000
Size:	4096

Details

Name:	00000000.00000000.709133801.00000000011A0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	11A0000
Size:	4096

Details

Name:	00000008.00000003.713989223.0000000000604000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	604000
Size:	8192

Details

Name:	00000005.00000002.932207549.00000000057D0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	57D0000
Size:	4096

Details

Name:	0000000F.00000002.813980863.000002C32AD30000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C32AD30000
Size:	12288

Details

Name:	00000000.00000000.705080201.0000000007720000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	7720000
Size:	4096

Details

Name:	00000008.00000000.704282852.000000007FFD0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000005.00000000.691287101.0000000002AA3000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AA3000
Size:	16384

Details

Name:	00000010.00000002.804775477.00007DF494170000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF494170000
Size:	20480

Details

Name:	00000008.00000000.700746045.00000000001B0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000008.00000002.716222333.0000000000740000.00000004.00000020.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	740000
Size:	24576

Details

Name:	0000000D.00000002.776924283.000001F86AA50000.00000004.00000040.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	1F86AA50000
Size:	4096

Details

Name:	00000000.00000002.731551241.0000000001680000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1680000
Size:	4096

Details

Name:	00000008.00000002.715485307.000000000009D000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	9D000
Size:	12288

Details

Name:	00000000.00000002.730094342.0000000000CF4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	CF4000
Size:	49152

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000000.00000003.675171323.00000000076F4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	76F4000
Size:	49152

Details

Name:	00000008.00000000.702023435.0000000000040000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	0000000C.00000002.742906590.00000079259FB000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	79259FB000
Size:	20480

Details

Name:	00000008.00000000.702059907.0000000000400000.00000040.00000001.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	282624

Details

Name:	00000000.00000000.715779906.000000000828C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	828C000
Size:	4096

Details

Name:	00000000.00000000.698918261.0000000001240000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page read and write
Base address:	1240000
Size:	20480

Details

Name:	0000000F.00000003.801175951.000002C32B798000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B798000
Size:	200704

Details

Name:	00000008.00000003.705440927.0000000000710000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	710000
Size:	135168

Details

Name:	00000006.00000002.930943592.0000020C12000000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20C12000000
Size:	4096

Details

Name:	00000008.00000000.702396615.0000000000040000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000010.00000002.804675986.00000154AC9E7000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	154AC9E7000
Size:	24576

Details

Name:	0000000F.00000003.793627914.000002C32B580000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B580000
Size:	4096

Details

Name:	00000005.00000002.931798282.0000000004E95000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	4E95000
Size:	245760

Details

Name:	00000000.00000000.702877968.00000000050B0000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page read and write
Base address:	50B0000
Size:	679936

Details

Name:	0000000B.00000002.719487384.0000000002B80000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2B80000
Size:	16384

Details

Name:	00000005.00000002.933235783.0000000006FF0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6FF0000
Size:	4096

Details

Name:	00000008.00000002.716143458.00000000005B0000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5B0000
Size:	4096

Details

Name:	00000005.00000003.693603368.0000000006C90000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C90000
Size:	16384

Details

Name:	00000000.00000002.729565047.00000000007F2000.00000040.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page execute and read and write
Base address:	7F2000
Size:	733184

Details

Name:	00000005.00000002.933267581.0000000006FF7000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6FF7000
Size:	4096

Details

Name:	00000000.00000000.662284706.000000007F852000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F852000
Size:	4096

Details

Name:	00000000.00000000.709850524.0000000002BDE000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	2BDE000
Size:	8192

Details

Name:	00000012.00000000.842471736.00000000001B0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000000.00000000.710749439.0000000003C91000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	3C91000
Size:	4096

Details

Name:	0000000C.00000002.743580544.00007FF5917CD000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5917CD000
Size:	4096

Details

Name:	00000005.00000002.932951428.0000000006F99000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F99000
Size:	4096

Details

Name:	00000008.00000003.712217218.00000000022B6000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22B6000
Size:	4096

Details

Name:	00000006.00000002.930986697.0000020C1200F000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20C1200F000
Size:	12288

Details

Name:	0000000F.00000000.791731895.00007DF55CA50000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55CA50000
Size:	4096

Details

Name:	00000005.00000002.931939847.00000000053D0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	53D0000
Size:	53248

Details

Name:	0000000F.00000003.799861288.000002C32B7D9000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B7D9000
Size:	147456

Details

Name:	00000005.00000002.932017857.00000000053EA000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	53EA000
Size:	4096

Details

Name:	00000005.00000000.691238303.00000000009B0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	9B0000
Size:	102400

Details

Name:	0000000F.00000002.816831760.00007FF5478E0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5478E0000
Size:	16384

Details

Name:	00000005.00000002.931702366.0000000004E25000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	4E25000
Size:	12288

Details

Name:	00000000.00000002.740307860.0000000008185000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8185000
Size:	143360

Details

Name:	00000000.00000000.705216502.0000000007940000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page read and write
Base address:	7940000
Size:	4096

Details

Name:	00000008.00000003.711823970.00000000022B7000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22B7000
Size:	12288

Details

Name:	00000000.00000002.740640180.0000000008265000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8265000
Size:	73728

Details

Name:	00000005.00000003.693677690.0000000006C90000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C90000
Size:	12288

Details

Name:	00000000.00000003.675184135.00000000076E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	76E0000
Size:	65536

Details

Name:	00000000.00000000.706059690.0000000008185000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	8185000
Size:	143360

Details

Name:	00000008.00000003.712377299.00000000022B7000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22B7000
Size:	20480

Details

Name:	0000000D.00000002.777398761.000001F86AC2E000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F86AC2E000
Size:	53248

Details

Name:	00000005.00000002.933381779.000000000700C000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	700C000
Size:	4096

Details

Name:	00000000.00000002.730071272.0000000000BD4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	BD4000
Size:	4096

Details

Name:	00000000.00000003.664271414.00000000076F0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	76F0000
Size:	45056

Details

Name:	00000012.00000002.844500906.00000000008CF000.00000004.00000010.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8CF000
Size:	4096

Details

Name:	00000005.00000002.932305974.0000000006C6E000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	6C6E000
Size:	8192

Details

Name:	00000005.00000002.934091538.000000000DBCE000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DBCE000
Size:	8192

Details

Name:	00000012.00000002.844215292.0000000000030000.00000004.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	30000
Size:	4096

Details

Name:	00000000.00000002.739440162.00000000076F0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	76F0000
Size:	61440

Details

Name:	00000000.00000003.664008160.00000000076E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	76E0000
Size:	24576

Details

Name:	00000005.00000002.932362161.0000000006CB0000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	6CB0000
Size:	4096

Details

Name:	0000000F.00000000.791867281.00007FF5479D2000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5479D2000
Size:	16384

Details

Name:	0000000C.00000002.743463886.00007DF4A50D0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF4A50D0000
Size:	20480

Details

Name:	00000005.00000000.688609709.00000000009E0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	9E0000
Size:	4096

Details

Name:	00000004.00000002.699476502.00007FF520416000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF520416000
Size:	8192

Details

Name:	00000000.00000002.730033224.00000000009F0000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	9F0000
Size:	4096

Details

Name:	00000004.00000002.699463852.00007FF52040E000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52040E000
Size:	16384

Details

Name:	00000000.00000003.663980164.00000000051C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C0000
Size:	40960

Details

Name:	00000008.00000003.711848835.00000000022B7000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22B7000
Size:	12288

Details

Name:	00000005.00000003.698759364.0000000009D40000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D40000
Size:	53248

Details

Name:	00000004.00000002.699319761.00007FF520304000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF520304000
Size:	4096

Details

Name:	0000000F.00000002.816569629.00007FF547657000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547657000
Size:	8192

Details

Name:	00000000.00000000.708194607.0000000000BD7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	BD7000
Size:	4096

Details

Name:	00000012.00000002.844317083.0000000000290000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	290000
Size:	8192

Details

Name:	00000005.00000002.932416659.0000000006D17000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6D17000
Size:	4096

Details

Name:	00000004.00000003.698366053.000001D99C247000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1D99C247000
Size:	4096

Details

Name:	00000006.00000002.931027498.0000020C12023000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20C12023000
Size:	16384

Details

Name:	00000000.00000000.709185653.00000000011AB000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	11AB000
Size:	4096

Details

Name:	0000000F.00000002.816661709.00007FF54778A000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54778A000
Size:	4096

Details

Name:	00000000.00000000.707177087.000000007F860000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F860000
Size:	4096

Details

Name:	00000006.00000002.931084956.0000020C12069000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20C12069000
Size:	12288

Details

Name:	0000000F.00000002.816150745.000002C32B2D0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C32B2D0000
Size:	12288

Details

Name:	00000008.00000003.711605078.0000000002201000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2201000
Size:	348160

Details

Name:	00000005.00000002.932584740.0000000006F2F000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F2F000
Size:	4096

Details

Name:	00000000.00000000.714005414.0000000007977000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	7977000
Size:	1015808

Details

Name:	00000000.00000003.663804951.00000000051C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C0000
Size:	16384

Details

Name:	0000000B.00000002.719398913.00000000025B8000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25B8000
Size:	12288

Details

Name:	00000000.00000002.730267264.0000000000E73000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	E73000
Size:	4096

Details

Name:	0000000F.00000002.817092402.00007FF5479CA000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5479CA000
Size:	12288

Details

Name:	00000005.00000002.933858218.00000000099AE000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	99AE000
Size:	8192

Details

Name:	00000005.00000003.698927193.0000000009E30000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9E30000
Size:	4096

Details

Name:	00000010.00000002.804608374.00000154AC9AB000.00000004.00000020.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	154AC9AB000
Size:	24576

Details

Name:	00000005.00000002.932402057.0000000006D0E000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6D0E000
Size:	8192

Details

Name:	00000000.00000003.687353992.0000000001260000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1260000
Size:	36864

Details

Name:	00000000.00000002.731898820.0000000002C6A000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2C6A000
Size:	4096

Details

Name:	00000005.00000002.934119622.00000000FF040000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF040000
Size:	20480

Details

Name:	00000008.00000003.711779225.00000000022BE000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22BE000
Size:	4096

Details

Name:	00000000.00000003.676441177.0000000001240000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1240000
Size:	49152

Details

Name:	00000008.00000003.714715175.00000000022BD000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22BD000
Size:	16384

Details

Name:	0000000D.00000002.778316590.00007FF4EB27B000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4EB27B000
Size:	45056

Details

Name:	00000005.00000003.696287995.0000000009560000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9560000
Size:	4096

Details

Name:	00000005.00000000.688632422.00000000FF142000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF142000
Size:	4096

Details

Name:	00000005.00000003.693595011.0000000009310000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9310000
Size:	28672

Details

Name:	00000005.00000003.696677452.0000000009570000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9570000
Size:	16384

Details

Name:	00000000.00000003.663972873.00000000076F0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	76F0000
Size:	4096

Details

Name:	00000000.00000000.703275776.0000000005194000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	5194000
Size:	36864

Details

Name:	00000005.00000002.932912341.0000000006F8C000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F8C000
Size:	4096

Details

Name:	00000000.00000002.740793783.00000000082D0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	82D0000
Size:	4096

Details

Name:	00000000.00000003.664335364.00000000076E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	76E0000
Size:	16384

Details

Name:	00000000.00000002.730910131.000000000117E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	117E000
Size:	8192

Details

Name:	00000005.00000002.932830235.0000000006F73000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F73000
Size:	4096

Details

Name:	0000000D.00000002.777558362.000001F86AC52000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F86AC52000
Size:	98304

Details

Name:	0000000F.00000003.813316577.000002C32AE84000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32AE84000
Size:	28672

Details

Name:	00000005.00000003.699074645.0000000009EC0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9EC0000
Size:	65536

Details

Name:	0000000B.00000000.718629303.000000007FBB2000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBB2000
Size:	4096

Details

Name:	00000008.00000003.712859827.00000000022AF000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22AF000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000000.712415840.00000000051B0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	51B0000
Size:	45056

Details

Name:	0000000F.00000002.816825703.00007FF5478DE000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5478DE000
Size:	4096

Details

Name:	0000000F.00000002.816610824.00007FF547714000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547714000
Size:	4096

Details

Name:	00000008.00000003.712443730.00000000022B7000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22B7000
Size:	20480

Details

Name:	0000000F.00000003.797946347.000002C32B7B7000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B7B7000
Size:	65536

Details

Name:	0000000B.00000002.719342838.000000000252F000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	252F000
Size:	4096

