Detects suspicious use of XORDump process memory dumping utility
Read the full analysis on IntelFusions