Details

Name:	00000000.00000002.740755439.00000000082BA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	82BA000
Size:	16384

Details

Name:	00000000.00000002.731520119.0000000001500000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1500000
Size:	65536

Details

Name:	00000008.00000003.705661383.00000000021FD000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	21FD000
Size:	114688

Details

Name:	00000008.00000003.712328764.00000000022BD000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22BD000
Size:	12288

Details

Name:	00000000.00000000.705714081.0000000007A70000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	7A70000
Size:	573440

Details

Name:	00000006.00000002.931312529.00007DF5067A0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5067A0000
Size:	12288

Details

Name:	00000000.00000000.701871105.000000000459A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	459A000
Size:	1773568

Details

Name:	0000000F.00000003.794803968.000002C32B76E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B76E000
Size:	45056

Details

Name:	0000000D.00000002.778401875.00007FF4EB2C4000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4EB2C4000
Size:	20480

Details

Name:	0000000D.00000002.778071567.00007FF4EAE36000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4EAE36000
Size:	32768

Details

Name:	00000008.00000002.715621502.00000000003AE000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3AE000
Size:	4096

Details

Name:	00000012.00000000.840168445.000000007FFB2000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000006.00000002.931713586.00007FF4F168D000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F168D000
Size:	16384

Details

Name:	00000000.00000002.731319904.0000000001262000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1262000
Size:	12288

Details

Name:	0000000F.00000003.798760578.000002C32B785000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B785000
Size:	53248

Details

Name:	00000000.00000000.709311622.0000000001220000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	1220000
Size:	65536

Details

Name:	00000006.00000002.930816967.000000B64E32D000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	B64E32D000
Size:	12288

Details

Name:	0000000F.00000003.800220084.000002C32B796000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B796000
Size:	12288

Details

Name:	00000008.00000000.701535397.00000000001B0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000008.00000000.702048667.00000000001B0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000000.00000000.694304986.00000000007F0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F0000
Size:	4096

Details

Name:	00000012.00000000.843151792.00000000001A0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000005.00000002.933653108.0000000009350000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	9350000
Size:	65536

Details

Name:	00000004.00000002.698705615.000001D99C050000.00000004.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1D99C050000
Size:	4096

Details

Name:	0000000F.00000002.813702493.000000DB379F7000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DB379F7000
Size:	36864

Details

Name:	00000000.00000002.731240180.0000000001230000.00000040.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	1230000
Size:	4096

Details

Name:	0000000F.00000002.816777897.00007FF5478AB000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5478AB000
Size:	8192

Details

Name:	00000004.00000002.699099778.000001D99C308000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D99C308000
Size:	24576

Details

Name:	00000005.00000002.932640898.0000000006F3D000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F3D000
Size:	4096

Details

Name:	00000005.00000002.933729957.000000000954D000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	954D000
Size:	12288

Details

Name:	00000000.00000003.663390616.0000000002C20000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C20000
Size:	65536

Details

Name:	00000005.00000000.688620139.0000000002AA3000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AA3000
Size:	16384

Details

Name:	00000005.00000002.931967164.00000000053DD000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	53DD000
Size:	4096

Details

Name:	0000000F.00000000.791827443.00007DF55CA70000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55CA70000
Size:	12288

Details

Name:	0000000F.00000002.817022774.00007FF54794E000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54794E000
Size:	16384

Details

Name:	00000005.00000003.699044159.0000000009ED0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9ED0000
Size:	16384

Details

Name:	00000000.00000000.709645253.00000000012FA000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap private
Protect:	page read and write
Base address:	12FA000
Size:	20480

Details

Name:	00000000.00000003.676176355.000000000846E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	846E000
Size:	163840

Details

Name:	0000000F.00000002.817037910.00007FF547956000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547956000
Size:	8192

Details

Name:	00000000.00000003.676115968.000000000845C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	845C000
Size:	237568

Details

Name:	00000000.00000000.707094403.00000000085E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	85E0000
Size:	4096

Details

Name:	00000000.00000000.703202192.000000000517D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	517D000
Size:	4096

Details

Name:	00000005.00000000.690228022.00000000FF152000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF152000
Size:	4096

Details

Name:	00000005.00000002.931569992.0000000002A84000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A84000
Size:	28672

Details

Name:	0000000F.00000003.799884345.000002C32B783000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B783000
Size:	73728

Details

Name:	00000010.00000002.804647303.00000154AC9D3000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	154AC9D3000
Size:	4096

Details

Name:	00000000.00000003.664350171.00000000076E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	76E0000
Size:	16384

Details

Name:	00000008.00000002.715456336.0000000000040000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000000.00000000.706811958.000000000848D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	848D000
Size:	299008

Details

Name:	00000005.00000003.696653275.0000000009570000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9570000
Size:	32768

Details

Name:	00000005.00000003.698776842.0000000009D40000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D40000
Size:	24576

Details

Name:	00000000.00000000.703403775.00000000051C0000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	51C0000
Size:	4096

Details

Name:	0000000F.00000003.798777866.000002C32B7C8000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B7C8000
Size:	61440

Details

Name:	00000010.00000003.804211726.00000154AC9E7000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	154AC9E7000
Size:	32768

Details

Name:	00000010.00000002.804473611.00000002FC2FE000.00000004.00000010.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2FC2FE000
Size:	8192

Details

Name:	0000000B.00000002.719453826.0000000002ACB000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2ACB000
Size:	20480

Details

Name:	00000000.00000000.708296051.0000000000E50000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap private
Protect:	page read and write
Base address:	E50000
Size:	12288

Details

Name:	0000000F.00000002.816477619.00007FF5473BE000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5473BE000
Size:	12288

Details

Name:	0000000B.00000002.719494388.0000000002B90000.00000004.00000020.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	2B90000
Size:	24576

Details

Name:	00000004.00000002.698612699.0000007A389BE000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	7A389BE000
Size:	8192

Details

Name:	00000000.00000002.736888626.00000000051B0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	51B0000
Size:	45056

Details

Name:	00000000.00000000.716178965.00000000083E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	83E0000
Size:	376832

Details

Name:	0000000B.00000000.718894287.0000000002A30000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A30000
Size:	102400

Details

Name:	0000000B.00000002.719503200.0000000002CAE000.00000004.00000010.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2CAE000
Size:	8192

Details

Name:	0000000F.00000003.793517088.000002C32AEA2000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32AEA2000
Size:	4096

Details

Name:	0000000D.00000002.777827467.000001F86AD08000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F86AD08000
Size:	24576

Details

Name:	00000000.00000003.664055156.00000000051C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C0000
Size:	24576

Details

Name:	00000012.00000000.841155372.000000007FFB0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	0000000C.00000000.725284684.00007DF5A7210000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A7210000
Size:	4096

Details

Name:	00000000.00000000.706443585.00000000082D2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	82D2000
Size:	8192

Details

Name:	00000005.00000003.694369864.0000000009350000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9350000
Size:	40960

Details

Name:	0000000D.00000002.778168543.00007FF4EB131000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4EB131000
Size:	8192

Details

Name:	00000005.00000002.931064399.0000000000C3B000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	C3B000
Size:	20480

Details

Name:	0000000D.00000002.778301814.00007FF4EB270000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4EB270000
Size:	16384

Details

Name:	00000000.00000002.740153154.000000000811A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	811A000
Size:	28672

Details

Name:	00000000.00000000.708102262.00000000009E0000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page read and write
Base address:	9E0000
Size:	4096

Details

Name:	00000004.00000002.699167691.00007DF535520000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF535520000
Size:	4096

Details

Name:	00000000.00000000.708903387.0000000000F57000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	F57000
Size:	102400

Details

Name:	0000000F.00000003.801881412.000002C32BC63000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32BC63000
Size:	397312

Details

Name:	00000000.00000000.708358741.0000000000E73000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	E73000
Size:	4096

Details

Name:	00000000.00000000.706774870.000000000845A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	845A000
Size:	81920

Details

Name:	00000000.00000000.698781944.0000000001190000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	1190000
Size:	4096

Details

Name:	00000010.00000002.804956520.00007FF581168000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF581168000
Size:	24576

Details

Name:	00000005.00000002.932654784.0000000006F41000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F41000
Size:	4096

Details

Name:	00000006.00000002.931131768.0000020C12115000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20C12115000
Size:	4096

Details

Name:	00000000.00000002.739998086.00000000080E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	80E0000
Size:	131072

Details

Name:	00000004.00000002.698647550.0000007A38E7E000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	7A38E7E000
Size:	8192

Details

Name:	00000012.00000000.841772500.00000000001A0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000006.00000003.724196134.0000020C12069000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	20C12069000
Size:	12288

Details

Name:	00000006.00000000.692189089.0000020C11DD0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	20C11DD0000
Size:	102400

Details

Name:	00000000.00000000.704933644.00000000076E6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	76E6000
Size:	40960

Details

Name:	00000008.00000002.716410115.00000000022B1000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22B1000
Size:	4096

Details

Name:	00000000.00000003.664290000.00000000076E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	76E0000
Size:	16384

Details

Name:	00000000.00000003.664194053.00000000076E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	76E0000
Size:	16384

Details

Name:	00000000.00000002.729943297.0000000000960000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	960000
Size:	4096

Details

Name:	00000005.00000002.933334964.0000000007004000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7004000
Size:	4096

Details

Name:	00000000.00000000.715624416.0000000008247000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	8247000
Size:	57344

Details

Name:	00000000.00000002.740613634.0000000008247000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8247000
Size:	57344

Details

Name:	00000005.00000002.932683402.0000000006F4A000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F4A000
Size:	4096

Details

Name:	0000000C.00000002.743370137.000001AC4F308000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1AC4F308000
Size:	24576

Details

Name:	00000008.00000000.702842333.000000007FFB0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000008.00000003.714012965.0000000000605000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	605000
Size:	4096

Details

Name:	00000004.00000002.699490762.00007FF52041D000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52041D000
Size:	16384

Details

Name:	00000008.00000000.703637192.0000000000454000.00000040.00000001.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	454000
Size:	28672

Details

Name:	00000000.00000003.664139062.00000000051C4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C4000
Size:	8192

Details

Name:	00000000.00000000.662281395.000000007F850000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F850000
Size:	4096

Details

Name:	00000012.00000002.844522826.0000000000B60000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	B60000
Size:	32768

Details

Name:	00000000.00000002.740680025.000000000827C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	827C000
Size:	4096

Details

Name:	00000012.00000000.840420466.0000000000040000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000000.00000000.706021199.0000000008165000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	8165000
Size:	126976

Details

Name:	0000000F.00000002.814068934.000002C32AE00000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32AE00000
Size:	73728

Details

Name:	0000000B.00000000.718306480.000000007FBB2000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBB2000
Size:	4096

Details

Name:	00000000.00000000.702858713.0000000004D6D000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	4D6D000
Size:	12288

Details

Name:	00000005.00000002.931361367.00000000029E9000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29E9000
Size:	40960

Details

Name:	0000000D.00000002.778419606.00007FF4EB2D8000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4EB2D8000
Size:	12288

Details

Name:	0000000B.00000002.719542494.0000000002E2E000.00000004.00000010.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2E2E000
Size:	8192

Details

Name:	00000008.00000000.703740933.000000007FFC0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000005.00000002.931667865.0000000004DD9000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4DD9000
Size:	28672

Details

Name:	00000012.00000002.844434398.00000000006A0000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6A0000
Size:	4096

Details

Name:	00000008.00000000.699750505.000000007FFC0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000000.00000000.698801343.0000000001196000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	1196000
Size:	8192

Details

Name:	00000008.00000002.716163988.00000000005D0000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5D0000
Size:	4096

Details

Name:	00000000.00000000.706125044.00000000081C9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	81C9000
Size:	90112

Details

Name:	00000008.00000003.714530247.000000000229A000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229A000
Size:	45056

Details

Name:	00000005.00000002.931349703.00000000029E0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29E0000
Size:	32768

Details

Name:	00000008.00000000.700464484.000000007FFD0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000008.00000003.712693489.00000000022A2000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A2000
Size:	65536

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000F.00000003.797969569.000002C32B77E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B77E000
Size:	20480

Details

Name:	00000008.00000000.702143729.000000007FFC0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000006.00000002.930849755.000000B64E8FF000.00000004.00000010.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	B64E8FF000
Size:	4096

Details

Name:	00000000.00000000.706511591.00000000083E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	83E0000
Size:	376832

Details

Name:	00000000.00000002.731128416.00000000011A7000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	11A7000
Size:	4096

Details

Name:	00000006.00000002.931702763.00007FF4F1689000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F1689000
Size:	12288

Details

Name:	00000005.00000002.932626328.0000000006F39000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F39000
Size:	4096

Details

Name:	00000004.00000000.687177086.00007FF520492000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF520492000
Size:	16384

Details

Name:	00000012.00000000.842457032.00000000001A0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000012.00000000.843230255.000000007FFC2000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000005.00000003.693436706.0000000006C80000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C80000
Size:	24576

Details

Name:	0000000F.00000003.796964722.000002C32B794000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B794000
Size:	147456

Details

Name:	00000000.00000000.705310850.0000000007970000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	7970000
Size:	20480

Details

Name:	00000008.00000000.704264459.000000007FFC2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000005.00000000.689855660.00000000FF160000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF160000
Size:	12288

Details

Name:	00000000.00000000.698707948.000000000117E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	117E000
Size:	8192

Details

Name:	00000000.00000002.730902248.000000000107F000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	107F000
Size:	4096

Details

Name:	00000000.00000000.707886068.00000000008A6000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	8A6000
Size:	53248

Details

Name:	00000005.00000003.696452762.0000000009570000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9570000
Size:	65536

Details

Name:	00000012.00000000.843698441.000000007FFD0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000008.00000000.701612689.000000007FFC2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000005.00000002.933609591.0000000008F8E000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	8F8E000
Size:	8192

Details

Name:	00000010.00000000.792990621.00007FF581222000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF581222000
Size:	16384

Details

Name:	00000000.00000000.716542436.00000000085E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	85E0000
Size:	4096

Details

Name:	0000000F.00000003.796069412.000002C32B783000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B783000
Size:	65536

Details

Name:	00000005.00000000.689204329.00000000FF160000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF160000
Size:	12288

Details

Name:	00000004.00000002.699310317.00007FF5202F3000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5202F3000
Size:	24576

Details

Name:	00000008.00000003.714361295.0000000000604000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	604000
Size:	8192

Details

Name:	00000000.00000000.713910750.0000000007950000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	7950000
Size:	45056

Details

Name:	00000010.00000002.804511094.00000002FC4F9000.00000004.00000010.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2FC4F9000
Size:	28672

Details

Name:	00000000.00000000.714374028.0000000007A70000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	7A70000
Size:	573440

Details

Name:	0000000F.00000003.801574937.000002C32BC02000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32BC02000
Size:	794624

Details

Name:	00000004.00000002.698876967.000001D99C1C0000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D99C1C0000
Size:	4096

Details

Name:	0000000D.00000002.777843873.000001F86AD13000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F86AD13000
Size:	12288

Details

Name:	00000000.00000003.663557892.0000000002C45000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C45000
Size:	12288

Details

Name:	00000012.00000000.842531996.000000007FFC0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000008.00000002.716478553.000000007FEB0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FEB0000
Size:	20480

Details

Name:	00000005.00000000.689190922.00000000FF142000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF142000
Size:	4096

Details

Name:	00000010.00000002.804566549.00000154AC940000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	154AC940000
Size:	4096

Details

Name:	00000012.00000003.844036095.0000000000B5C000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	B5C000
Size:	8192

Details

Name:	0000000C.00000002.743791602.00007FF59208A000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59208A000
Size:	8192

Details

Name:	00000012.00000000.841178741.000000007FFC2000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000005.00000002.932619368.0000000006F37000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F37000
Size:	4096

Details

Name:	00000005.00000000.689186653.00000000FF140000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF140000
Size:	4096

Details

Name:	00000000.00000002.740747417.0000000008294000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8294000
Size:	4096

Details

Name:	00000005.00000002.933342705.0000000007006000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7006000
Size:	4096

Details

Name:	0000000F.00000002.816629133.00007FF547721000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547721000
Size:	4096

Details

Name:	00000000.00000000.698849162.00000000011A7000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	11A7000
Size:	4096

Details

Name:	00000000.00000000.706313266.0000000008265000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	8265000
Size:	73728

Details

Name:	00000012.00000000.842133272.00000000001A0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000012.00000000.843197771.0000000000419000.00000040.00000001.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	419000
Size:	12288

Details

Name:	00000005.00000002.933751484.0000000009570000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	9570000
Size:	28672

Details

Name:	00000000.00000003.691358334.0000000001280000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1280000
Size:	61440

Details

Name:	00000000.00000003.664127050.00000000051C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C0000
Size:	16384

Details

Name:	00000000.00000000.709452117.0000000001259000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	1259000
Size:	8192

Details

Name:	00000012.00000000.842203647.000000007FFD0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000008.00000003.713296760.00000000022BD000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22BD000
Size:	16384

Details

Name:	00000010.00000000.792944001.00007DF5962C0000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5962C0000
Size:	12288

Details

Name:	0000000B.00000002.719625011.000000007FBB0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBB0000
Size:	4096

Details

Name:	00000008.00000002.715495276.000000000017B000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	17B000
Size:	8192

Details

Name:	00000012.00000002.844579288.0000000000EE0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	EE0000
Size:	4096

Details

Name:	0000000B.00000002.719251499.00000000023C9000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	23C9000
Size:	12288

Details

Name:	00000006.00000002.931122331.0000020C12102000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20C12102000
Size:	4096

Details

Name:	00000000.00000002.740784642.00000000082C8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	82C8000
Size:	28672

Details

Name:	0000000F.00000003.800212837.000002C32B794000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B794000
Size:	4096

Details

Name:	00000000.00000000.715713085.0000000008278000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	8278000
Size:	4096

Details

Name:	00000012.00000000.843223312.000000007FFC0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000005.00000003.695929140.0000000009560000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9560000
Size:	16384

Details

Name:	00000005.00000000.689150899.00000000009B0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	9B0000
Size:	102400

Details

Name:	00000005.00000002.933350382.0000000007008000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7008000
Size:	4096

Details

Name:	00000000.00000002.740958598.0000000008530000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8530000
Size:	24576

Details

Name:	00000006.00000002.931684502.00007FF4F166F000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F166F000
Size:	8192

Details

Name:	00000008.00000000.702867522.000000007FFB2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000000.00000002.739414722.00000000076E6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	76E6000
Size:	40960

Details

Name:	00000010.00000002.804790416.00007DF5962A0000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5962A0000
Size:	4096

Details

Name:	00000000.00000000.703121364.0000000005164000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	5164000
Size:	4096

Details

Name:	00000000.00000000.709215625.00000000011C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	11C0000
Size:	4096

Details

Name:	00000005.00000002.931034464.0000000000A92000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A92000
Size:	8192

Details

Name:	0000000D.00000002.777618294.000001F86AC6B000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F86AC6B000
Size:	61440

Details

Name:	00000000.00000002.731584525.0000000002BDE000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2BDE000
Size:	8192

Details

Name:	00000008.00000003.711868296.00000000022A2000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A2000
Size:	69632

Details

Name:	00000008.00000000.699756382.000000007FFC2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	0000000F.00000002.813770996.000000DB37BFE000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DB37BFE000
Size:	8192

Details

Name:	00000008.00000003.712572907.000000000229E000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229E000
Size:	12288

Details

Name:	00000000.00000000.712347972.0000000005177000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	5177000
Size:	4096

Details

Name:	0000000F.00000002.816791506.00007FF5478B4000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5478B4000
Size:	16384

Details

Name:	00000000.00000000.708083739.00000000009D0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	9D0000
Size:	16384

Details

Name:	0000000B.00000000.718932371.000000007FBA0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBA0000
Size:	4096

Details

Name:	00000000.00000002.731917364.0000000002C71000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C71000
Size:	3506176

Details

Name:	00000000.00000000.709863617.0000000002C20000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page read and write
Base address:	2C20000
Size:	110592

Details

Name:	00000000.00000003.675779513.0000000007B80000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7B80000
Size:	4096

Details

Name:	00000008.00000000.700094319.00000000001B0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	0000000F.00000002.813914522.000002C32AD10000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C32AD10000
Size:	102400

Details

Name:	00000008.00000003.714032233.0000000000604000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	604000
Size:	8192

Details

Name:	00000008.00000000.702430946.00000000001B0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000005.00000002.932865136.0000000006F7D000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F7D000
Size:	4096

Details

Name:	00000000.00000000.707139955.000000007F850000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F850000
Size:	4096

Details

Name:	00000000.00000000.714870213.0000000008101000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	8101000
Size:	98304

Details

Name:	0000000C.00000002.743636874.00007FF591E40000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF591E40000
Size:	4096

Details

Name:	00000006.00000002.931523327.00007FF4F15A6000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F15A6000
Size:	12288

Details

Name:	00000008.00000000.702896313.000000007FFD0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000000.00000002.731173701.0000000001210000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	1210000
Size:	65536

Details

Name:	00000008.00000003.712430763.00000000022B7000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22B7000
Size:	20480

Details

Name:	00000000.00000003.663861120.00000000051C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C0000
Size:	28672

Details

Name:	00000008.00000000.701175112.000000007FFC0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000000.00000002.741045868.000000007F870000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F870000
Size:	12288

Details

Name:	0000000B.00000000.718637974.000000007FBC0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBC0000
Size:	12288

Details

Name:	00000012.00000000.843205299.000000007FFB0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000000.00000000.708346882.0000000000E70000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	E70000
Size:	4096

Details

Name:	00000000.00000003.675126725.0000000007720000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7720000
Size:	65536

Details

Name:	0000000F.00000002.813735918.000000DB37AF8000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DB37AF8000
Size:	32768

Details

Name:	00000005.00000002.932844669.0000000006F77000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F77000
Size:	4096

Details

Name:	00000000.00000000.703544464.00000000052EE000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	52EE000
Size:	8192

Details

Name:	0000000B.00000002.719324818.0000000002523000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2523000
Size:	12288

Details

Name:	00000005.00000003.698962807.0000000009E40000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9E40000
Size:	45056

Details

Name:	0000000F.00000002.813677738.000000DB378F7000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DB378F7000
Size:	36864

Details

Name:	00000000.00000000.706380851.0000000008294000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	8294000
Size:	4096

Details

Name:	00000008.00000000.700125930.000000007FFC0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000005.00000002.931183630.00000000028B7000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	28B7000
Size:	4096

Details

Name:	00000004.00000002.698861482.000001D99C0C0000.00000004.00000020.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	1D99C0C0000
Size:	8192

Details

Name:	0000000B.00000002.719236004.00000000008B9000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	8B9000
Size:	4096

Details

Name:	0000000D.00000002.777296091.000001F86ABB0000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F86ABB0000
Size:	4096

Details

Name:	00000008.00000003.710731948.0000000002201000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2201000
Size:	798720

Details

Name:	0000000F.00000002.816961105.00007FF54792A000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54792A000
Size:	20480

Details

Name:	00000000.00000000.699288478.0000000002C71000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	2C71000
Size:	3506176

Details

Name:	0000000F.00000002.816225783.000002C32B602000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B602000
Size:	4096

Details

Name:	00000005.00000003.694445885.0000000009360000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9360000
Size:	49152

Details

Name:	0000000D.00000003.775551999.000001F86AC4C000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F86AC4C000
Size:	12288

Details

Name:	00000008.00000003.711800887.00000000022A2000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A2000
Size:	69632

Details

Name:	0000000C.00000002.743065170.000001AC4F1A0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1AC4F1A0000
Size:	16384

Details

Name:	00000000.00000002.739604695.0000000007970000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7970000
Size:	20480

Details

Name:	00000012.00000002.844510355.0000000000B50000.00000004.00000040.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	B50000
Size:	12288

Details

Name:	00000008.00000003.714681235.00000000022AE000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22AE000
Size:	8192

Details

Name:	00000000.00000003.663353491.0000000002C26000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C26000
Size:	20480

Details

Name:	0000000C.00000002.742916559.0000007925AF7000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	7925AF7000
Size:	36864

Details

Name:	00000005.00000002.933298997.0000000006FFD000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6FFD000
Size:	4096

Details

Name:	00000012.00000000.842102491.0000000000040000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000005.00000003.698888319.0000000009E30000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9E30000
Size:	65536

Details

Name:	0000000F.00000002.816549332.00007FF5474F5000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5474F5000
Size:	4096

Details

Name:	00000000.00000000.698938867.0000000001256000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	1256000
Size:	4096

Details

Name:	00000012.00000000.841838742.000000007FFC2000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000000.00000000.706388300.00000000082BA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	82BA000
Size:	16384

Details

Name:	00000005.00000003.695555825.0000000009570000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9570000
Size:	36864

Details

Name:	00000000.00000003.687558527.0000000001280000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1280000
Size:	8192

Details

Name:	00000005.00000002.931106726.000000000285D000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	285D000
Size:	102400

Details

Name:	00000000.00000002.731425374.00000000012F0000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	12F0000
Size:	32768

Details

Name:	00000008.00000003.712476642.00000000022B6000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22B6000
Size:	4096

Details

Name:	00000005.00000002.931974792.00000000053E0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	53E0000
Size:	4096

Details

Name:	00000008.00000003.713184561.00000000022A2000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A2000
Size:	53248

Details

Name:	00000012.00000000.843236723.000000007FFD0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000005.00000002.932743824.0000000006F5B000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F5B000
Size:	4096

Details

Name:	00000004.00000002.699093816.000001D99C302000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D99C302000
Size:	12288

Details

Name:	00000000.00000000.707925170.00000000008F0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	8F0000
Size:	102400

Details

Name:	00000000.00000003.663889474.00000000051C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C0000
Size:	16384

Details

Name:	00000000.00000000.716519745.0000000008530000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	8530000
Size:	24576

Details

Name:	00000000.00000000.705918161.000000000811A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	811A000
Size:	28672

Details

Name:	00000008.00000002.716128838.00000000005AE000.00000004.00000010.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	5AE000
Size:	8192

Details

Name:	00000008.00000003.714307011.0000000002671000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2671000
Size:	176128

Details

Name:	00000000.00000002.739531538.0000000007770000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7770000
Size:	65536

Details

Name:	00000005.00000002.932452437.0000000006D2E000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6D2E000
Size:	4096

Details

Name:	0000000B.00000000.718246425.000000007FBA0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBA0000
Size:	4096

Details

Name:	00000000.00000002.731112403.00000000011A2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	11A2000
Size:	4096

Details

Name:	00000005.00000003.695766669.0000000009BF0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9BF0000
Size:	65536

Details

Name:	00000005.00000000.688859961.00000000009B0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	9B0000
Size:	102400

Details

Name:	0000000F.00000002.816744286.00007FF547844000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547844000
Size:	4096

Details

Name:	00000000.00000000.699042855.00000000012F0000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap private
Protect:	page read and write
Base address:	12F0000
Size:	32768

Details

Name:	00000005.00000003.694532169.0000000009350000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9350000
Size:	4096

Details

Name:	00000008.00000000.703185688.0000000000040000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000008.00000003.711859819.000000000229A000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	229A000
Size:	4096

Details

Name:	0000000B.00000003.719109868.0000000002E50000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2E50000
Size:	4096

Details

Name:	00000008.00000003.715286103.0000000000604000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	604000
Size:	8192

Details

Name:	00000000.00000000.709435276.0000000001256000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	1256000
Size:	4096

Details

Name:	0000000F.00000002.816114630.000002C32AF08000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32AF08000
Size:	28672

Details

Name:	00000000.00000002.740808600.00000000082D5000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	82D5000
Size:	73728

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000005.00000002.932504675.0000000006E8F000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	6E8F000
Size:	4096

Details

Name:	0000000F.00000002.816052647.000002C32AEC8000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32AEC8000
Size:	94208

Details

Name:	00000005.00000003.699055643.0000000009EE0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9EE0000
Size:	4096

Details

Name:	00000000.00000000.706345728.0000000008280000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	8280000
Size:	4096

Details

Name:	00000005.00000000.690215224.00000000FF140000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF140000
Size:	4096

Details

Name:	00000000.00000002.740185945.0000000008122000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8122000
Size:	139264

Details

Name:	00000000.00000000.706397554.00000000082BF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	82BF000
Size:	32768

Details

Name:	00000008.00000000.703777122.000000007FFC2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000005.00000000.690209679.0000000002AA3000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AA3000
Size:	16384

Details

Name:	00000000.00000003.675149318.0000000007700000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7700000
Size:	65536

Details

Name:	00000000.00000000.712363646.0000000005180000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	5180000
Size:	4096

Details

Name:	0000000D.00000002.777974891.00007DF5003F0000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5003F0000
Size:	4096

Details

Name:	00000005.00000002.933172594.0000000006FE5000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6FE5000
Size:	8192

Details

Name:	00000000.00000003.676308411.0000000001240000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1240000
Size:	24576

Details

Name:	00000010.00000002.804483148.00000002FC37E000.00000004.00000010.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2FC37E000
Size:	8192

Details

Name:	0000000C.00000002.743682938.00007FF591F51000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF591F51000
Size:	8192

Details

Name:	00000000.00000002.739596649.0000000007960000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7960000
Size:	4096

Details

Name:	00000000.00000000.712478172.00000000051E0000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap private
Protect:	page read and write
Base address:	51E0000
Size:	4096

Details

Name:	0000000F.00000002.815624931.000002C32AE52000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32AE52000
Size:	40960

Details

Name:	00000008.00000000.699737744.000000007FFB0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000000.00000002.740977077.000000000881E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	881E000
Size:	8192

Details

Name:	00000000.00000002.731076153.000000000119A000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	119A000
Size:	4096

Details

Name:	0000000C.00000002.743950476.00007FF5920D4000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5920D4000
Size:	4096

Details

Name:	00000008.00000002.715596347.00000000001B0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000005.00000002.933073329.0000000006FCE000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6FCE000
Size:	4096

Details

Name:	00000000.00000002.736705992.0000000005164000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5164000
Size:	4096

Details

Name:	00000000.00000002.731443270.00000000012FA000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	12FA000
Size:	20480

Details

Name:	00000000.00000000.713644721.00000000076F0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	76F0000
Size:	61440

Details

Name:	00000006.00000002.930840187.000000B64E77E000.00000004.00000010.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	B64E77E000
Size:	8192

Details

Name:	00000000.00000003.691385584.0000000001280000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1280000
Size:	16384

Details

Name:	00000000.00000000.705200650.0000000007930000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page read and write
Base address:	7930000
Size:	4096

Details

Name:	00000005.00000003.691862463.0000000006C89000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C89000
Size:	28672

Details

Name:	00000008.00000002.716269590.000000000093F000.00000004.00000010.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	93F000
Size:	4096

Details

Name:	0000000B.00000002.719461180.0000000002AD0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AD0000
Size:	16384

Details

Name:	00000000.00000002.739386074.0000000007440000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7440000
Size:	8192

Details

Name:	00000010.00000002.804889003.00007FF580A83000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF580A83000
Size:	8192

Details

Name:	0000000F.00000003.801056752.000002C32B798000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B798000
Size:	176128

Details

Name:	00000005.00000002.931689710.0000000004E20000.00000004.00000020.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	4E20000
Size:	16384

Details

Name:	00000005.00000002.933088580.0000000006FD2000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6FD2000
Size:	4096

Details

Name:	00000000.00000000.696590564.0000000000E80000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	E80000
Size:	36864

Details

Name:	00000006.00000002.930883319.0000020C11DC0000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20C11DC0000
Size:	4096

Details

Name:	00000000.00000002.740279010.0000000008165000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8165000
Size:	126976

Details

Name:	00000000.00000003.663372152.0000000002C30000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C30000
Size:	36864

Details

Name:	00000000.00000003.663492270.0000000002C30000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C30000
Size:	16384

Details

Name:	00000012.00000002.844402497.0000000000580000.00000004.00000020.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	580000
Size:	20480

Details

Name:	00000000.00000003.662848367.0000000002C30000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C30000
Size:	65536

Details

Name:	00000005.00000002.932340445.0000000006CA0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6CA0000
Size:	40960

Details

Name:	00000000.00000000.698433585.0000000000F07000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	F07000
Size:	4096

Details

Name:	00000012.00000002.844288833.000000000019C000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	19C000
Size:	16384

Details

Name:	00000008.00000003.712423496.00000000022B7000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22B7000
Size:	4096

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000000.707032609.0000000008503000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	8503000
Size:	4096

Details

Name:	00000005.00000002.933366125.000000000700A000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	700A000
Size:	4096

Details

Name:	0000000F.00000003.799902288.000002C32BC02000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32BC02000
Size:	147456

Details

Name:	0000000F.00000002.816376126.00007DF55CA52000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55CA52000
Size:	4096

Details

Name:	00000000.00000000.709096473.0000000001196000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	1196000
Size:	8192

Details

Name:	0000000C.00000002.743800548.00007FF59208E000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59208E000
Size:	4096

Details

Name:	00000000.00000000.708778859.0000000000F28000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	F28000
Size:	188416

Details

Name:	00000006.00000002.931642616.00007FF4F1654000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F1654000
Size:	4096

Details

Name:	00000010.00000002.805038406.00007FF581221000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF581221000
Size:	20480

Details

Name:	00000012.00000000.841102571.0000000000040000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	0000000B.00000002.719418739.0000000002980000.00000004.00000001.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2980000
Size:	4096

Details

Name:	00000005.00000002.933203843.0000000006FEC000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6FEC000
Size:	4096

Details

Name:	00000004.00000002.699485185.00007FF520419000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF520419000
Size:	12288

Details

Name:	00000000.00000000.707518262.00000000007F2000.00000040.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page execute and read and write
Base address:	7F2000
Size:	733184

Details

Name:	00000000.00000000.705929246.0000000008122000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	8122000
Size:	139264

Details

Name:	00000005.00000003.696684450.0000000009570000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9570000
Size:	12288

Details

Name:	00000000.00000000.713987581.0000000007970000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	7970000
Size:	20480

Details

Name:	00000005.00000000.690204054.00000000009E0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	9E0000
Size:	4096

Details

Name:	00000000.00000000.708117940.00000000009F0000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page read and write
Base address:	9F0000
Size:	4096

Details

Name:	00000005.00000000.689832769.0000000002AA3000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AA3000
Size:	16384

Details

Name:	00000005.00000002.932387713.0000000006D04000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6D04000
Size:	4096

Details

Name:	00000012.00000000.841444791.00000000001A0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000004.00000002.699363603.00007FF5203A5000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5203A5000
Size:	12288

Details

Name:	00000005.00000002.933820805.000000000982F000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	982F000
Size:	4096

Details

Name:	00000012.00000000.842863846.000000007FFC0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000005.00000002.932314848.0000000006C70000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6C70000
Size:	65536

Details

Name:	00000005.00000002.932964038.0000000006F9D000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F9D000
Size:	4096

Details

Name:	00000005.00000002.932891954.0000000006F86000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F86000
Size:	4096

Details

Name:	00000008.00000003.713851021.0000000000604000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	604000
Size:	8192

Details

Name:	00000010.00000002.804593820.00000154AC9A0000.00000004.00000020.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	154AC9A0000
Size:	40960

Details

Name:	0000000F.00000002.816272786.000002C32B72B000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B72B000
Size:	167936

Details

Name:	00000005.00000003.693615292.0000000006C94000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C94000
Size:	8192

Details

Name:	00000000.00000002.739566883.0000000007930000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	7930000
Size:	4096

Details

Name:	0000000B.00000002.719242207.00000000022C4000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	22C4000
Size:	20480

Details

Name:	00000008.00000000.702512107.000000007FFC2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000012.00000002.844589716.00000000024F0000.00000004.00000040.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	24F0000
Size:	8192

Details

Name:	00000000.00000000.715511930.0000000008222000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	8222000
Size:	147456

Details

Name:	00000004.00000002.699383573.00007FF5203B7000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5203B7000
Size:	49152

Details

Name:	00000008.00000000.700735754.00000000001A0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000000.00000002.730010735.00000000009E0000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	9E0000
Size:	4096

Details

Name:	00000008.00000000.704203848.0000000000454000.00000040.00000001.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	454000
Size:	28672

Details

Name:	00000005.00000002.932430738.0000000006D25000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6D25000
Size:	8192

Details

Name:	0000000C.00000002.742933757.0000007925BFF000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	7925BFF000
Size:	4096

Details

Name:	00000005.00000002.932067446.00000000053F7000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	53F7000
Size:	4096

Details

Name:	00000008.00000000.703814338.000000007FFD0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000006.00000002.931609513.00007FF4F163F000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F163F000
Size:	16384

Details

Name:	0000000F.00000002.816799278.00007FF5478BF000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5478BF000
Size:	8192

Details

Name:	00000004.00000002.698952683.000001D99C23C000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D99C23C000
Size:	45056

Details

Name:	00000008.00000003.715250100.0000000000A2A000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A2A000
Size:	4096

Details

Name:	00000008.00000000.704109356.00000000001B0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000008.00000003.714175078.0000000000710000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	710000
Size:	135168

Details

Name:	0000000B.00000000.718617219.000000007FBA2000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBA2000
Size:	4096

Details

Name:	0000000F.00000003.800229759.000002C32B798000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B798000
Size:	4096

Details

Name:	00000006.00000000.692247835.00007DF506792000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF506792000
Size:	4096

Details

Name:	0000000C.00000002.743196671.000001AC4F238000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1AC4F238000
Size:	12288

Details

Name:	00000000.00000002.731249015.0000000001240000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	1240000
Size:	20480

Details

Name:	0000000F.00000000.791794240.00007DF55CA60000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55CA60000
Size:	4096

Details

Name:	00000000.00000000.709234785.000000000120E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	120E000
Size:	8192

Details

Name:	00000010.00000003.804232730.00000154AC9C7000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	154AC9C7000
Size:	36864

Details

Name:	00000005.00000002.933140142.0000000006FDF000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6FDF000
Size:	4096

Details

Name:	00000012.00000002.844328549.0000000000294000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	294000
Size:	4096

Details

Name:	0000000F.00000002.816295582.000002C32B757000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B757000
Size:	8192

Details

Name:	0000000F.00000002.816771928.00007FF547893000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547893000
Size:	4096

Details

Name:	0000000C.00000002.743772362.00007FF59207A000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF59207A000
Size:	4096

Details

Name:	00000005.00000000.690106545.0000000000400000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	4096

Details

Name:	00000000.00000003.675498622.0000000007960000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7960000
Size:	8192

Details

Name:	00000005.00000002.932944766.0000000006F97000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F97000
Size:	4096

Details

Name:	00000000.00000003.687465005.0000000001270000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1270000
Size:	12288

Details

Name:	0000000F.00000003.797897180.000002C32B796000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B796000
Size:	131072

Details

Name:	00000008.00000000.700757166.000000007FFB0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000004.00000002.699118510.000001D99C400000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1D99C400000
Size:	4096

Details

Name:	00000005.00000002.932713949.0000000006F53000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F53000
Size:	4096

Details

Name:	00000010.00000002.804909422.00007FF580E0A000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF580E0A000
Size:	4096

Details

Name:	00000012.00000000.840181162.000000007FFC2000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000008.00000002.716400886.00000000022AE000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22AE000
Size:	8192

Details

Name:	00000000.00000000.706338376.000000000827C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	827C000
Size:	4096

Details

Name:	0000000C.00000002.743517970.00007DF5A7210000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A7210000
Size:	4096

Details

Name:	00000010.00000002.805023617.00007FF581214000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF581214000
Size:	20480

Details

Name:	00000008.00000003.713020467.00000000022BD000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22BD000
Size:	28672

Details

Name:	0000000F.00000000.791665889.000002C32AD10000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C32AD10000
Size:	102400

Details

Name:	00000005.00000003.694026642.0000000009340000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9340000
Size:	16384

Details

Name:	00000000.00000000.707917887.00000000008E0000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page read and write
Base address:	8E0000
Size:	4096

Details

Name:	00000000.00000003.675978444.0000000007AE9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7AE9000
Size:	77824

Details

Name:	00000008.00000000.702128178.000000007FFB2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000012.00000002.844395316.0000000000570000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	570000
Size:	4096

Details

Name:	00000004.00000002.699411574.00007FF5203D7000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5203D7000
Size:	28672

Details

Name:	00000000.00000003.663872039.00000000051C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C0000
Size:	57344

Details

Name:	00000006.00000002.930865000.000000B64EAF9000.00000004.00000010.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	B64EAF9000
Size:	28672

Details

Name:	00000000.00000003.664014466.00000000051C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C0000
Size:	28672

Details

Name:	00000000.00000003.663896458.00000000051C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C0000
Size:	16384

Details

Name:	00000010.00000002.804618012.00000154AC9B6000.00000004.00000020.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	154AC9B6000
Size:	69632

Details

Name:	00000004.00000002.699162300.00007DF535512000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF535512000
Size:	4096

Details

Name:	00000000.00000002.730040099.0000000000BC7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	BC7000
Size:	8192

Details

Name:	00000000.00000002.736817712.0000000005185000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5185000
Size:	4096

Details

Name:	0000000F.00000002.816725325.00007FF54782D000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54782D000
Size:	20480

Details

Name:	0000000F.00000002.816134569.000002C32AF16000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32AF16000
Size:	4096

Details

Name:	00000000.00000000.695798767.00000000008A6000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	8A6000
Size:	53248

Details

Name:	00000004.00000002.699424965.00007FF5203EA000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5203EA000
Size:	20480

Details

Name:	0000000C.00000002.742863669.000000792558E000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	792558E000
Size:	8192

Details

Name:	00000004.00000002.699349883.00007FF52039E000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52039E000
Size:	4096

Details

Name:	0000000F.00000002.816750927.00007FF54784C000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54784C000
Size:	8192

Details

Name:	00000012.00000000.842182646.000000007FFB2000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	0000000C.00000002.743438401.000001AC4F850000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1AC4F850000
Size:	4096

Details

Name:	00000000.00000002.731345824.0000000001277000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1277000
Size:	12288

Details

Name:	00000004.00000002.699229567.00007FF51FF75000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51FF75000
Size:	4096

Details

Name:	00000000.00000002.740801711.00000000082D2000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	82D2000
Size:	8192

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000012.00000002.844412458.000000000068D000.00000004.00000010.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	68D000
Size:	12288

Details

Name:	0000000C.00000002.743033699.000001AC4F170000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1AC4F170000
Size:	4096

Details

Name:	00000000.00000002.731165926.000000000120E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	120E000
Size:	8192

Details

Name:	00000008.00000003.712946065.00000000022BD000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22BD000
Size:	28672

Details

Name:	00000005.00000000.689838846.00000000FF140000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF140000
Size:	4096

Details

Name:	00000000.00000000.709117892.000000000119A000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	119A000
Size:	4096

Details

Name:	00000006.00000002.931695504.00007FF4F1686000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F1686000
Size:	8192

Details

Name:	00000008.00000000.700779716.000000007FFC2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000000.00000000.704873174.0000000007440000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	7440000
Size:	8192

Details

Name:	00000000.00000000.709412198.0000000001250000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	1250000
Size:	20480

Details

Name:	0000000B.00000000.718102393.00000000025C3000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	25C3000
Size:	16384

Details

Name:	00000012.00000003.844018009.0000000000B53000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	B53000
Size:	8192

Details

Name:	00000005.00000002.931431002.0000000002A0A000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A0A000
Size:	16384

Details

Name:	0000000C.00000000.725345616.00007FF592182000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF592182000
Size:	16384

Details

Name:	00000008.00000003.711967368.00000000022A2000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A2000
Size:	73728

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	0000000F.00000002.817056041.00007FF547959000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547959000
Size:	32768

Details

Name:	00000000.00000003.664150798.00000000076E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	76E0000
Size:	4096

Details

Name:	00000000.00000000.715742275.0000000008280000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	8280000
Size:	4096

Details

Name:	00000005.00000002.934046378.0000000009E30000.00000040.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page execute and read and write
Base address:	9E30000
Size:	12288

Details

Name:	0000000C.00000002.742886606.00000079258FB000.00000004.00000010.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	79258FB000
Size:	20480

Details

Name:	00000005.00000000.689848507.00000000FF150000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF150000
Size:	4096

Details

Name:	00000000.00000002.739503578.000000000776C000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	776C000
Size:	16384

Details

Name:	00000000.00000002.740548782.0000000008222000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8222000
Size:	147456

Details

Name:	0000000F.00000002.816812212.00007FF5478CC000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5478CC000
Size:	8192

Details

Name:	0000000F.00000002.816506271.00007FF547452000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547452000
Size:	4096

Details

Name:	00000006.00000002.931174122.0000020C12213000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20C12213000
Size:	4096

Details

Name:	00000005.00000002.933621912.0000000009310000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	9310000
Size:	4096

Details

Name:	00000005.00000002.934080341.000000000D98D000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	D98D000
Size:	12288

Details

Name:	00000000.00000000.694310556.00000000007F2000.00000040.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page execute and read and write
Base address:	7F2000
Size:	733184

Details

Name:	00000008.00000002.716525109.000000007FFC2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000008.00000002.716344763.0000000000DB0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	DB0000
Size:	4096

Details

Name:	00000005.00000000.688627718.00000000FF140000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF140000
Size:	4096

Details

Name:	00000005.00000000.690559723.00000000009D0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	9D0000
Size:	16384

Details

Name:	00000005.00000000.688921225.00000000FF160000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF160000
Size:	12288

Details

Name:	00000010.00000002.804687773.00000154AC9EE000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	154AC9EE000
Size:	4096

Details

Name:	00000008.00000002.716533667.000000007FFD0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000000.00000002.730449182.0000000000E8A000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	E8A000
Size:	155648

Details

Name:	00000000.00000002.730142558.0000000000E0E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	E0E000
Size:	8192

Details

Name:	0000000C.00000002.744016795.00007FF592109000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF592109000
Size:	12288

Details

Name:	00000006.00000002.931569943.00007FF4F160A000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F160A000
Size:	8192

Details

Name:	0000000D.00000002.776734638.0000003ED74FE000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3ED74FE000
Size:	8192

Details

Name:	00000000.00000003.687476298.0000000001270000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1270000
Size:	12288

Details

Name:	00000000.00000000.716291706.000000000845A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	845A000
Size:	81920

Details

Name:	00000005.00000002.931247721.00000000029AC000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29AC000
Size:	12288

Details

Name:	00000000.00000002.740425240.00000000081EB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	81EB000
Size:	98304

Details

Name:	00000012.00000000.843687447.000000007FFC2000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000000.00000003.675136737.0000000007710000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7710000
Size:	65536

Details

Name:	0000000F.00000003.794962797.000002C32B7B1000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B7B1000
Size:	131072

Details

Name:	0000000F.00000002.816757864.00007FF547880000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547880000
Size:	4096

Details

Name:	00000000.00000003.663845535.00000000051C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C0000
Size:	28672

Details

Name:	0000000C.00000002.743288404.000001AC4F270000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1AC4F270000
Size:	53248

Details

Name:	00000006.00000002.931100577.0000020C12100000.00000004.00000001.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	20C12100000
Size:	4096

Details

Name:	00000008.00000003.712724806.00000000022B6000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22B6000
Size:	4096

Details

Name:	00000000.00000000.706326790.0000000008278000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	8278000
Size:	4096

Details

Name:	0000000F.00000002.816107301.000002C32AF02000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32AF02000
Size:	16384

Details

Name:	0000000C.00000002.743494536.00007DF5A7202000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A7202000
Size:	4096

Details

Name:	00000005.00000003.695853063.0000000009560000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9560000
Size:	65536

Details

Name:	00000005.00000002.932379068.0000000006D02000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6D02000
Size:	4096

Details

Name:	00000008.00000000.700107024.000000007FFB0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000005.00000000.690223612.00000000FF150000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF150000
Size:	4096

Details

Name:	00000000.00000003.662856802.0000000002C20000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C20000
Size:	65536

Details

Name:	00000010.00000002.805015252.00007FF5811AD000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5811AD000
Size:	16384

Details

Name:	00000005.00000002.933842678.000000000996E000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	996E000
Size:	8192

Details

Name:	00000008.00000000.702487819.000000007FFB0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000000.00000003.663913909.00000000051C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C0000
Size:	28672

Details

Name:	00000005.00000000.690193900.00000000009D0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	9D0000
Size:	16384

Details

Name:	00000000.00000003.664134235.00000000051C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C0000
Size:	12288

Details

Name:	00000005.00000000.688912862.00000000FF150000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF150000
Size:	4096

Details

Name:	0000000F.00000002.813610055.000000DB3767E000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DB3767E000
Size:	8192

Details

Name:	00000000.00000003.663830563.00000000051C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C0000
Size:	16384

Details

Name:	00000000.00000000.705020112.0000000007700000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap private
Protect:	page read and write
Base address:	7700000
Size:	61440

Details

Name:	00000005.00000003.693668227.0000000006C90000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C90000
Size:	24576

Details

Name:	00000000.00000000.662149346.00000000007F0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F0000
Size:	4096

Details

Name:	00000012.00000000.842843891.000000007FFB0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000005.00000003.698795500.0000000009D40000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9D40000
Size:	12288

Details

Name:	00000000.00000000.715388944.00000000081E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	81E0000
Size:	40960

Details

Name:	0000000D.00000002.776781330.0000003ED7877000.00000004.00000010.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	3ED7877000
Size:	36864

Details

Name:	00000005.00000003.694010931.0000000009340000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9340000
Size:	28672

Details

Name:	00000008.00000000.701203499.000000007FFD0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	0000000F.00000002.813630177.000000DB376FE000.00000004.00000010.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	DB376FE000
Size:	8192

Details

Name:	00000008.00000000.699744316.000000007FFB2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000000.00000000.698962982.0000000001262000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	1262000
Size:	12288

Details

Name:	00000000.00000000.703246623.000000000518C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	518C000
Size:	4096

Details

Name:	00000000.00000000.706273898.0000000008222000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	8222000
Size:	147456

Details

Name:	00000005.00000003.692316674.0000000006C90000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C90000
Size:	12288

Details

Name:	00000008.00000003.712751733.00000000022BD000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22BD000
Size:	12288

Details

Name:	00000005.00000002.933031490.0000000006FAC000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6FAC000
Size:	4096

Details

Name:	00000005.00000002.933833539.000000000986E000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	986E000
Size:	8192

Details

Name:	00000000.00000002.736732053.000000000516F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	516F000
Size:	4096

Details

Name:	00000012.00000000.840470297.000000007FFB2000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	0000000C.00000002.743406536.000001AC4F4D0000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1AC4F4D0000
Size:	4096

Details

Name:	00000000.00000000.712394176.0000000005194000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	5194000
Size:	36864

Details

Name:	00000000.00000003.664207121.00000000076E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	76E0000
Size:	16384

Details

Name:	0000000D.00000002.778283682.00007FF4EB25C000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4EB25C000
Size:	8192

Details

Name:	00000008.00000003.712617817.00000000022B7000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22B7000
Size:	20480

Details

Name:	00000005.00000002.931910919.00000000051B0000.00000004.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	51B0000
Size:	16384

Details

Name:	00000008.00000002.716206080.0000000000710000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	710000
Size:	4096

Details

Name:	00000000.00000000.698349317.0000000000EBC000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	EBC000
Size:	4096

Details

Name:	00000008.00000003.713131915.00000000022BD000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22BD000
Size:	28672

Details

Name:	00000000.00000002.736419251.00000000050B0000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	50B0000
Size:	679936

Details

Name:	0000000B.00000002.719392136.00000000025B2000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	25B2000
Size:	12288

Details

Name:	0000000F.00000002.816095757.000002C32AEF8000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32AEF8000
Size:	36864

Details

Name:	00000000.00000002.731152374.00000000011C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	11C0000
Size:	4096

Details

Name:	00000006.00000002.931419001.00007FF4F0E5A000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F0E5A000
Size:	20480

Details

Name:	0000000D.00000002.778345022.00007FF4EB287000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4EB287000
Size:	49152

Details

Name:	00000000.00000000.708025805.0000000000960000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	960000
Size:	4096

Details

Name:	00000008.00000002.716495828.000000007FFB2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000006.00000002.931302219.00007DF506792000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF506792000
Size:	4096

Details

Name:	0000000D.00000002.778453998.00007FF4EB2ED000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4EB2ED000
Size:	16384

Details

Name:	0000000D.00000002.777387406.000001F86AC2A000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F86AC2A000
Size:	12288

Details

Name:	00000005.00000002.933409868.0000000007013000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7013000
Size:	4096

Details

Name:	0000000F.00000003.797989418.000002C32B794000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B794000
Size:	4096

Details

Name:	00000008.00000000.702160531.000000007FFC2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000000.00000002.730831579.0000000000F57000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	F57000
Size:	102400

Details

Name:	00000006.00000002.930875671.0000020C11DB0000.00000004.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	20C11DB0000
Size:	4096

Details

Name:	00000012.00000000.840454158.00000000001C0000.00000004.00000001.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	1C0000
Size:	4096

Details

Name:	00000008.00000003.712128129.00000000022B7000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22B7000
Size:	20480

Details

Name:	00000012.00000000.843660025.000000007FFB0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000008.00000003.712402566.00000000022B6000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22B6000
Size:	4096

Details

Name:	00000000.00000003.676027122.0000000008439000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	8439000
Size:	380928

Details

Name:	0000000C.00000002.743733794.00007FF591FE3000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF591FE3000
Size:	24576

Details

Name:	00000012.00000000.840142519.0000000000040000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	0000000C.00000002.743217855.000001AC4F23C000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1AC4F23C000
Size:	69632

Details

Name:	00000000.00000000.712433906.00000000051C0000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	51C0000
Size:	4096

Details

Name:	0000000C.00000002.743615818.00007FF591C65000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF591C65000
Size:	4096

Details

Name:	0000000F.00000002.816846191.00007FF5478EB000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5478EB000
Size:	45056

Details

Name:	00000008.00000000.704233193.000000007FFB2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000000.00000003.663950163.00000000051C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C0000
Size:	57344

Details

Name:	00000005.00000002.931051349.0000000000A96000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	A96000
Size:	4096

Details

Name:	00000006.00000002.931286471.00007DF506790000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF506790000
Size:	4096

Details

Name:	00000000.00000000.706172364.00000000081E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	81E0000
Size:	40960

Details

Name:	0000000F.00000003.793527333.000002C32AEA9000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32AEA9000
Size:	16384

Details

Name:	00000005.00000002.932787215.0000000006F68000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F68000
Size:	4096

Details

Name:	0000000C.00000002.743763072.00007FF591FFC000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF591FFC000
Size:	8192

Details

Name:	00000010.00000003.804188575.00000154AC9DE000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	154AC9DE000
Size:	4096

Details

Name:	00000000.00000002.729763591.00000000008A6000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	8A6000
Size:	53248

Details

Name:	00000000.00000003.663496688.0000000002C35000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C35000
Size:	12288

Details

Name:	00000000.00000003.687455236.0000000001270000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1270000
Size:	12288

Details

Name:	00000005.00000003.691836478.0000000006C90000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C90000
Size:	65536

Details

Name:	00000000.00000002.731361037.0000000001280000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1280000
Size:	4096

Details

Name:	0000000F.00000003.813358117.000002C32AE64000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32AE64000
Size:	4096

Details

Name:	0000000D.00000002.778253467.00007FF4EB1C3000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4EB1C3000
Size:	24576

Details

Name:	00000000.00000001.662313669.00000000007F0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	image loaded
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F0000
Size:	4096

Details

Name:	00000012.00000002.844240322.0000000000040000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000000.00000000.706213690.00000000081EB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	81EB000
Size:	98304

Details

Name:	00000000.00000000.705182627.0000000007920000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page read and write
Base address:	7920000
Size:	4096

Details

Name:	0000000D.00000002.778477358.00007FF4EB35A000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4EB35A000
Size:	12288

Details

Name:	0000000F.00000002.816763946.00007FF547882000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547882000
Size:	24576

Details

Name:	0000000F.00000002.815559231.000002C32AE3C000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32AE3C000
Size:	86016

Details

Name:	00000000.00000000.708332562.0000000000E60000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	E60000
Size:	12288

Details

Name:	00000004.00000002.698675654.0000007A3907F000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	7A3907F000
Size:	4096

Details

Name:	00000005.00000000.689813895.00000000009D0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	9D0000
Size:	16384

Details

Name:	00000000.00000002.740858591.000000000845A000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	845A000
Size:	81920

Details

Name:	00000006.00000002.931740513.00007FF4F16FA000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F16FA000
Size:	12288

Details

Name:	00000005.00000002.932851230.0000000006F79000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F79000
Size:	4096

Details

Name:	00000012.00000000.842813198.00000000001B0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000008.00000000.700429918.000000007FFB0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000005.00000002.932479088.0000000006D7E000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	6D7E000
Size:	8192

Details

Name:	00000012.00000002.844360081.0000000000419000.00000040.00000001.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	419000
Size:	12288

Details

Name:	0000000B.00000002.719301302.000000000251F000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	251F000
Size:	8192

Details

Name:	00000010.00000003.804164844.00000154AC9D3000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	154AC9D3000
Size:	4096

Details

Name:	00000005.00000002.932083957.0000000005410000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5410000
Size:	4096

Details

Name:	0000000B.00000002.719510799.0000000002CEE000.00000004.00000010.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2CEE000
Size:	8192

Details

Name:	00000000.00000000.715140542.0000000008185000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	8185000
Size:	143360

Details

Name:	00000012.00000000.840482865.000000007FFC2000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000000.00000002.731875753.0000000002C60000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	2C60000
Size:	32768

Details

Name:	00000008.00000000.699711218.0000000000040000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000012.00000000.843680964.000000007FFC0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000005.00000002.932600302.0000000006F33000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F33000
Size:	4096

Details

Name:	00000005.00000002.933439682.0000000007E91000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7E91000
Size:	12288

Details

Name:	00000000.00000002.739818683.0000000007A70000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	7A70000
Size:	573440

Details

Name:	00000012.00000000.841453124.00000000001B0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	0000000F.00000002.816577788.00007FF547690000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547690000
Size:	4096

Details

Name:	00000000.00000003.676003590.0000000007AF3000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7AF3000
Size:	36864

Details

Name:	0000000F.00000002.813872657.000002C32ACF0000.00000004.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2C32ACF0000
Size:	4096

Details

Name:	00000010.00000003.804282267.00000154AC9E7000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	154AC9E7000
Size:	24576

Details

Name:	00000008.00000000.702518563.000000007FFD0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000000.00000003.676491459.0000000001240000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1240000
Size:	12288

Details

Name:	00000005.00000002.931263739.00000000029BD000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29BD000
Size:	4096

Details

Name:	00000008.00000000.700373552.0000000000040000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000005.00000002.932858001.0000000006F7B000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F7B000
Size:	4096

Details

Name:	0000000F.00000002.816466826.00007FF547237000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547237000
Size:	4096

Details

Name:	00000005.00000002.933259856.0000000006FF5000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6FF5000
Size:	4096

Details

Name:	00000000.00000000.696120343.00000000009C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	9C0000
Size:	8192

Details

Name:	00000000.00000000.715727192.000000000827C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	827C000
Size:	4096

Details

Name:	00000000.00000000.698926401.0000000001250000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	1250000
Size:	20480

Details

Name:	00000008.00000003.715239357.0000000000A27000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	A27000
Size:	4096

Details

Name:	0000000B.00000002.719565843.00000000031B0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	31B0000
Size:	65536

Details

Name:	00000008.00000003.712310402.00000000022B6000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22B6000
Size:	4096

Details

Name:	00000000.00000000.698913505.0000000001230000.00000040.00000040.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	1230000
Size:	4096

Details

Name:	00000010.00000002.804492112.00000002FC3FF000.00000004.00000010.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	2FC3FF000
Size:	4096

Details

Name:	00000000.00000002.730604414.0000000000EC8000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	EC8000
Size:	233472

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000008.00000003.714484234.0000000000605000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	605000
Size:	4096

Details

Name:	00000000.00000000.716095698.00000000082C8000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	82C8000
Size:	28672

Details

Name:	00000005.00000002.932076227.00000000053FB000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	53FB000
Size:	4096

Details

Name:	00000004.00000002.698741255.000001D99C070000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1D99C070000
Size:	102400

Details

Name:	0000000D.00000002.778357757.00007FF4EB29C000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4EB29C000
Size:	4096

Details

Name:	0000000F.00000002.815795547.000002C32AE6E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32AE6E000
Size:	86016

Details

Name:	00000008.00000003.712232690.00000000022A2000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A2000
Size:	73728

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000000.00000000.712332296.000000000516F000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	516F000
Size:	4096

Details

Name:	00000005.00000003.696400977.0000000009D40000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9D40000
Size:	12288

Details

Name:	00000000.00000003.675748435.0000000007B80000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7B80000
Size:	53248

Details

Name:	00000008.00000000.700139773.000000007FFD0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000008.00000000.702771209.00000000001A0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000000.00000000.709878077.0000000002C50000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	2C50000
Size:	65536

Details

Name:	00000012.00000002.844446572.00000000006D0000.00000004.00000020.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	6D0000
Size:	24576

Details

Name:	00000004.00000002.698852827.000001D99C0A0000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1D99C0A0000
Size:	4096

Details

Name:	00000005.00000000.688583151.00000000009B0000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	9B0000
Size:	102400

Details

Name:	00000006.00000002.931724964.00007FF4F16F4000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F16F4000
Size:	20480

Details

Name:	00000005.00000002.931918460.00000000053C3000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	53C3000
Size:	4096

Details

Name:	0000000D.00000002.778290164.00007FF4EB26A000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4EB26A000
Size:	8192

Details

Name:	0000000D.00000002.778466642.00007FF4EB354000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4EB354000
Size:	20480

Details

Name:	00000005.00000002.933788248.00000000096EB000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	96EB000
Size:	20480

Details

Name:	00000008.00000003.712971374.00000000022AF000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22AF000
Size:	20480

Details

Name:	00000012.00000000.842155318.0000000000400000.00000040.00000001.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	77824

Details

Name:	00000000.00000000.696491141.0000000000E70000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	E70000
Size:	4096

Details

Name:	00000012.00000000.843624834.00000000001B0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000005.00000000.689195063.00000000FF150000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF150000
Size:	4096

Details

Name:	00000005.00000002.932972051.0000000006FA0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6FA0000
Size:	4096

Details

Name:	00000000.00000003.675942731.0000000007B0B000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7B0B000
Size:	81920

Details

Name:	00000000.00000000.715095685.0000000008165000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	8165000
Size:	126976

Details

Name:	00000000.00000000.713608566.00000000076E6000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	76E6000
Size:	40960

Details

Name:	00000008.00000000.700702829.0000000000040000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	40000
Size:	102400

Details

Name:	00000005.00000002.933592081.0000000008696000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8696000
Size:	4096

Details

Name:	00000005.00000002.932126221.0000000005430000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	5430000
Size:	65536

Details

Name:	00000005.00000002.933102919.0000000006FD6000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6FD6000
Size:	4096

Details

Name:	00000000.00000000.713762641.0000000007720000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	7720000
Size:	4096

Details

Name:	00000000.00000000.713884094.0000000007940000.00000004.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page read and write
Base address:	7940000
Size:	4096

Details

Name:	00000000.00000000.709366266.0000000001230000.00000040.00000040.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	1230000
Size:	4096

Details

Name:	00000005.00000002.932773234.0000000006F64000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F64000
Size:	4096

Details

Name:	00000000.00000002.740992789.000000007F750000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F750000
Size:	20480

Details

Name:	0000000D.00000002.778021343.00007FF4EA9A7000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4EA9A7000
Size:	20480

Details

Name:	00000005.00000002.932728741.0000000006F57000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F57000
Size:	4096

Details

Name:	00000008.00000003.712369512.00000000022B6000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22B6000
Size:	4096

Details

Name:	00000000.00000000.707973643.000000000094C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	94C000
Size:	16384

Details

Name:	00000000.00000000.708151595.0000000000BCB000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	BCB000
Size:	4096

Details

Name:	00000012.00000002.844421092.0000000000690000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	690000
Size:	16384

Details

Name:	00000008.00000000.702878908.000000007FFC0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000010.00000002.804801899.00007DF5962A2000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5962A2000
Size:	4096

Details

Name:	00000006.00000002.931457478.00007FF4F0EA6000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F0EA6000
Size:	4096

Details

Name:	00000008.00000000.700772028.000000007FFC0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000000.00000000.696366623.0000000000CF4000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	CF4000
Size:	49152

Details

Name:	00000000.00000000.703339718.00000000051B0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	51B0000
Size:	45056

Details

Name:	00000008.00000003.712081309.00000000022A2000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22A2000
Size:	73728

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	00000004.00000002.698686598.0000007A3917C000.00000004.00000010.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	7A3917C000
Size:	16384

Details

Name:	00000000.00000000.705840785.0000000007AFF000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	7AFF000
Size:	167936

Details

Name:	0000000D.00000002.777662721.000001F86AC7B000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1F86AC7B000
Size:	28672

Details

Name:	0000000B.00000002.719424315.0000000002A20000.00000004.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	2A20000
Size:	4096

Details

Name:	00000008.00000003.715176155.00000000021F0000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	21F0000
Size:	4096

Details

Name:	00000000.00000003.675115810.0000000007730000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	7730000
Size:	20480

Details

Name:	0000000B.00000002.719612469.000000007FBA0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBA0000
Size:	4096

Details

Name:	0000000B.00000000.718944332.000000007FBA2000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBA2000
Size:	4096

Details

Name:	00000000.00000000.708376632.0000000000E74000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	E74000
Size:	4096

Details

Name:	00000000.00000000.708388427.0000000000E7D000.00000040.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	E7D000
Size:	4096

Details

Name:	00000000.00000000.708491347.0000000000EB1000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	EB1000
Size:	36864

Details

Name:	00000005.00000002.932804498.0000000006F6C000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F6C000
Size:	4096

Details

Name:	00000000.00000002.736400537.0000000004D6D000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	4D6D000
Size:	12288

Details

Name:	00000004.00000002.699530075.00007FF520491000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF520491000
Size:	20480

Details

Name:	00000005.00000003.693524459.0000000006C90000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C90000
Size:	65536

Details

Name:	00000004.00000000.687134953.00007DF535520000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF535520000
Size:	4096

Details

Name:	00000005.00000002.932423835.0000000006D20000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6D20000
Size:	4096

Details

Name:	0000000F.00000002.816899605.00007FF54790C000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54790C000
Size:	4096

Details

Name:	00000004.00000002.699342865.00007FF52039A000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF52039A000
Size:	8192

Details

Name:	00000008.00000003.714086824.0000000000604000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	604000
Size:	8192

Details

Name:	0000000F.00000002.816073694.000002C32AEE0000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32AEE0000
Size:	28672

Details

Name:	00000000.00000002.740374399.00000000081C9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	81C9000
Size:	90112

Details

Name:	00000000.00000002.730155173.0000000000E4E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	E4E000
Size:	8192

Details

Name:	00000006.00000000.692339910.00007FF4F1702000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F1702000
Size:	16384

Details

Name:	00000004.00000002.699207287.00007FF51FADF000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51FADF000
Size:	4096

Details

Name:	00000005.00000002.931903568.0000000004F5C000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	4F5C000
Size:	8192

Details

Name:	00000006.00000002.931232251.00007DF404650000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF404650000
Size:	20480

Details

Name:	00000010.00000002.804533550.00000154AC830000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	154AC830000
Size:	102400

Details

Name:	00000005.00000002.931311909.00000000029CC000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	29CC000
Size:	12288

Details

Name:	00000010.00000002.804657385.00000154AC9D5000.00000004.00000001.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	154AC9D5000
Size:	24576

Details

Name:	0000000B.00000000.718577273.0000000002A30000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A30000
Size:	102400

Details

Name:	0000000C.00000002.743969113.00007FF5920E4000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5920E4000
Size:	20480

Details

Name:	00000005.00000002.934108930.00000000FEFE0000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	FEFE0000
Size:	4096

Details

Name:	00000000.00000000.706294909.0000000008247000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	8247000
Size:	57344

Details

Name:	00000004.00000002.699244196.00007FF520150000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF520150000
Size:	4096

Details

Name:	00000005.00000003.695529225.0000000009560000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9560000
Size:	12288

Details

Name:	00000012.00000002.844308321.00000000001B0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000004.00000002.698833857.000001D99C090000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1D99C090000
Size:	12288

Details

Name:	00000005.00000003.692326572.0000000006C80000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C80000
Size:	65536

Details

Name:	00000000.00000000.713849898.000000000791D000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	791D000
Size:	12288

Details

Name:	00000000.00000003.663768465.00000000051C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C0000
Size:	20480

Details

Name:	00000000.00000002.741036844.000000007F862000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F862000
Size:	4096

Details

Name:	0000000F.00000003.797924386.000002C32B783000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B783000
Size:	65536

Details

Name:	0000000F.00000002.816785119.00007FF5478AF000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5478AF000
Size:	4096

Details

Name:	0000000F.00000002.816672370.00007FF5477A1000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5477A1000
Size:	8192

Details

Name:	00000000.00000003.663364868.0000000002C26000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C26000
Size:	20480

Details

Name:	00000000.00000000.699211164.0000000002C1E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	2C1E000
Size:	8192

Details

Name:	0000000D.00000002.776689088.0000003ED718B000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	3ED718B000
Size:	20480

Details

Name:	00000005.00000000.689483327.00000000FF150000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF150000
Size:	4096

Details

Name:	00000008.00000000.700131178.000000007FFC2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000008.00000002.715583205.00000000001A0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000005.00000002.933721438.0000000009500000.00000040.00000040.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page execute and read and write
Base address:	9500000
Size:	4096

Details

Name:	00000008.00000000.703684009.000000007FFB0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	0000000F.00000002.816440173.00007FF54701D000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54701D000
Size:	4096

Details

Name:	0000000D.00000002.778445440.00007FF4EB2E9000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4EB2E9000
Size:	12288

Details

Name:	0000000F.00000002.816917750.00007FF54790F000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF54790F000
Size:	16384

Details

Name:	00000006.00000002.931473294.00007FF4F0EA8000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F0EA8000
Size:	4096

Details

Name:	00000000.00000003.662868118.0000000002C20000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C20000
Size:	4096

Details

Name:	0000000F.00000000.791811474.00007DF55CA62000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF55CA62000
Size:	4096

Details

Name:	00000000.00000002.730222656.0000000000E60000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	E60000
Size:	12288

Details

Name:	00000005.00000000.689428975.0000000000400000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	4096

Details

Name:	00000000.00000003.675165310.00000000076F0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	76F0000
Size:	12288

Details

Name:	00000005.00000002.933392752.000000000700E000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	700E000
Size:	8192

Details

Name:	00000000.00000000.708566677.0000000000EC7000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	EC7000
Size:	237568

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000005.00000002.932899047.0000000006F88000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F88000
Size:	4096

Details

Name:	00000006.00000002.931512857.00007FF4F1591000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F1591000
Size:	8192

Details

Name:	0000000F.00000002.816649137.00007FF547783000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF547783000
Size:	24576

Details

Name:	0000000F.00000002.815653644.000002C32AE62000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32AE62000
Size:	8192

Details

Name:	00000005.00000003.698952105.0000000009E40000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	stack
Protect:	page read and write
Base address:	9E40000
Size:	20480

Details

Name:	00000000.00000003.662842953.0000000002C40000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C40000
Size:	8192

Details

Name:	0000000D.00000002.777991563.00007DF500400000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF500400000
Size:	12288

Details

Name:	00000008.00000000.703248524.00000000001A0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000005.00000002.932661906.0000000006F44000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F44000
Size:	4096

Details

Name:	00000012.00000000.840765048.00000000001B0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1B0000
Size:	4096

Details

Name:	00000000.00000000.696417785.0000000000E0E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	E0E000
Size:	8192

Details

Name:	00000000.00000000.696465556.0000000000E50000.00000004.00000040.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap private
Protect:	page read and write
Base address:	E50000
Size:	12288

Details

Name:	00000012.00000000.841817311.000000007FFB0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000008.00000003.713153428.00000000022AF000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22AF000
Size:	20480

Details

Name:	00000005.00000003.696315848.0000000009560000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9560000
Size:	32768

Details

Name:	00000008.00000002.716433547.00000000022C3000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	22C3000
Size:	12288

Details

Name:	00000008.00000003.704773674.0000000002671000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2671000
Size:	872448

Details

Name:	00000005.00000002.932026493.00000000053F0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	53F0000
Size:	4096

Details

Name:	0000000D.00000000.764245022.00007DF5003E2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5003E2000
Size:	4096

Details

Name:	00000005.00000003.691873823.0000000006C80000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C80000
Size:	28672

Details

Name:	00000010.00000002.804934314.00007FF58113B000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58113B000
Size:	20480

Details

Name:	00000000.00000002.731473974.0000000001300000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	1300000
Size:	32768

Details

Name:	0000000D.00000002.777983864.00007DF5003F2000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5003F2000
Size:	4096

Details

Name:	00000006.00000002.931263053.00007DF506782000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF506782000
Size:	4096

Details

Name:	00000006.00000002.931560617.00007FF4F15FC000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F15FC000
Size:	8192

Details

Name:	00000012.00000000.841172551.000000007FFC0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000004.00000002.699432599.00007FF5203F4000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5203F4000
Size:	20480

Details

Name:	00000005.00000000.688279738.0000000002AA3000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AA3000
Size:	16384

Details

Name:	00000000.00000000.716642440.000000007F870000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F870000
Size:	12288

Details

Name:	00000008.00000000.704253563.000000007FFC0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	00000000.00000000.662287726.000000007F860000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F860000
Size:	4096

Details

Name:	00000005.00000000.689468127.0000000002AA3000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AA3000
Size:	16384

Details

Name:	00000000.00000000.709595643.00000000012B0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	12B0000
Size:	4096

Details

Name:	0000000F.00000003.799786538.000002C32B798000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B798000
Size:	143360

Details

Name:	00000000.00000003.663380704.0000000002C30000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C30000
Size:	16384

Details

Name:	00000008.00000000.699762754.000000007FFD0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFD0000
Size:	12288

Details

Name:	00000006.00000002.931625362.00007FF4F1647000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F1647000
Size:	28672

Details

Name:	00000000.00000000.716425974.00000000084D7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	84D7000
Size:	176128

Details

Name:	0000000D.00000002.778277796.00007FF4EB25A000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4EB25A000
Size:	4096

Details

Name:	0000000D.00000002.778240771.00007FF4EB1BD000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4EB1BD000
Size:	20480

Details

Name:	00000000.00000003.687545859.000000000128E000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	128E000
Size:	8192

Details

Name:	00000000.00000000.715832711.0000000008290000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	8290000
Size:	4096

Details

Name:	00000012.00000000.842196642.000000007FFC2000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000005.00000002.931633318.0000000002A98000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A98000
Size:	20480

Details

Name:	0000000F.00000002.816597375.00007FF5476A6000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5476A6000
Size:	4096

Details

Name:	00000000.00000000.699185395.0000000002B9E000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	2B9E000
Size:	8192

Details

Name:	00000000.00000003.691394502.0000000001280000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1280000
Size:	16384

Details

Name:	00000000.00000000.696475417.0000000000E60000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	E60000
Size:	12288

Details

Name:	00000000.00000000.706945244.00000000084D7000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	84D7000
Size:	176128

Details

Name:	00000000.00000002.736789349.000000000517D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	517D000
Size:	4096

Details

Name:	0000000F.00000003.801213753.000002C32B798000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B798000
Size:	397312

Details

Name:	00000004.00000002.699144131.000001D99CA02000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D99CA02000
Size:	4096

Details

Name:	0000000F.00000002.816256589.000002C32B71F000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B71F000
Size:	4096

Details

Name:	00000000.00000003.663552948.0000000002C40000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C40000
Size:	16384

Details

Name:	00000005.00000003.694461278.0000000009350000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9350000
Size:	65536

Details

Name:	00000000.00000000.713824692.0000000007770000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	7770000
Size:	65536

Details

Name:	00000008.00000000.702506036.000000007FFC0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	0000000C.00000002.743257020.000001AC4F253000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1AC4F253000
Size:	114688

Details

Name:	00000000.00000000.704977636.00000000076F0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	76F0000
Size:	61440

Details

Name:	00000005.00000000.689180858.0000000002AA3000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	2AA3000
Size:	16384

Details

Name:	00000005.00000002.933116547.0000000006FDB000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6FDB000
Size:	4096

Details

Name:	00000008.00000002.716236440.0000000000748000.00000004.00000020.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	748000
Size:	114688

Details

Name:	0000000F.00000002.816876851.00007FF5478F7000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5478F7000
Size:	49152

Details

Name:	00000005.00000002.932918591.0000000006F8E000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6F8E000
Size:	4096

Details

Name:	0000000D.00000002.778427817.00007FF4EB2DE000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4EB2DE000
Size:	16384

Details

Name:	00000008.00000000.701571018.000000007FFB0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB0000
Size:	4096

Details

Name:	00000006.00000002.930917617.0000020C11DF0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	20C11DF0000
Size:	12288

Details

Name:	0000000F.00000002.816141049.000002C32B0D0000.00000002.00020000.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2C32B0D0000
Size:	4096

Details

Name:	00000000.00000000.715939452.00000000082BA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	82BA000
Size:	16384

Details

Name:	00000004.00000002.699221389.00007FF51FF66000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF51FF66000
Size:	32768

Details

Name:	00000000.00000000.698387590.0000000000EC7000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	EC7000
Size:	237568

Signature Hits	Behavior Group	Mitre Attack
Binary contains paths to debug symbols	Compliance, System Summary

Details

Name:	00000000.00000000.698825248.00000000011A0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	11A0000
Size:	4096

Details

Name:	00000008.00000003.714379549.00000000021F1000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	21F1000
Size:	65536

Details

Name:	00000004.00000000.687116407.000001D99C070000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1D99C070000
Size:	102400

Details

Name:	00000000.00000002.736760683.0000000005174000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	5174000
Size:	4096

Details

Name:	00000005.00000002.933640035.0000000009330000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	9330000
Size:	65536

Details

Name:	00000005.00000003.691787298.0000000006C80000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6C80000
Size:	8192

Details

Name:	00000005.00000002.930951947.0000000000990000.00000004.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	990000
Size:	4096

Details

Name:	00000005.00000003.694383816.0000000009350000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	9350000
Size:	16384

Details

Name:	00000000.00000002.741025381.000000007F860000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F860000
Size:	4096

Details

Name:	0000000B.00000000.718955507.000000007FBB0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FBB0000
Size:	4096

Details

Name:	0000000C.00000002.743171021.000001AC4F229000.00000004.00000001.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1AC4F229000
Size:	57344

Details

Name:	00000000.00000000.707205785.000000007F870000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7F870000
Size:	12288

Details

Name:	0000000C.00000002.743992608.00007FF5920F8000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF5920F8000
Size:	12288

Details

Name:	00000004.00000002.699109415.000001D99C313000.00000004.00000001.sdmp
TargetID:	4
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	1D99C313000
Size:	12288

Details

Name:	00000008.00000002.715445491.0000000000030000.00000004.00020000.sdmp
TargetID:	8
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page read and write
Base address:	30000
Size:	4096

Details

Name:	0000000B.00000002.719556856.0000000002FB0000.00000002.00020000.sdmp
TargetID:	11
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2FB0000
Size:	32768

Details

Name:	00000012.00000000.843609979.00000000001A0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000012.00000002.844470749.00000000006D8000.00000004.00000020.sdmp
TargetID:	18
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	6D8000
Size:	110592

Details

Name:	0000000D.00000002.778146197.00007FF4EB0C1000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4EB0C1000
Size:	12288

Details

Name:	00000000.00000000.703263624.0000000005191000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	5191000
Size:	8192

Details

Name:	00000008.00000003.713097202.00000000022C1000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22C1000
Size:	12288

Details

Name:	00000008.00000000.702887279.000000007FFC2000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC2000
Size:	4096

Details

Name:	00000005.00000000.690481759.0000000000400000.00000040.00000001.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown
Protect:	page execute and read and write
Base address:	400000
Size:	4096

Details

Name:	00000010.00000002.804694394.00000154ACAA0000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	154ACAA0000
Size:	16384

Details

Name:	0000000F.00000003.794712381.000002C32B791000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B791000
Size:	90112

Details

Name:	00000006.00000002.930890224.0000020C11DD0000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	20C11DD0000
Size:	102400

Details

Name:	00000006.00000002.931248861.00007DF506780000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF506780000
Size:	4096

Details

Name:	0000000C.00000002.743602977.00007FF591C56000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF591C56000
Size:	32768

Details

Name:	0000000D.00000003.775561767.000001F86AC48000.00000004.00000001.sdmp
TargetID:	13
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1F86AC48000
Size:	16384

Details

Name:	00000000.00000003.662730552.00000000012E0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	12E0000
Size:	61440

Details

Name:	00000000.00000000.705095227.000000000776C000.00000004.00000010.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	stack
Protect:	page read and write
Base address:	776C000
Size:	16384

Details

Name:	0000000C.00000000.725274899.00007DF5A7200000.00000002.00020000.sdmp
TargetID:	12
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF5A7200000
Size:	4096

Details

Name:	00000000.00000002.730571387.0000000000EBF000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	heap default
Protect:	page read and write
Base address:	EBF000
Size:	28672

Details

Name:	0000000F.00000003.796089631.000002C32BC02000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32BC02000
Size:	94208

Details

Name:	00000005.00000002.933804554.000000000972E000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	972E000
Size:	8192

Details

Name:	00000008.00000003.713946143.0000000000604000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	604000
Size:	8192

Details

Name:	00000010.00000002.804994721.00007FF581198000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF581198000
Size:	12288

Details

Name:	00000000.00000003.675372716.00000000076F0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	76F0000
Size:	28672

Details

Name:	00000000.00000000.715342551.00000000081C9000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown
Protect:	page read and write
Base address:	81C9000
Size:	90112

Details

Name:	00000005.00000002.932294661.0000000006C2E000.00000004.00000010.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	stack
Protect:	page read and write
Base address:	6C2E000
Size:	8192

Details

Name:	00000005.00000002.933010426.0000000006FA8000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6FA8000
Size:	4096

Details

Name:	00000010.00000002.804705370.00000154ACC10000.00000004.00000040.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	heap private
Protect:	page read and write
Base address:	154ACC10000
Size:	12288

Details

Name:	00000012.00000000.843667755.000000007FFB2000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFB2000
Size:	4096

Details

Name:	00000005.00000002.933315394.0000000006FFF000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6FFF000
Size:	16384

Details

Name:	00000005.00000002.932170252.0000000005450000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	5450000
Size:	32768

Details

Name:	00000012.00000000.841831798.000000007FFC0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FFC0000
Size:	4096

Details

Name:	0000000F.00000002.816333393.000002C32B77E000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B77E000
Size:	32768

Details

Name:	00000005.00000002.932979005.0000000006FA2000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6FA2000
Size:	4096

Details

Name:	00000005.00000003.691820634.0000000006CA0000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	6CA0000
Size:	45056

Details

Name:	00000000.00000000.662269318.00000000008F0000.00000002.00020000.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	8F0000
Size:	102400

Details

Name:	00000000.00000002.740874951.000000000848D000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	848D000
Size:	299008

Details

Name:	00000005.00000000.689489137.00000000FF152000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	FF152000
Size:	4096

Details

Name:	00000004.00000000.687131675.00007DF535512000.00000002.00020000.sdmp
TargetID:	4
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	7DF535512000
Size:	4096

Details

Name:	00000000.00000003.663988779.00000000051C0000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	51C0000
Size:	20480

Details

Name:	00000000.00000003.691340345.0000000001290000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	1290000
Size:	40960

Details

Name:	0000000D.00000002.778097240.00007FF4EAE45000.00000002.00020000.sdmp
TargetID:	13
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4EAE45000
Size:	4096

Details

Name:	00000008.00000000.701514161.00000000001A0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000005.00000002.931480714.0000000002A26000.00000002.00020000.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	2A26000
Size:	16384

Details

Name:	0000000F.00000003.799839534.000002C32B798000.00000004.00000001.sdmp
TargetID:	15
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	2C32B798000
Size:	147456

Details

Name:	00000012.00000000.840755496.00000000001A0000.00000002.00020000.sdmp
TargetID:	18
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000010.00000002.804988198.00007FF58118E000.00000002.00020000.sdmp
TargetID:	16
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF58118E000
Size:	12288

Details

Name:	00000000.00000002.729894356.000000000094C000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	94C000
Size:	16384

Details

Name:	00000006.00000002.931546628.00007FF4F15FA000.00000002.00020000.sdmp
TargetID:	6
Dumpstage:	process exit
Regiontype:	unkown image
Protect:	page readonly
Base address:	7FF4F15FA000
Size:	4096

Details

Name:	00000000.00000002.740090601.0000000008101000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	8101000
Size:	98304

Details

Name:	00000008.00000000.701098268.00000000001A0000.00000002.00020000.sdmp
TargetID:	8
Dumpstage:	process new
Regiontype:	unkown image
Protect:	page readonly
Base address:	1A0000
Size:	16384

Details

Name:	00000008.00000003.715191142.00000000022BD000.00000004.00000001.sdmp
TargetID:	8
Dumpstage:	free memory
Regiontype:	unkown
Protect:	page read and write
Base address:	22BD000
Size:	16384

Details

Name:	00000000.00000002.732834643.0000000002FCA000.00000004.00000001.sdmp
TargetID:	0
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	2FCA000
Size:	1728512

Details

Name:	00000005.00000002.933180087.0000000006FE8000.00000004.00000001.sdmp
TargetID:	5
Dumpstage:	process exit
Regiontype:	unkown
Protect:	page read and write
Base address:	6FE8000
Size:	4096

Details

Name:	00000000.00000000.698445621.0000000000F10000.00000004.00000020.sdmp
TargetID:	0
Dumpstage:	process new
Regiontype:	heap default
Protect:	page read and write
Base address:	F10000
Size:	94208

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

IOC Report

Files

Processes

URLs

Registry

Memdumps